Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e37332e3138382e302f32322d3234203d3e203238313436.roa
File:                     3137372e37332e3138382e302f32322d3234203d3e203238313436.roa (raw, json)
Hash identifier:          OQgbPWhz2zATvKvQ9gSmNfrisV5MarFmSc4qVjsJ7Sw=
Subject key identifier:   1B:C5:07:78:B0:B9:31:26:E8:50:B1:30:AC:B1:F0:73:DC:D5:7E:78
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       176921D5D87BE262F26849260DB3CF680F42FCB2
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e37332e3138382e302f32322d3234203d3e203238313436.roa
Signing time:             Mon 13 Apr 2026 13:48:37 +0000
ROA not before:           Mon 13 Apr 2026 13:43:37 +0000
ROA not after:            Mon 12 Apr 2027 13:48:37 +0000
asID:                     28146
IP address blocks:        177.73.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 23:44:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:69:21:d5:d8:7b:e2:62:f2:68:49:26:0d:b3:cf:68:0f:42:fc:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: Apr 13 13:43:37 2026 GMT
            Not After : Apr 12 13:48:37 2027 GMT
        Subject: CN=1BC50778B0B93126E850B130ACB1F073DCD57E78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:74:fe:65:93:09:5f:4d:d8:83:d4:d6:2e:dc:
                    64:8c:74:71:fd:e6:ab:e5:43:d0:6f:7c:c3:61:26:
                    ff:b1:a2:55:37:9d:52:ad:8e:a3:85:32:75:38:ca:
                    a5:80:50:c3:06:e8:46:41:56:02:7e:ab:51:5d:3a:
                    55:9a:60:fd:82:57:cb:44:ff:0f:d8:ef:e3:37:9b:
                    f0:48:78:e0:42:6d:67:bb:fc:9b:f0:eb:33:80:2d:
                    f0:a9:10:10:37:d3:94:65:5f:07:6b:9a:df:ea:f1:
                    23:f5:27:d5:28:67:ea:bf:db:f9:0e:96:1f:4a:a3:
                    29:48:5b:35:9d:a0:fe:2f:5e:2a:42:e9:ee:81:56:
                    38:5a:c1:b3:67:ad:b8:a2:6f:62:9c:ae:4b:0e:ed:
                    14:05:9b:37:0a:63:84:4f:52:d0:65:cb:da:b0:57:
                    71:6c:2f:06:31:13:b2:01:fb:ef:88:a5:89:2c:63:
                    fd:22:c0:c6:7c:2d:8b:65:93:3a:94:13:99:c6:b8:
                    68:b4:b4:91:ab:fd:b2:4d:f8:1e:8b:a1:35:66:1a:
                    4a:4c:94:1b:21:83:36:2b:2a:ae:b6:1d:7b:99:de:
                    e9:03:10:c8:a7:0f:b1:21:86:b8:f1:71:83:1b:77:
                    1d:d0:cf:a6:90:5b:9f:04:f2:eb:d7:e6:c9:57:6e:
                    33:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C5:07:78:B0:B9:31:26:E8:50:B1:30:AC:B1:F0:73:DC:D5:7E:78
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e37332e3138382e302f32322d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:bc:d4:0d:b2:fe:f5:2b:f0:83:0a:24:c4:5d:74:dc:1b:fe:
         88:65:cd:a4:d6:b5:99:ab:75:bf:1c:91:d4:ff:e1:8b:39:d0:
         80:3c:78:c4:60:5d:9a:d8:9a:b1:f9:2d:b3:fc:49:1c:3a:9a:
         0b:dc:6b:e4:7e:c3:a2:00:55:61:0b:c2:18:6a:60:f0:e2:69:
         d8:15:1c:73:31:de:e7:b1:8b:49:84:be:bc:f0:2b:61:d4:9e:
         00:9d:48:3d:56:7e:23:c2:7f:d7:d5:82:17:d6:6d:9d:55:47:
         a3:6b:d6:9f:41:95:b3:8b:e6:ca:a3:0c:9a:0e:2b:0d:34:cc:
         a1:4f:07:61:73:58:02:dc:4f:3c:a1:0a:8d:d4:d2:cf:00:30:
         39:59:2a:02:7d:49:7b:b0:81:a6:b0:76:8c:59:88:47:83:97:
         fa:60:5e:ee:f3:ad:e1:5a:7e:12:cc:67:42:c7:d2:a1:57:9f:
         11:28:b2:df:c7:a3:ee:6d:f3:c3:7a:b7:bf:32:44:60:73:ec:
         bf:9a:1d:a9:be:a8:19:96:33:cc:0a:9c:e3:ea:42:27:f4:70:
         d8:96:dc:4f:0f:ff:c6:d9:d1:04:af:25:2f:31:3a:99:de:9f:
         fd:79:94:a3:a4:19:43:43:9a:83:35:d5:ff:10:e5:0d:07:ab:
         20:b5:9e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:13:54 2026 by rpki-client