Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133382e302f32342d3234203d3e203533303138.roa
File:                     3137372e37322e3133382e302f32342d3234203d3e203533303138.roa (raw, json)
Hash identifier:          1e/SS2YSJF85pUqlYry01E3Gjx7+HQvLURC8PW929uM=
Subject key identifier:   F4:F4:74:9A:5B:A8:90:CB:79:70:6A:38:B4:2B:89:2C:78:96:0A:EB
Certificate issuer:       /CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
Certificate serial:       63292C35393ABE663DFFAAEF84E7878FDBC4CA27
Authority key identifier: A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133382e302f32342d3234203d3e203533303138.roa
Signing time:             Wed 10 Jun 2026 10:29:03 +0000
ROA not before:           Wed 10 Jun 2026 10:24:03 +0000
ROA not after:            Wed 09 Jun 2027 10:29:03 +0000
asID:                     53018
IP address blocks:        177.72.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 05:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:29:2c:35:39:3a:be:66:3d:ff:aa:ef:84:e7:87:8f:db:c4:ca:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
        Validity
            Not Before: Jun 10 10:24:03 2026 GMT
            Not After : Jun  9 10:29:03 2027 GMT
        Subject: CN=F4F4749A5BA890CB79706A38B42B892C78960AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d0:dd:3b:71:7d:38:88:68:44:ef:ac:24:2e:
                    04:7e:64:f7:e3:8e:37:00:33:a5:a9:f5:89:ca:5f:
                    64:76:02:cc:bc:02:f6:39:e4:9e:04:30:81:dc:b9:
                    80:94:ef:f8:69:5a:c5:dd:c9:2f:d7:04:ce:3e:b2:
                    eb:de:71:29:b0:59:12:64:ca:13:34:66:db:0f:f8:
                    16:d3:2f:d4:05:d2:74:fb:cd:9a:d5:c2:86:f1:d0:
                    50:96:1a:25:7f:c6:17:75:a4:78:35:67:36:a0:77:
                    9a:a8:b6:db:31:46:1d:4c:fd:e6:92:cd:6b:ea:96:
                    02:4b:ea:62:55:e2:23:ba:6d:e0:f1:cf:23:e6:77:
                    65:25:95:e1:d7:50:bd:ff:8c:0b:aa:b5:0d:24:63:
                    f4:b0:3e:e6:22:7e:83:b3:69:0c:79:ac:11:4c:6c:
                    0a:61:1d:5c:0a:0b:b4:52:06:0d:2f:6f:7a:79:6b:
                    be:8c:28:73:a4:f2:4e:0a:9b:15:08:95:c1:d4:7a:
                    d7:76:b3:92:65:22:68:33:3b:7c:bd:31:13:70:a6:
                    a3:9a:09:89:bf:2c:17:d1:62:83:4c:4b:33:55:34:
                    a1:da:8f:43:4a:c0:c7:54:59:ef:41:1e:e4:86:49:
                    8c:38:40:a9:9b:46:67:f2:90:12:b9:59:4d:05:b6:
                    21:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F4:74:9A:5B:A8:90:CB:79:70:6A:38:B4:2B:89:2C:78:96:0A:EB
            X509v3 Authority Key Identifier:
                keyid:A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133382e302f32342d3234203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:b4:1b:c9:ab:23:60:18:61:c7:6d:bf:f2:1e:5a:9d:43:8f:
