Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/3139312e372e37322e302f32312d3234203d3e203533313330.roa
File:                     3139312e372e37322e302f32312d3234203d3e203533313330.roa (raw, json)
Hash identifier:          iRV7t+H/jqbVR6Fy0ieI38pf7hlqKt9lusBhFPWvCx0=
Subject key identifier:   B7:D6:D0:50:36:6D:F7:51:98:2B:27:F9:EE:F3:17:5E:6B:E7:8D:EA
Certificate issuer:       /CN=ABB03970ECCAC2E5328B35156EE5CF7622F18696
Certificate serial:       6DDAACC557B1319BBE7E9B06338476EED3239013
Authority key identifier: AB:B0:39:70:EC:CA:C2:E5:32:8B:35:15:6E:E5:CF:76:22:F1:86:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABB03970ECCAC2E5328B35156EE5CF7622F18696.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/3139312e372e37322e302f32312d3234203d3e203533313330.roa
Signing time:             Thu 03 Sep 2026 16:12:42 +0000
ROA not before:           Thu 03 Sep 2026 16:07:42 +0000
ROA not after:            Thu 02 Sep 2027 16:12:42 +0000
asID:                     53130
IP address blocks:        191.7.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/ABB03970ECCAC2E5328B35156EE5CF7622F18696.crl
                          rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/ABB03970ECCAC2E5328B35156EE5CF7622F18696.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABB03970ECCAC2E5328B35156EE5CF7622F18696.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:27:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:da:ac:c5:57:b1:31:9b:be:7e:9b:06:33:84:76:ee:d3:23:90:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABB03970ECCAC2E5328B35156EE5CF7622F18696
        Validity
            Not Before: Sep  3 16:07:42 2026 GMT
            Not After : Sep  2 16:12:42 2027 GMT
        Subject: CN=B7D6D050366DF751982B27F9EEF3175E6BE78DEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:75:1c:d4:00:86:cd:3d:69:91:a9:29:4e:c6:
                    21:e6:f1:ba:16:b2:27:a9:fa:b0:26:12:4d:93:16:
                    26:88:d2:92:0d:c8:7d:6a:3e:f0:98:02:f2:c2:14:
                    af:e3:5f:0f:a4:36:41:e0:ea:13:ee:31:49:07:c2:
                    ba:10:33:44:ce:4a:81:e2:c0:be:a3:b0:81:ed:b6:
                    14:46:90:db:28:2a:cc:5d:30:b1:99:18:96:67:39:
                    1f:2d:59:1b:36:d1:dc:2c:e6:1a:02:d5:1f:20:be:
                    4a:51:09:b3:37:d0:da:b6:66:39:51:9c:16:64:27:
                    eb:79:e5:85:45:f9:e0:6f:b9:86:3b:73:0a:f1:eb:
                    fd:6b:db:eb:76:a4:6b:38:2f:7b:f2:a7:1d:b4:33:
                    b5:84:af:d4:8c:60:03:7d:e3:31:70:91:0e:a6:b8:
                    8d:79:57:0b:85:ac:37:3f:af:9b:e2:f4:28:0b:10:
                    82:d6:e3:31:1b:b9:74:69:5a:7f:9c:50:3c:9a:24:
                    c5:8d:60:0c:59:9f:ed:ee:0a:9e:86:32:7d:09:13:
                    32:08:8e:cf:48:7f:a3:26:c1:6a:02:a9:eb:29:7a:
                    17:6b:b3:c4:ed:ee:b7:6a:5b:68:b7:1d:2c:4a:81:
                    ba:52:64:9c:75:f5:c6:97:3e:0d:47:47:20:90:2d:
                    bc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D6:D0:50:36:6D:F7:51:98:2B:27:F9:EE:F3:17:5E:6B:E7:8D:EA
            X509v3 Authority Key Identifier:
