Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3134302e302f32342d3234203d3e203533303138.roa
File:                     3137372e37322e3134302e302f32342d3234203d3e203533303138.roa (raw, json)
Hash identifier:          Pxrck0zL57GC1sHdjDse2C9Dx2IEWClE1cadPm381ZQ=
Subject key identifier:   1F:AB:BD:BD:9B:B5:48:4D:EC:2F:23:4D:C2:5F:EC:BF:B1:C5:8C:39
Certificate issuer:       /CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
Certificate serial:       3406349A439E1645784936DEABAE840D5193AE20
Authority key identifier: A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3134302e302f32342d3234203d3e203533303138.roa
Signing time:             Wed 10 Jun 2026 10:31:48 +0000
ROA not before:           Wed 10 Jun 2026 10:26:48 +0000
ROA not after:            Wed 09 Jun 2027 10:31:48 +0000
asID:                     53018
IP address blocks:        177.72.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 05:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:06:34:9a:43:9e:16:45:78:49:36:de:ab:ae:84:0d:51:93:ae:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
        Validity
            Not Before: Jun 10 10:26:48 2026 GMT
            Not After : Jun  9 10:31:48 2027 GMT
        Subject: CN=1FABBDBD9BB5484DEC2F234DC25FECBFB1C58C39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a7:dd:a7:d8:ca:79:05:61:8c:d5:4f:04:c1:
                    2b:23:48:e7:3b:66:57:e4:18:94:3d:3e:8e:a8:59:
                    5e:34:3c:71:01:b6:a7:1a:8a:a1:bf:9a:d3:c3:c3:
                    b8:ee:67:08:34:ac:ea:16:11:ce:27:06:42:f2:3c:
                    b2:92:98:a6:41:6c:e9:80:d4:18:41:84:a4:f8:31:
                    f7:73:85:74:7e:a3:b2:87:ad:a4:67:2f:d3:3b:b2:
                    67:c0:22:3d:eb:ed:73:b8:e5:83:a5:05:f6:a9:8f:
                    4d:74:0e:2b:76:6a:c4:d2:95:43:0e:65:79:57:eb:
                    89:79:62:d8:a3:2c:e9:6e:4e:82:d5:6b:8d:db:52:
                    bd:d1:dd:24:0d:e0:84:c6:eb:36:b0:78:a2:ff:e2:
                    ab:73:d6:ad:c7:78:2d:90:87:99:c8:dc:f4:c0:50:
                    21:7a:32:44:16:a1:be:a3:cb:7c:b2:4b:b5:78:08:
                    4a:49:7d:16:b1:81:81:64:b2:7e:4a:0a:aa:7a:00:
                    a5:d1:71:34:10:c8:3b:23:af:5f:83:2d:f2:9a:01:
                    50:59:5c:ea:60:84:ee:2e:d6:c2:a5:23:8a:71:0e:
                    b8:a1:20:a2:5f:27:b8:f0:e0:a4:d9:2e:42:c7:fb:
                    05:71:f3:36:74:b8:eb:fa:96:30:b0:fa:6b:b8:44:
                    01:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AB:BD:BD:9B:B5:48:4D:EC:2F:23:4D:C2:5F:EC:BF:B1:C5:8C:39
            X509v3 Authority Key Identifier:
                keyid:A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3134302e302f32342d3234203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:b1:c3:d2:b7:ec:d1:d3:db:a6:16:94:8f:c2:a6:cc:25:2b:
         ae:b1:b3:f3:fe:97:25:77:2a:d2:9e:52:7e:75:70:57:39:e0:
         57:09:8e:70:c1:0f:20:39:ec:a1:ba:e6:ac:80:8c:5e:1e:e0:
         f6:fe:19:18:10:ec:23:60:89:b3:54:44:05:bc:9f:2c:ac:e7:
         42:8a:97:72:ff:ac:92:f4:65:24:52:14:a9:0c:00:77:a0:92:
         1b:fa:76:9f:2a:84:53:c6:fd:82:c2:0f:e6:ee:71:55:7d:67:
         53:85:68:81:5b:27:9f:57:81:61:aa:0c:53:7b:cf:15:aa:88:
         46:cd:7c:ad:76:83:7b:cc:04:25:d6:81:91:6e:02:1b:9d:97:
         0c:c1:1e:35:4f:b1:fb:2f:d9:d4:76:93:82:5f:4b:64:03:f2:
         af:7e:ed:8b:8a:51:62:5d:20:ef:7c:ed:75:6e:9b:65:ec:8c:
         82:5d:cd:31:f0:de:ba:80:93:fa:1d:92:26:52:11:ac:e0:2e:
         3a:83:28:2c:86:8b:cd:89:89:dc:88:1e:6f:32:eb:ff:95:80:
         ac:93:6c:b4:9b:4e:8b:03:18:a8:f5:a4:a1:ec:81:ca:f6:e1:
         85:e4:2b:55:6d:18:ea:a0:f7:30:47:48:9c:9e:9e:67:18:b9:
         fa:ed:63:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:33:59 2026 by rpki-client