Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133312e302f32342d3234203d3e203533303138.roa
File:                     3137372e37322e3133312e302f32342d3234203d3e203533303138.roa (raw, json)
Hash identifier:          W1azDr8Ad6OE6fxgHc1hW5F9TC1cYkIEAlgCoqHoAiM=
Subject key identifier:   9D:9B:37:41:29:0C:73:73:D6:E4:BB:EC:36:FB:27:BE:50:E3:F7:16
Certificate issuer:       /CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
Certificate serial:       6DAEC14ABDFC34AD2C7CC26F941F5487853FAC3B
Authority key identifier: A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133312e302f32342d3234203d3e203533303138.roa
Signing time:             Wed 10 Jun 2026 10:35:01 +0000
ROA not before:           Wed 10 Jun 2026 10:30:01 +0000
ROA not after:            Wed 09 Jun 2027 10:35:01 +0000
asID:                     53018
IP address blocks:        177.72.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 05:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ae:c1:4a:bd:fc:34:ad:2c:7c:c2:6f:94:1f:54:87:85:3f:ac:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
        Validity
            Not Before: Jun 10 10:30:01 2026 GMT
            Not After : Jun  9 10:35:01 2027 GMT
        Subject: CN=9D9B3741290C7373D6E4BBEC36FB27BE50E3F716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:60:05:d2:1f:83:1a:66:4a:0d:c3:01:78:48:
                    a2:f1:62:c3:50:dc:4d:a3:a8:1b:f4:06:99:3d:a2:
                    a4:e2:64:c7:2e:9d:31:85:f2:f7:14:ff:f5:96:59:
                    7d:14:05:51:16:13:84:0c:4b:18:b6:3a:42:f7:17:
                    e4:e4:72:46:db:20:39:43:e3:f4:bb:df:e7:e7:2b:
                    71:6f:a1:23:4f:c8:46:32:43:87:8b:6c:ad:43:18:
                    6f:79:45:39:71:29:39:9e:83:a7:54:5b:96:d9:83:
                    1e:06:34:ea:45:dd:42:2d:da:6d:eb:32:94:2c:b5:
                    f0:6d:58:a5:fa:a4:05:62:fa:7e:e3:a7:44:97:53:
                    30:50:20:35:1d:fe:90:2b:ef:03:1b:69:a9:7c:bb:
                    c9:d6:d3:5e:2f:53:c3:fb:12:c4:e2:54:09:1c:6a:
                    68:b6:4a:5b:8e:a6:49:18:b1:22:a7:94:ff:7f:18:
                    92:4c:a4:e9:b5:84:81:99:2a:7e:ca:a2:1d:52:55:
                    2f:29:23:6a:9e:e7:11:23:1b:09:02:a3:45:ce:13:
                    29:3f:6d:b7:5d:8c:c0:42:45:e1:0b:eb:cd:61:5a:
                    ed:dc:11:23:a2:9a:fb:a4:f9:82:00:97:a6:da:ba:
                    12:2a:ad:94:3f:56:72:a8:d0:6d:20:cd:a2:88:62:
                    40:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9B:37:41:29:0C:73:73:D6:E4:BB:EC:36:FB:27:BE:50:E3:F7:16
            X509v3 Authority Key Identifier:
                keyid:A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133312e302f32342d3234203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:cb:18:eb:e9:c0:01:8d:93:bd:ce:d7:70:fc:a7:e5:73:61:
         2a:70:8a:69:f8:63:e9:d0:96:e7:1c:1b:16:af:a0:7a:f9:4c:
         40:35:6f:13:72:e6:bf:ab:ea:52:7c:82:92:c7:71:c7:db:d5:
         df:f7:e3:13:4e:e0:66:80:ce:0e:27:ef:0e:5a:fa:99:70:37:
         a9:86:54:15:17:9a:ba:08:18:e7:2e:1f:da:42:d5:60:ac:7e:
         4e:a8:a4:71:2d:01:e2:de:49:1e:39:ea:7f:cf:38:72:28:f3:
         f8:1d:1c:36:c7:92:be:3d:3c:60:2e:31:48:00:40:3c:2f:57:
         ea:2b:90:30:22:25:22:29:5f:e3:1a:72:d9:3d:86:b5:0d:05:
         8e:32:e4:98:d1:d8:a6:20:dd:b5:ca:10:b6:d6:c8:5c:d1:ec:
         d7:39:f3:f5:67:39:da:a6:e3:03:15:22:28:ef:c8:10:1c:76:
         0e:6e:a2:5b:12:83:7d:f2:cb:1d:ce:18:73:01:9f:8d:7b:dd:
         3c:af:ed:45:a6:54:04:79:dc:a6:bc:44:01:db:2e:42:4a:47:
         e6:a5:52:f2:75:5c:f3:33:ad:ca:61:ef:63:ca:7d:53:1b:dd:
         0e:8f:cc:99:95:5a:14:36:e4:47:74:ac:db:ae:59:94:f5:00:
         51:2c:3d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:34:08 2026 by rpki-client