Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3133312e37322e3231362e302f32322d3232203d3e20323632333532.roa
File:                     3133312e37322e3231362e302f32322d3232203d3e20323632333532.roa (raw, json)
Hash identifier:          4P7cANrg2CHIm+HQnejVJ1d1rIYsVwB99d3Jurc2DUI=
Subject key identifier:   28:3A:10:2A:95:69:2F:1D:25:F7:CA:BE:67:90:4F:A6:6A:8F:4F:B7
Certificate issuer:       /CN=B64BD1527937C2519F33421A50F9D445C493A4B2
Certificate serial:       29081E08CAEEA8303C57715F18B7BC4E606E20A2
Authority key identifier: B6:4B:D1:52:79:37:C2:51:9F:33:42:1A:50:F9:D4:45:C4:93:A4:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B64BD1527937C2519F33421A50F9D445C493A4B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3133312e37322e3231362e302f32322d3232203d3e20323632333532.roa
Signing time:             Wed 08 Jul 2026 01:35:45 +0000
ROA not before:           Wed 08 Jul 2026 01:30:45 +0000
ROA not after:            Wed 07 Jul 2027 01:35:45 +0000
asID:                     262352
IP address blocks:        131.72.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/B64BD1527937C2519F33421A50F9D445C493A4B2.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/B64BD1527937C2519F33421A50F9D445C493A4B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B64BD1527937C2519F33421A50F9D445C493A4B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 04:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:08:1e:08:ca:ee:a8:30:3c:57:71:5f:18:b7:bc:4e:60:6e:20:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B64BD1527937C2519F33421A50F9D445C493A4B2
        Validity
            Not Before: Jul  8 01:30:45 2026 GMT
            Not After : Jul  7 01:35:45 2027 GMT
        Subject: CN=283A102A95692F1D25F7CABE67904FA66A8F4FB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:04:bb:c2:e4:d7:80:f3:14:16:d0:fc:01:75:
                    59:58:af:44:0a:88:09:3b:61:40:71:3e:c3:44:1d:
                    22:4d:fc:44:7f:68:c2:e0:03:cf:76:e3:52:e5:e0:
                    36:ab:3b:fd:7f:fd:0c:cb:c9:47:d5:68:75:98:f2:
                    2c:3f:e3:93:19:85:88:6a:2b:8d:6a:4a:2e:5a:d1:
                    0b:25:16:95:9f:fb:71:77:37:74:bc:f6:8f:c5:89:
                    54:eb:0f:54:08:2e:cd:14:04:70:b7:5c:03:e5:15:
                    10:15:45:5b:79:64:23:93:12:a0:58:ad:38:4d:0d:
                    ce:7e:f8:93:67:4f:06:5c:37:23:f1:22:7d:50:a0:
                    df:9b:77:27:44:d0:2b:f3:12:14:ac:00:52:b0:19:
                    ab:1a:41:97:b8:7a:58:e5:05:06:14:04:1a:d3:38:
                    e3:54:44:a5:ab:38:05:3d:b8:52:3f:4a:0c:5d:bf:
                    12:79:fe:58:e7:73:5f:2f:2a:6e:b6:ad:21:19:2b:
                    4a:0f:38:7e:42:16:45:01:7f:4c:5a:4f:34:11:b8:
                    a3:d1:dc:f5:f1:94:ff:21:ee:b1:82:50:79:e9:5b:
                    e1:6f:9a:3f:81:d0:7e:4c:a7:bd:6c:f2:fd:5e:73:
                    39:72:49:34:55:7b:4b:42:3f:c3:72:09:53:2b:d8:
                    50:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:3A:10:2A:95:69:2F:1D:25:F7:CA:BE:67:90:4F:A6:6A:8F:4F:B7
            X509v3 Authority Key Identifier:
                keyid:B6:4B:D1:52:79:37:C2:51:9F:33:42:1A:50:F9:D4:45:C4:93:A4:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/B64BD1527937C2519F33421A50F9D445C493A4B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B64BD1527937C2519F33421A50F9D445C493A4B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3133312e37322e3231362e302f32322d3232203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:8a:0d:60:c8:7d:ba:1f:9a:bd:4a:2c:73:c8:5f:9c:e7:37:
         f0:ff:6d:38:a8:89:70:aa:d4:14:6a:b4:e0:0f:43:05:df:9b:
         10:15:a6:ed:f5:74:81:4e:80:3d:b2:06:1e:cd:bd:f9:6c:74:
         7b:5b:7a:14:73:0c:4c:f3:d3:d9:7e:e9:6b:f9:86:6d:82:be:
         07:36:87:b4:41:dc:2f:6e:47:47:10:95:a8:b6:75:54:6c:93:
         0b:e1:df:fc:bf:a8:17:55:03:bb:4f:08:46:30:8c:6f:b6:38:
         51:51:74:af:75:00:99:8c:36:17:ec:8f:27:bb:4c:b9:c5:9e:
         6b:b2:ab:83:86:c8:66:66:b4:96:cb:78:56:1d:99:75:17:60:
         d6:78:49:13:bd:52:17:10:6d:d8:a4:d9:4b:e5:9b:61:75:ae:
         a7:ba:1a:32:8e:bb:63:22:2c:4b:4a:9e:76:80:26:25:7d:07:
         79:ad:ea:d3:0d:33:91:42:72:2e:88:e9:00:0a:2f:df:2c:aa:
         be:38:de:59:b1:a5:2c:03:c8:5c:18:b5:23:1d:ba:fc:9f:30:
         78:ab:84:46:eb:d1:fd:a2:88:42:14:95:74:ea:60:95:1c:85:
         7d:50:ca:62:6c:dc:1c:97:dc:9d:55:6d:2b:a2:14:ef:ea:61:
         c0:8e:f5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:04:29 2026 by rpki-client