Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/3133312e37322e34302e302f32322d3234203d3e203631373233.roa
File:                     3133312e37322e34302e302f32322d3234203d3e203631373233.roa (raw, json)
Hash identifier:          E3JHROUoJ7vAPeHoLTyweyfGQsFsPL0zwGCL1dNNDS8=
Subject key identifier:   70:EB:77:4A:72:2C:EB:3E:D2:A9:54:2C:D2:3C:9D:5E:58:1C:6D:E5
Certificate issuer:       /CN=BDA8155409B4D88DBCFF1BB4FD33D7536CE47AB2
Certificate serial:       44EB05F409A793797505C74547D3480F3B0FC65A
Authority key identifier: BD:A8:15:54:09:B4:D8:8D:BC:FF:1B:B4:FD:33:D7:53:6C:E4:7A:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDA8155409B4D88DBCFF1BB4FD33D7536CE47AB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/3133312e37322e34302e302f32322d3234203d3e203631373233.roa
Signing time:             Wed 15 Apr 2026 04:05:50 +0000
ROA not before:           Wed 15 Apr 2026 04:00:50 +0000
ROA not after:            Wed 14 Apr 2027 04:05:50 +0000
asID:                     61723
IP address blocks:        131.72.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/BDA8155409B4D88DBCFF1BB4FD33D7536CE47AB2.crl
                          rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/BDA8155409B4D88DBCFF1BB4FD33D7536CE47AB2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDA8155409B4D88DBCFF1BB4FD33D7536CE47AB2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 13:42:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:eb:05:f4:09:a7:93:79:75:05:c7:45:47:d3:48:0f:3b:0f:c6:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDA8155409B4D88DBCFF1BB4FD33D7536CE47AB2
        Validity
            Not Before: Apr 15 04:00:50 2026 GMT
            Not After : Apr 14 04:05:50 2027 GMT
        Subject: CN=70EB774A722CEB3ED2A9542CD23C9D5E581C6DE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b6:46:ee:2d:33:55:4c:d7:82:0d:1d:9e:65:
                    1f:d2:96:30:c4:07:b4:6b:70:3d:cd:5b:be:2e:08:
                    b8:2b:24:90:b7:64:d3:a6:6f:5d:0e:23:c5:30:be:
                    19:8f:60:b5:85:9f:ed:7e:45:75:4c:d1:2d:ac:90:
                    84:58:0f:82:78:5a:89:3b:00:f2:95:f3:40:94:65:
                    dc:65:56:da:7d:ba:87:93:d0:b9:40:26:36:8f:2c:
                    78:91:ab:7a:0a:97:37:94:33:02:2f:ab:01:06:9c:
                    90:de:3a:1f:e5:9b:24:c6:5f:d2:63:e0:f0:e6:d4:
                    71:f8:77:11:d3:b2:a9:9a:a4:65:40:10:76:67:4f:
                    74:02:f1:55:97:07:b2:1e:89:3f:ad:84:86:58:65:
                    2b:49:17:53:41:3a:53:eb:a2:40:71:e2:bc:da:ce:
                    e9:47:e4:41:c4:79:5f:ec:e7:0e:e6:41:60:8c:7e:
                    c3:a4:6d:e4:e3:91:d7:6a:13:d1:52:52:f5:f9:43:
                    db:8d:67:3a:e6:a8:68:ba:9e:12:19:0a:75:10:f3:
                    14:52:71:f0:cc:eb:f8:2b:f3:5d:54:9c:e1:d3:59:
                    77:9e:e2:40:5d:9e:25:03:f7:e4:a8:e5:26:61:ce:
                    b1:f3:4c:c3:a6:cd:8c:be:69:82:22:60:17:7e:02:
                    af:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EB:77:4A:72:2C:EB:3E:D2:A9:54:2C:D2:3C:9D:5E:58:1C:6D:E5
            X509v3 Authority Key Identifier:
                keyid:BD:A8:15:54:09:B4:D8:8D:BC:FF:1B:B4:FD:33:D7:53:6C:E4:7A:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/BDA8155409B4D88DBCFF1BB4FD33D7536CE47AB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDA8155409B4D88DBCFF1BB4FD33D7536CE47AB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/3133312e37322e34302e302f32322d3234203d3e203631373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:c2:7b:72:5c:87:b6:8b:2a:1b:6e:b1:ae:81:6b:80:b1:e6:
         db:98:94:76:f3:88:f0:d0:06:ad:32:50:3f:91:8e:7c:3f:0d:
         16:3f:29:40:cf:cc:08:84:24:33:c9:f5:0b:06:a2:08:a5:31:
         c2:07:ab:dd:44:8f:b5:62:aa:cf:7d:19:b0:d3:8e:d9:c9:cb:
         3c:f1:c4:bd:c5:46:e2:21:ad:8d:72:33:f4:eb:87:bf:94:1c:
         01:88:82:ab:2c:1e:5b:07:95:23:10:ec:d4:54:6c:3e:40:71:
         98:00:43:a6:a4:83:40:9b:84:31:14:cc:f9:77:d3:1a:63:d1:
         be:59:34:44:eb:0b:19:63:77:9d:de:ec:07:43:82:8a:6a:3a:
         b5:f9:90:1a:97:7c:8a:88:63:ec:c9:d7:6b:24:6d:65:fa:f8:
         f8:ee:dd:3a:30:f9:cb:a1:5f:ee:2f:72:e0:ee:94:9b:76:0e:
         2a:10:3e:05:49:d1:74:1a:93:47:29:a5:4b:c3:e5:34:6b:ae:
         22:a6:fd:85:35:db:73:22:b6:60:d0:ef:fd:78:a6:37:84:70:
         12:1b:49:11:ad:1b:65:c9:be:e2:cf:df:b9:b2:43:94:7b:93:
         48:07:d1:75:37:f0:ae:03:38:a3:fd:7d:9b:95:d7:13:5e:92:
         1e:f2:90:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:15:50 2026 by rpki-client