Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133342e302f32342d3234203d3e203533303138.roa
File:                     3137372e37322e3133342e302f32342d3234203d3e203533303138.roa (raw, json)
Hash identifier:          K1cCiAvc06/qQKLUMIHIljr9noDcfXQE60ZLQmR16ks=
Subject key identifier:   C1:46:09:68:69:B4:DA:9C:FB:9D:D8:53:19:71:94:FF:4A:B4:3B:EB
Certificate issuer:       /CN=7853A8579AAC25C1D3CF341C8737A6301EAA865C
Certificate serial:       7A994687C3FFB96196FF7B7FA95F1E3C953508CD
Authority key identifier: 78:53:A8:57:9A:AC:25:C1:D3:CF:34:1C:87:37:A6:30:1E:AA:86:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7853A8579AAC25C1D3CF341C8737A6301EAA865C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133342e302f32342d3234203d3e203533303138.roa
Signing time:             Mon 31 Aug 2026 13:02:14 +0000
ROA not before:           Mon 31 Aug 2026 12:57:14 +0000
ROA not after:            Mon 30 Aug 2027 13:02:14 +0000
asID:                     53018
IP address blocks:        177.72.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/7853A8579AAC25C1D3CF341C8737A6301EAA865C.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/7853A8579AAC25C1D3CF341C8737A6301EAA865C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7853A8579AAC25C1D3CF341C8737A6301EAA865C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 20:37:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:99:46:87:c3:ff:b9:61:96:ff:7b:7f:a9:5f:1e:3c:95:35:08:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7853A8579AAC25C1D3CF341C8737A6301EAA865C
        Validity
            Not Before: Aug 31 12:57:14 2026 GMT
            Not After : Aug 30 13:02:14 2027 GMT
        Subject: CN=C146096869B4DA9CFB9DD853197194FF4AB43BEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1b:58:f1:38:af:5a:24:d4:62:ab:9e:2f:73:
                    75:28:62:be:2c:12:83:73:34:de:91:c4:67:49:fa:
                    d2:4c:66:00:08:46:5e:93:4c:df:54:84:ab:a3:ff:
                    22:9e:3c:d0:70:9e:eb:30:e8:6d:73:d8:da:4a:4e:
                    f0:44:37:1d:3a:b3:64:ab:e7:29:7c:23:16:1c:76:
                    47:24:22:11:40:e6:25:48:f9:df:c3:d8:65:cd:5d:
                    3e:f5:53:ef:e2:e7:8c:c9:21:c2:23:e1:1e:36:4b:
                    32:49:8f:5d:b4:b2:42:02:47:53:3e:11:8e:c7:6e:
                    9b:23:5a:66:b2:a5:cc:66:89:8d:ad:70:c4:50:cc:
                    85:bf:e0:e1:ca:83:66:4f:83:42:61:5a:63:34:7b:
                    be:67:ee:30:f4:8b:95:d2:f2:ae:6f:80:40:62:46:
                    9a:cc:86:79:0a:78:43:a8:38:b6:cb:cf:00:cb:69:
                    5b:5c:de:d2:18:91:9f:fb:97:29:29:df:94:ff:d5:
                    36:40:c7:62:49:24:88:db:5b:ef:2c:16:5d:dd:3e:
                    3b:86:78:93:01:ab:7a:02:fa:2f:64:bf:33:3c:16:
                    e3:c8:e7:f2:a6:2e:61:62:3f:36:3f:18:8b:64:4c:
                    b1:7d:ce:1e:fd:5a:7a:d8:38:6f:1f:af:f5:af:ed:
                    ce:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:46:09:68:69:B4:DA:9C:FB:9D:D8:53:19:71:94:FF:4A:B4:3B:EB
            X509v3 Authority Key Identifier:
                keyid:78:53:A8:57:9A:AC:25:C1:D3:CF:34:1C:87:37:A6:30:1E:AA:86:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/7853A8579AAC25C1D3CF341C8737A6301EAA865C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7853A8579AAC25C1D3CF341C8737A6301EAA865C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133342e302f32342d3234203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:4c:1f:42:f3:d5:c8:3a:e4:95:3d:f5:a2:bd:fd:96:da:4d:
         46:bf:bf:c3:4e:14:bf:ef:a2:cd:34:d6:25:a4:f2:5a:bc:ae:
         81:d1:c9:9d:bf:97:63:18:45:ac:9e:82:4c:e0:be:58:5d:86:
         b3:5f:b9:05:bf:f9:96:93:2a:73:3a:fb:16:67:fe:fb:d4:b1:
         6e:52:55:d9:29:f7:ff:ff:4b:79:85:f4:23:33:25:dd:09:ae:
         9d:d9:13:28:a7:32:04:de:3a:26:0c:5b:ca:4c:42:9f:03:98:
         cc:85:44:80:d2:fc:4a:51:bf:cf:27:26:6b:91:00:5f:82:98:
         c6:2b:e2:e8:ba:e9:3f:97:30:45:d0:ff:f5:ec:17:c2:9b:7c:
         4a:7a:22:49:f3:c0:da:93:6d:75:2b:e1:6d:10:0a:43:c7:50:
         51:1c:d8:da:db:9d:bd:5c:e6:fa:0c:14:6c:05:b4:bb:d1:76:
         e6:98:c9:f8:b1:39:4f:2f:2d:8f:69:06:81:77:88:43:0a:b0:
         a9:82:a2:19:05:4a:a0:42:de:4d:02:35:98:f0:c1:7d:6e:db:
         71:7c:66:6c:f0:aa:0e:a3:91:97:e5:9d:34:0a:6d:33:f6:fd:
         19:55:8c:45:03:1c:a8:8b:a5:0d:9c:5d:d9:47:11:fd:c0:35:
         9c:8a:8b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 23:35:55 2026 by rpki-client