Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e37352e3132382e302f32302d3234203d3e203238313436.roa
File:                     3137372e37352e3132382e302f32302d3234203d3e203238313436.roa (raw, json)
Hash identifier:          hVNsrJJIE2/gROcZOtay19l0NhmJCcdZFpctAhopHAM=
Subject key identifier:   FD:BC:25:4A:E1:B1:AE:63:93:1D:3A:54:92:DF:1C:C7:18:AA:93:65
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       3030CBE39B12978C45E3B2E245A85839D4E29A06
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e37352e3132382e302f32302d3234203d3e203238313436.roa
Signing time:             Mon 13 Apr 2026 13:48:36 +0000
ROA not before:           Mon 13 Apr 2026 13:43:36 +0000
ROA not after:            Mon 12 Apr 2027 13:48:36 +0000
asID:                     28146
IP address blocks:        177.75.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 23:44:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:30:cb:e3:9b:12:97:8c:45:e3:b2:e2:45:a8:58:39:d4:e2:9a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: Apr 13 13:43:36 2026 GMT
            Not After : Apr 12 13:48:36 2027 GMT
        Subject: CN=FDBC254AE1B1AE63931D3A5492DF1CC718AA9365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:55:7f:66:56:0b:87:f1:ce:77:6a:36:fd:a9:
                    d6:20:2b:b9:19:8a:8c:24:2d:e7:9c:e3:36:87:eb:
                    1b:3b:61:ce:3b:70:9b:8a:20:bc:7d:9d:31:26:7f:
                    0d:cf:7d:97:09:2c:bb:41:da:dc:d9:10:a8:91:a8:
                    f9:63:90:0d:b6:4e:ac:7b:b1:3b:2d:06:f8:e5:50:
                    ba:90:67:76:76:ee:e7:43:e4:77:cb:1b:fa:c5:4d:
                    26:1a:bb:2c:c0:88:e6:e4:67:5d:fd:a7:3d:3f:42:
                    36:0e:2a:e9:f2:cc:7e:90:92:ce:1b:ce:b7:d8:4a:
                    40:c3:50:ce:87:be:62:0e:4c:eb:ac:c1:18:46:cf:
                    8c:21:3a:60:34:9f:3f:86:dd:f3:cb:e4:4c:cb:96:
                    93:91:b2:f7:a9:b8:76:e8:9e:cd:93:a3:f2:19:dc:
                    6f:c4:1a:c5:67:ba:d1:88:93:00:3e:73:eb:95:7f:
                    51:5c:00:1d:2f:a2:f7:4f:b0:84:53:cd:b6:58:88:
                    f4:cb:89:5d:d6:c4:6e:10:a7:61:7b:76:92:0c:93:
                    9f:a4:81:84:50:b2:9c:a8:71:36:4b:e6:30:84:94:
                    93:1d:13:5b:b1:d0:b6:ff:54:64:96:4e:93:d0:ed:
                    14:8d:d8:fb:6c:a7:30:6b:52:80:7b:77:1b:7f:e3:
                    99:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BC:25:4A:E1:B1:AE:63:93:1D:3A:54:92:DF:1C:C7:18:AA:93:65
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e37352e3132382e302f32302d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         12:41:d8:24:dc:41:bb:80:38:99:67:a6:39:32:6f:9d:d4:ea:
         47:6e:03:c3:bd:1c:d5:bb:16:af:ec:3a:20:b9:32:0c:c9:2c:
         71:36:f0:9a:1e:96:b0:c0:32:fd:cd:c3:da:d0:17:01:2c:7b:
         2d:e7:3a:d6:a9:09:e9:a7:5c:ff:5e:cb:8f:f8:45:71:b7:29:
         e5:aa:7c:56:9f:a6:d2:4d:d9:b3:2d:03:45:6d:86:bd:bd:8e:
         85:52:82:9f:36:51:2c:82:e9:86:d5:66:5c:b7:cd:77:dc:cb:
         45:2b:58:1f:66:ab:21:81:aa:9e:d4:ec:09:41:cd:48:85:43:
         a1:69:0f:2b:f6:80:e4:70:f3:fd:2b:6e:60:6b:35:ac:70:a5:
         c9:25:f6:eb:36:2b:d1:d7:a9:0a:c8:35:e5:57:0e:c4:aa:87:
         d3:cc:fd:79:e1:40:ac:32:30:3c:84:cd:44:19:7b:a8:2d:f0:
         30:33:c0:55:ba:82:67:a9:2d:c4:8c:bf:1c:c9:d2:26:d0:d9:
         08:a7:de:ac:ea:dd:b7:40:0f:ec:ca:18:ae:ab:ff:ca:ba:a8:
         4d:8d:74:61:03:4b:ab:df:e6:46:23:11:78:10:20:ee:c6:4e:
         5c:34:1e:ce:4d:2e:9d:d7:52:75:ec:93:b3:f5:87:28:22:87:
         86:82:64:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:09:32 2026 by rpki-client