Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138372e37332e3132382e302f32312d3234203d3e203238353736.roa
File:                     3138372e37332e3132382e302f32312d3234203d3e203238353736.roa (raw, json)
Hash identifier:          wxWniWoXsviwJC+oY2bqU9i6HclzUgHtkzCNRr32sNY=
Subject key identifier:   71:C9:8B:0C:3A:E1:2E:69:A8:4A:3A:61:C6:B9:29:95:49:53:50:5F
Certificate issuer:       /CN=BD1E87C8514998E362292741C70F693178FDD20E
Certificate serial:       6D38506B648B1DD18864CC5D86502D52F3658B3B
Authority key identifier: BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138372e37332e3132382e302f32312d3234203d3e203238353736.roa
Signing time:             Fri 27 Mar 2026 22:30:33 +0000
ROA not before:           Fri 27 Mar 2026 22:25:33 +0000
ROA not after:            Fri 26 Mar 2027 22:30:33 +0000
asID:                     28576
IP address blocks:        187.73.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl
                          rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 19:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:38:50:6b:64:8b:1d:d1:88:64:cc:5d:86:50:2d:52:f3:65:8b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1E87C8514998E362292741C70F693178FDD20E
        Validity
            Not Before: Mar 27 22:25:33 2026 GMT
            Not After : Mar 26 22:30:33 2027 GMT
        Subject: CN=71C98B0C3AE12E69A84A3A61C6B929954953505F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e6:3e:cc:bb:0e:66:e2:59:6f:64:f0:63:1c:
                    94:d7:4b:a6:7b:98:0a:86:6b:ee:fe:ab:e7:0d:2a:
                    d3:bc:6b:5a:ee:77:5b:9b:c7:92:d5:9e:21:4b:ed:
                    57:e9:50:2c:fe:20:7a:ef:48:c4:1c:dc:37:39:f3:
                    51:9e:97:96:bb:4f:77:b8:a4:10:5a:fc:f3:54:ec:
                    ab:15:57:30:33:b7:6c:e8:ac:90:e9:96:89:fd:d7:
                    03:d2:ee:69:93:f8:c9:d3:d6:81:31:b4:80:a5:60:
                    83:50:72:f7:6b:70:0d:14:00:78:f0:4e:9e:84:96:
                    b7:6e:16:8b:60:c7:08:89:a4:80:d1:a8:96:a0:79:
                    e7:13:54:c0:f0:ed:c0:2b:e1:df:44:b0:64:f5:8e:
                    a6:fa:42:e4:4b:dd:d6:61:4e:d0:fd:89:47:e2:6d:
                    d1:5d:af:45:f5:d3:9b:e5:a1:20:8c:9b:10:75:ce:
                    52:79:34:43:83:52:65:50:dc:6d:8f:48:00:82:e3:
                    5e:8a:81:3a:85:11:d0:1f:cb:f7:ad:2b:05:bc:12:
                    19:3d:bb:d8:65:3a:be:25:65:50:29:87:4f:e9:f5:
                    62:60:71:69:57:31:02:90:77:77:13:7e:d5:b0:98:
                    42:14:50:e5:4c:2d:1e:06:d5:14:a8:18:c7:cb:6b:
                    60:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C9:8B:0C:3A:E1:2E:69:A8:4A:3A:61:C6:B9:29:95:49:53:50:5F
            X509v3 Authority Key Identifier:
                keyid:BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138372e37332e3132382e302f32312d3234203d3e203238353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         46:2f:65:37:eb:d8:a1:fb:a6:02:4b:1f:5a:13:69:e4:fd:07:
         b3:34:e3:e9:04:25:f6:46:8a:fb:6b:b2:6b:79:40:d8:eb:e4:
         e7:78:a0:8f:3e:3c:5f:0f:9d:5f:e3:82:a3:27:da:f8:f0:6a:
         d4:76:c8:3e:48:29:8d:90:81:d2:72:ef:f9:63:a3:58:57:32:
         8a:14:6d:f3:e3:9f:62:f7:f2:b1:b2:07:2d:8d:0b:b9:39:41:
         ab:d4:cc:15:73:d8:26:a5:86:32:60:74:c8:53:8c:8f:c0:ae:
         4e:12:aa:20:5f:15:51:0d:0a:e2:71:00:f1:22:a5:fe:f4:db:
         82:67:27:f0:e5:98:04:38:04:34:b5:ac:cf:a4:1c:17:40:1a:
         16:66:b9:41:bc:85:17:50:9f:0a:3e:08:0b:ab:27:6d:50:1d:
         7f:51:e5:6b:1d:52:92:89:b8:35:ce:cd:14:db:ef:d8:38:8c:
         80:3e:6e:9d:76:bd:48:64:db:6f:ef:42:4d:4f:1b:84:95:8e:
         66:00:0d:0b:f2:19:29:77:56:f3:0e:a3:8a:5e:de:4c:90:b6:
         58:f0:9f:ab:b3:ff:fa:02:af:db:f7:e4:bc:ef:c0:72:e2:76:
         af:74:8a:47:37:34:46:dd:ab:cb:45:0a:d8:e7:35:a2:b2:1c:
         1d:00:85:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:31:17 2026 by rpki-client