Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3138372e36322e37322e302f32322d3234203d3e203532353634.roa
File:                     3138372e36322e37322e302f32322d3234203d3e203532353634.roa (raw, json)
Hash identifier:          dQTraHSTFnuCJQgygfyfPt5POMDiJBfC6ET5lXnmCqc=
Subject key identifier:   24:8F:E0:73:76:29:33:8B:E4:27:F5:B7:2D:C2:C2:46:72:07:11:0E
Certificate issuer:       /CN=73D43FEADED592156D29C67CCC13A030541CD25A
Certificate serial:       4E2F56B29B9A497F254861E789BBA821DF93262A
Authority key identifier: 73:D4:3F:EA:DE:D5:92:15:6D:29:C6:7C:CC:13:A0:30:54:1C:D2:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73D43FEADED592156D29C67CCC13A030541CD25A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3138372e36322e37322e302f32322d3234203d3e203532353634.roa
Signing time:             Sat 18 Apr 2026 00:56:41 +0000
ROA not before:           Sat 18 Apr 2026 00:51:41 +0000
ROA not after:            Sat 17 Apr 2027 00:56:41 +0000
asID:                     52564
IP address blocks:        187.62.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.crl
                          rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73D43FEADED592156D29C67CCC13A030541CD25A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 01:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:2f:56:b2:9b:9a:49:7f:25:48:61:e7:89:bb:a8:21:df:93:26:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73D43FEADED592156D29C67CCC13A030541CD25A
        Validity
            Not Before: Apr 18 00:51:41 2026 GMT
            Not After : Apr 17 00:56:41 2027 GMT
        Subject: CN=248FE0737629338BE427F5B72DC2C2467207110E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:04:84:d3:13:7f:8e:68:3b:46:d9:34:1a:50:
                    fb:ed:be:14:56:23:79:32:27:df:75:1e:58:24:03:
                    a2:bf:c4:d8:5c:e1:de:57:ca:bc:ba:ef:58:19:de:
                    35:24:3a:93:26:5c:68:89:77:9d:2f:d4:01:eb:43:
                    dc:74:28:10:87:b0:91:13:03:9b:53:e0:cb:f8:98:
                    12:73:db:ce:df:0b:32:fd:11:99:c2:ea:34:51:8a:
                    5e:a3:c3:23:18:dd:9f:24:44:bf:33:ac:d6:92:ef:
                    05:c6:10:68:da:e1:d4:b6:b8:2f:8d:ff:e1:f4:b0:
                    18:e0:b0:cb:11:c8:32:19:82:e3:ed:eb:11:93:d2:
                    14:77:14:8c:8d:fd:c2:c9:f7:42:22:67:70:f0:80:
                    f8:3b:81:42:fb:3c:d5:e6:99:55:26:12:5a:98:a2:
                    c3:49:2b:02:bd:69:c1:28:41:5c:50:98:0e:6b:75:
                    42:15:c8:38:4c:61:cf:16:fc:04:ec:4a:86:54:34:
                    59:7a:5b:96:0a:e5:22:0c:e4:4e:16:e2:57:76:05:
                    27:ed:da:6b:98:86:33:e1:13:1a:37:3d:05:9a:f0:
                    55:db:4a:5b:4b:ab:75:3d:d1:e8:ae:60:c5:bf:c0:
                    0e:4b:ba:08:af:cd:5e:67:83:29:02:9b:8a:f9:45:
                    ea:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8F:E0:73:76:29:33:8B:E4:27:F5:B7:2D:C2:C2:46:72:07:11:0E
            X509v3 Authority Key Identifier:
                keyid:73:D4:3F:EA:DE:D5:92:15:6D:29:C6:7C:CC:13:A0:30:54:1C:D2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73D43FEADED592156D29C67CCC13A030541CD25A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3138372e36322e37322e302f32322d3234203d3e203532353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:07:53:44:b3:85:35:07:01:e3:e8:5c:ff:b4:8b:e2:ce:47:
         60:4f:a8:4c:de:0a:11:2f:ad:24:38:7a:c7:49:87:e0:31:24:
         1a:8e:94:17:69:71:b7:a3:73:64:0f:1b:8f:a0:72:de:e4:17:
         a9:c0:5d:28:9e:6a:a4:e8:03:dd:9c:85:9a:a6:0a:76:39:4b:
         b7:3e:de:4b:fa:d8:73:be:be:38:ee:32:17:fd:36:03:89:0a:
         2d:2a:7e:e3:6b:14:0c:ea:04:cf:6b:f7:2e:2b:53:27:0c:ef:
         78:b5:e3:30:10:b7:2b:c8:cb:25:b9:e9:61:55:bb:02:da:93:
         7c:c7:55:59:4b:ed:31:46:ae:77:ed:af:20:79:b9:ee:e7:91:
         2a:d9:af:be:90:a8:a7:71:f6:e2:a7:bf:88:f8:34:cb:6e:ed:
         45:2e:4d:e4:f0:2f:cd:7c:25:1c:8c:7e:c8:71:0e:5c:29:cc:
         5c:9e:85:e1:be:ae:53:0d:49:62:50:e0:12:af:77:69:0f:23:
         a5:82:7b:25:b3:24:d4:c5:26:d0:59:d1:41:5c:b9:eb:a3:8d:
         04:37:3a:dd:99:e1:9d:c7:d7:09:b2:b1:04:7a:ad:ab:e5:79:
         c5:66:6c:d3:88:3c:aa:9a:12:06:d3:bc:8c:8a:f5:75:d4:c8:
         e2:45:17:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:28:24 2026 by rpki-client