Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133372e302f32342d3234203d3e203533303138.roa
File:                     3137372e37322e3133372e302f32342d3234203d3e203533303138.roa (raw, json)
Hash identifier:          tbxf4N9YLbeaRUdoMBPSXY9NUxFvmFaqpSRaIFf8/AI=
Subject key identifier:   D8:F3:6D:1A:23:95:9C:BB:3C:43:C6:D8:C2:A9:E4:61:8F:09:7E:D7
Certificate issuer:       /CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
Certificate serial:       657B63FABE607D6FA34953F09CDC869943F0B826
Authority key identifier: A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133372e302f32342d3234203d3e203533303138.roa
Signing time:             Wed 10 Jun 2026 10:30:28 +0000
ROA not before:           Wed 10 Jun 2026 10:25:28 +0000
ROA not after:            Wed 09 Jun 2027 10:30:28 +0000
asID:                     53018
IP address blocks:        177.72.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 05:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:7b:63:fa:be:60:7d:6f:a3:49:53:f0:9c:dc:86:99:43:f0:b8:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
        Validity
            Not Before: Jun 10 10:25:28 2026 GMT
            Not After : Jun  9 10:30:28 2027 GMT
        Subject: CN=D8F36D1A23959CBB3C43C6D8C2A9E4618F097ED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:64:c1:2d:bd:84:fd:a7:28:79:1b:a9:84:39:
                    f3:33:e0:e5:4e:52:f3:a4:4b:15:ff:60:63:22:cf:
                    5b:86:c9:fc:f8:a0:38:be:bf:16:4b:ba:be:6b:cf:
                    cd:05:6d:05:8b:49:fc:ec:26:18:cf:4e:38:32:ea:
                    94:d0:6a:4b:2c:a0:12:7a:0f:e1:c8:e5:db:16:f4:
                    3c:99:e6:91:67:c4:bc:63:d3:60:d1:29:f3:31:ab:
                    57:2c:52:f2:8c:2d:d5:c7:f2:1e:32:af:80:61:5e:
                    a7:90:48:77:87:eb:b2:8c:f5:67:61:44:e1:fd:1c:
                    28:41:9e:cc:b0:ca:8f:44:98:8b:76:7d:ac:85:ff:
                    01:c1:d7:60:35:82:d8:94:6b:0a:0c:05:2c:24:76:
                    6e:0f:64:49:54:7e:70:fb:28:5d:bf:e9:09:c7:7d:
                    55:c7:a4:0a:13:8e:90:72:ff:bb:95:32:b6:5b:b0:
                    14:96:ee:a8:c3:70:a8:55:00:a0:1e:9b:51:b0:b2:
                    0a:de:3f:9d:98:fd:0f:37:50:34:ec:bd:1f:b4:75:
                    a7:63:b8:50:10:aa:9a:ee:44:47:c2:a3:48:df:cf:
                    3d:fb:73:f2:29:22:c7:d5:7c:e6:f0:bd:ba:2c:1a:
                    bb:77:3a:e7:0a:75:2a:5d:16:ba:f3:3b:cc:2e:4e:
                    f2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F3:6D:1A:23:95:9C:BB:3C:43:C6:D8:C2:A9:E4:61:8F:09:7E:D7
            X509v3 Authority Key Identifier:
                keyid:A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133372e302f32342d3234203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:be:8d:f9:02:e5:1e:61:b3:94:89:9f:de:60:a4:44:7a:a2:
         74:96:ce:19:09:e3:d9:dc:2f:7a:74:79:44:82:c2:b6:d2:aa:
         58:a7:3c:93:a1:d3:0b:74:79:bd:03:b9:76:be:a0:c8:ca:75:
         99:85:bf:1f:e6:d4:0a:f0:50:2a:ee:17:c9:ac:ad:b2:6f:bb:
         dc:72:f0:d3:32:19:cc:18:00:3c:23:42:b3:7c:74:92:2e:92:
         2a:37:54:03:91:56:d2:46:81:c4:a6:3f:7e:3b:07:8e:09:38:
         19:55:48:63:04:34:e4:88:2a:27:06:0b:05:39:20:3f:98:bb:
         92:19:00:1c:e5:20:64:a8:4d:a9:e8:d7:98:2f:fb:79:d8:69:
         5a:19:19:85:6e:93:81:37:28:dd:9f:80:3b:17:05:97:c6:6e:
         ce:48:a3:76:f1:a0:f7:70:42:63:fb:29:5d:80:bc:c3:36:06:
         48:19:86:45:4f:41:71:65:d7:bf:92:c5:19:3d:84:c5:a4:2f:
         ae:06:8d:34:7a:b5:7c:ea:2a:7c:0f:02:4d:5c:61:79:7a:46:
         6d:cd:28:7c:4d:cd:7a:bf:01:09:b7:db:56:2b:05:1b:3c:2f:
         37:4f:0a:d2:12:11:26:20:5f:43:f3:8a:fe:3d:3c:60:b1:d9:
         7e:6e:11:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:34:03 2026 by rpki-client