                keyid:AB:B0:39:70:EC:CA:C2:E5:32:8B:35:15:6E:E5:CF:76:22:F1:86:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/ABB03970ECCAC2E5328B35156EE5CF7622F18696.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABB03970ECCAC2E5328B35156EE5CF7622F18696.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/3139312e372e37322e302f32312d3234203d3e203533313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8b:7f:62:24:1e:a5:ae:a7:10:55:7a:85:58:3b:a4:58:b4:12:
         d7:e5:40:1a:50:12:26:89:ad:7a:2b:a2:7c:95:90:44:f3:32:
         3a:b0:48:f1:19:3c:07:08:c9:d7:20:1b:86:4f:72:e0:1e:2e:
         35:bb:bf:86:de:64:16:22:52:1b:0e:43:a2:c4:8a:5f:9e:d6:
         9f:bc:cf:68:73:74:14:93:e4:dd:0c:c2:39:c6:f2:da:50:fc:
         4b:f8:f4:fd:2a:71:14:dd:86:9c:a4:93:95:ee:50:51:92:ca:
         22:ce:f8:3e:5d:dd:44:a8:97:87:be:40:56:71:86:d6:75:cb:
         87:62:4d:0c:e6:09:55:01:ca:b7:65:0e:16:52:6c:08:6d:59:
         f6:43:fa:34:32:f8:8d:e4:16:77:33:94:12:25:3d:a7:0e:b0:
         fd:59:f1:05:d0:2e:e5:90:72:37:39:7f:1c:22:0c:64:78:29:
         87:2e:62:bd:f8:99:39:0e:3e:6a:78:e7:98:d8:6f:5e:97:91:
         bc:2d:cd:32:58:5f:48:1d:70:f4:92:8b:20:cd:8d:bc:99:ff:
         e4:22:62:b2:a5:28:e3:00:59:93:80:2e:4e:15:3d:ae:ca:e1:
         32:af:b7:9d:ac:93:48:39:b2:d0:6e:e5:7d:f0:3f:99:47:6c:
         2a:56:f8:11
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUbdqsxVexMZu+fpsGM4R27tMjkBMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUJCMDM5NzBFQ0NBQzJFNTMyOEIzNTE1NkVFNUNGNzYy
MkYxODY5NjAeFw0yNjA5MDMxNjA3NDJaFw0yNzA5MDIxNjEyNDJaMDMxMTAvBgNV
BAMTKEI3RDZEMDUwMzY2REY3NTE5ODJCMjdGOUVFRjMxNzVFNkJFNzhERUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/dRzUAIbNPWmRqSlOxiHm8boW
siep+rAmEk2TFiaI0pINyH1qPvCYAvLCFK/jXw+kNkHg6hPuMUkHwroQM0TOSoHi
wL6jsIHtthRGkNsoKsxdMLGZGJZnOR8tWRs20dws5hoC1R8gvkpRCbM30Nq2ZjlR
nBZkJ+t55YVF+eBvuYY7cwrx6/1r2+t2pGs4L3vypx20M7WEr9SMYAN94zFwkQ6m
uI15VwuFrDc/r5vi9CgLEILW4zEbuXRpWn+cUDyaJMWNYAxZn+3uCp6GMn0JEzII
js9If6MmwWoCqespehdrs8Tt7rdqW2i3HSxKgbpSZJx19caXPg1HRyCQLbzrAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUt9bQUDZt91GYKyf57vMXXmvnjeowHwYDVR0j
BBgwFoAUq7A5cOzKwuUyizUVbuXPdiLxhpYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFI4R1E1QlVkQkg0a3FhQUNjWllRYmpuVUVSS2dQWUNrMk5KaTdKNEtM
NlovMC9BQkIwMzk3MEVDQ0FDMkU1MzI4QjM1MTU2RUU1Q0Y3NjIyRjE4Njk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FCQjAzOTcwRUNDQUMyRTUz
MjhCMzUxNTZFRTVDRjc2MjJGMTg2OTYuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RSOEdRNUJVZEJINGtxYUFDY1pZUWJqblVFUktnUFlDazJOSmk3SjRLTDZaLzAv
MzEzOTMxMmUzNzJlMzczMjJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM1MzMzMTMz
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAO/B0gwDQYJKoZIhvcNAQELBQADggEBAIt/YiQepa6nEFV6
hVg7pFi0EtflQBpQEiaJrXoronyVkETzMjqwSPEZPAcIydcgG4ZPcuAeLjW7v4be
ZBYiUhsOQ6LEil+e1p+8z2hzdBST5N0MwjnG8tpQ/Ev49P0qcRTdhpykk5XuUFGS
yiLO+D5d3USol4e+QFZxhtZ1y4diTQzmCVUByrdlDhZSbAhtWfZD+jQy+I3kFncz
lBIlPacOsP1Z8QXQLuWQcjc5fxwiDGR4KYcuYr34mTkOPmp455jYb16XkbwtzTJY
X0gdcPSSiyDNjbyZ/+QiYrKlKOMAWZOALk4VPa7K4TKvt52sk0g5stBu5X3wP5lH
bCpW+BE=
-----END CERTIFICATE-----
Generated at Thu Sep 3 20:16:27 2026 by rpki-client