         0b:23:ba:c3:6b:00:51:61:b6:35:d9:1e:06:de:3e:fb:d8:dc:
         8f:e6:24:6b:7e:a9:b5:00:f0:a4:5f:86:61:31:d3:fc:31:24:
         ce:6a:16:6a:e8:38:d4:94:9b:0c:1e:b4:0f:10:a5:87:9e:93:
         7e:61:6e:d4:e7:ed:54:b4:73:6e:06:ea:82:82:62:d8:3e:3b:
         32:27:d4:3b:60:ca:cc:6a:75:1c:f9:f2:57:f3:b1:34:0c:98:
         df:02:7e:99:c5:d0:01:89:45:56:2f:a2:13:90:48:83:37:87:
         35:94:6f:82:ba:16:17:65:5e:5a:13:15:09:33:3f:aa:f1:b9:
         0a:87:c2:c7:0d:3c:40:94:89:0d:74:40:b1:b8:3d:64:75:05:
         15:e7:cc:fd:f2:fe:c6:31:a6:c5:72:f6:b4:7e:2d:8d:10:0e:
         9d:eb:9e:62:82:f5:66:81:fa:a1:d1:69:b7:7a:4e:0a:ce:04:
         4c:16:0a:d1:09:0f:df:ca:ad:32:76:22:18:f5:0c:1d:69:d9:
         81:31:3f:99:4f:b3:43:b3:33:b0:e1:83:f3:c1:9d:bb:79:0e:
         d8:7b:81:dc:7f:18:1e:18:66:f6:21:66:9a:8f:c8:2c:e5:4a:
         e0:1e:88:7c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYyksNTk6vmY9/6rvhOeHj9vEyicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU0NEREMkFBNTIwOThCRkI4N0JBNTc5MTRBQjk0MDBF
QUVFNEZDMDAeFw0yNjA2MTAxMDI0MDNaFw0yNzA2MDkxMDI5MDNaMDMxMTAvBgNV
BAMTKEY0RjQ3NDlBNUJBODkwQ0I3OTcwNkEzOEI0MkI4OTJDNzg5NjBBRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm0N07cX04iGhE76wkLgR+ZPfj
jjcAM6Wp9YnKX2R2Asy8AvY55J4EMIHcuYCU7/hpWsXdyS/XBM4+suvecSmwWRJk
yhM0ZtsP+BbTL9QF0nT7zZrVwobx0FCWGiV/xhd1pHg1Zzagd5qottsxRh1M/eaS
zWvqlgJL6mJV4iO6beDxzyPmd2UlleHXUL3/jAuqtQ0kY/SwPuYifoOzaQx5rBFM
bAphHVwKC7RSBg0vb3p5a76MKHOk8k4KmxUIlcHUetd2s5JlImgzO3y9MRNwpqOa
CYm/LBfRYoNMSzNVNKHaj0NKwMdUWe9BHuSGSYw4QKmbRmfykBK5WU0FtiGfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9PR0mluokMt5cGo4tCuJLHiWCuswHwYDVR0j
BBgwFoAUpUTdKqUgmL+4e6V5FKuUAOruT8AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0U3Tk1BUnBnM2NQYzN0VVprRk1yS3pSdEdiNVJIdHlCR3B6dEZWV011
SmYvMS9BNTQ0REQyQUE1MjA5OEJGQjg3QkE1NzkxNEFCOTQwMEVBRUU0RkMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NDRERDJBQTUyMDk4QkZC
ODdCQTU3OTE0QUI5NDAwRUFFRTRGQzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdFN05NQVJwZzNjUGMzdFVaa0ZNckt6UnRHYjVSSHR5QkdwenRGVldNdUpmLzEv
MzEzNzM3MmUzNzMyMmUzMTMzMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzAzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsUiKMA0GCSqGSIb3DQEBCwUAA4IBAQBItBvJqyNg
GGHHbb/yHlqdQ48LI7rDawBRYbY12R4G3j772NyP5iRrfqm1APCkX4ZhMdP8MSTO
ahZq6DjUlJsMHrQPEKWHnpN+YW7U5+1UtHNuBuqCgmLYPjsyJ9Q7YMrManUc+fJX
87E0DJjfAn6ZxdABiUVWL6ITkEiDN4c1lG+CuhYXZV5aExUJMz+q8bkKh8LHDTxA
lIkNdECxuD1kdQUV58z98v7GMabFcva0fi2NEA6d655igvVmgfqh0Wm3ek4KzgRM
FgrRCQ/fyq0ydiIY9QwdadmBMT+ZT7NDszOw4YPzwZ27eQ7Ye4HcfxgeGGb2IWaa
j8gs5UrgHoh8
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:34:04 2026 by rpki-client