Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/3137372e33382e34302e302f32312d3332203d3e203532393431.roa
File:                     3137372e33382e34302e302f32312d3332203d3e203532393431.roa (raw, json)
Hash identifier:          Q063cBeuh68GvvhpHyTYTJKe2UH3N8EW0HUev3/FQsY=
Subject key identifier:   21:80:84:A7:13:70:69:E5:26:FA:78:4B:27:B7:A5:AB:0D:3E:CD:19
Certificate issuer:       /CN=72DA45DD2C530A9C98046EC08044A1CBD68FF0E0
Certificate serial:       6B50DC566B4F672FD64699598B9A402CE2F3C53D
Authority key identifier: 72:DA:45:DD:2C:53:0A:9C:98:04:6E:C0:80:44:A1:CB:D6:8F:F0:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72DA45DD2C530A9C98046EC08044A1CBD68FF0E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/3137372e33382e34302e302f32312d3332203d3e203532393431.roa
Signing time:             Thu 03 Sep 2026 13:37:52 +0000
ROA not before:           Thu 03 Sep 2026 13:32:52 +0000
ROA not after:            Thu 02 Sep 2027 13:37:52 +0000
asID:                     52941
IP address blocks:        177.38.40.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/72DA45DD2C530A9C98046EC08044A1CBD68FF0E0.crl
                          rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/72DA45DD2C530A9C98046EC08044A1CBD68FF0E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72DA45DD2C530A9C98046EC08044A1CBD68FF0E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 16:41:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:50:dc:56:6b:4f:67:2f:d6:46:99:59:8b:9a:40:2c:e2:f3:c5:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72DA45DD2C530A9C98046EC08044A1CBD68FF0E0
        Validity
            Not Before: Sep  3 13:32:52 2026 GMT
            Not After : Sep  2 13:37:52 2027 GMT
        Subject: CN=218084A7137069E526FA784B27B7A5AB0D3ECD19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c4:d0:1d:f2:45:98:05:94:28:24:ba:6a:eb:
                    55:f6:8c:27:01:8a:1e:0b:ae:5c:fe:34:e6:9e:99:
                    32:b7:45:e3:90:1c:c5:8c:d0:ca:37:a7:9a:2e:36:
                    47:d3:cf:21:10:93:79:b5:72:9b:d3:95:f6:6f:02:
                    28:f6:fd:24:df:d7:bf:e4:49:51:8f:33:1a:38:66:
                    bf:74:a1:51:ae:bb:14:f1:87:a4:97:14:57:43:ef:
                    70:31:63:d7:94:90:16:4d:a7:79:39:50:f3:b8:6c:
                    46:71:04:0d:a2:2a:5c:68:2c:ff:48:48:8e:44:c4:
                    c3:86:71:63:33:dd:97:f8:11:ba:58:1b:d8:2c:89:
                    cd:40:4f:81:94:0f:29:00:07:83:5a:5c:8f:9d:43:
                    ce:fb:f0:86:f5:09:fd:13:d9:ea:64:69:d4:80:0d:
                    dd:10:bb:ba:1d:5a:4e:7b:bb:8a:6c:9a:28:14:09:
                    1e:f4:cf:9a:05:4c:78:83:46:65:32:7c:3a:26:85:
                    a7:f8:b0:f1:95:cd:7f:4a:de:fc:c4:d7:3e:70:2a:
                    fb:16:68:f0:d6:c8:32:b3:a2:f1:0a:40:e5:da:3b:
                    42:1d:ea:eb:f2:3b:f8:95:5f:eb:97:5b:bc:80:76:
                    4d:83:c9:27:4f:21:98:53:e9:0a:13:3a:3d:53:9e:
                    93:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:80:84:A7:13:70:69:E5:26:FA:78:4B:27:B7:A5:AB:0D:3E:CD:19
            X509v3 Authority Key Identifier:
                keyid:72:DA:45:DD:2C:53:0A:9C:98:04:6E:C0:80:44:A1:CB:D6:8F:F0:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/72DA45DD2C530A9C98046EC08044A1CBD68FF0E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72DA45DD2C530A9C98046EC08044A1CBD68FF0E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/3137372e33382e34302e302f32312d3332203d3e203532393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7f:76:9b:a8:3e:f0:b8:9e:e5:f0:ef:83:84:38:0f:88:5b:4f:
         7d:aa:a3:6d:ef:6d:44:92:0b:3d:33:03:a4:38:ba:a7:35:26:
         39:05:6b:18:ef:79:64:1e:e1:ab:f7:4d:e9:7f:6f:d4:7d:e9:
         17:a6:85:bb:47:37:75:fe:1d:fd:cb:c6:cb:ac:92:8a:e0:b4:
         67:01:fe:f7:42:d1:8d:b9:e5:5c:4d:24:7b:a4:8d:11:7e:57:
         74:b3:5e:dc:31:9b:8d:4d:8d:c3:df:93:b1:8e:09:2e:f8:2a:
         ec:5e:2b:7c:fe:a5:61:e4:09:d4:4b:60:94:c2:74:e5:45:c5:
         f2:20:c7:bf:26:4d:5c:57:0d:43:43:d8:07:61:00:77:1a:f9:
         31:06:56:55:29:25:0c:75:7a:c3:1a:c0:4c:a4:fe:5c:a3:91:
         9b:b3:38:06:3f:49:ea:35:23:32:97:0d:ba:3b:2f:19:27:53:
         ab:57:2e:8a:80:f3:31:8f:cd:ff:3c:be:b3:ca:9b:cd:0e:e2:
         cc:9b:f4:89:d8:63:d6:87:1b:a2:1b:b3:12:ed:09:48:c9:03:
         e7:63:3c:7d:7a:67:17:74:48:38:99:8a:19:da:2a:d6:06:52:
         b2:de:04:5c:59:5d:b6:88:c2:5f:02:f9:2a:eb:34:4c:24:dc:
         ea:52:5a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 03:58:34 2026 by rpki-client