Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3133312e37322e3231382e302f32332d3233203d3e20323632333532.roa
File:                     3133312e37322e3231382e302f32332d3233203d3e20323632333532.roa (raw, json)
Hash identifier:          5HdwPeBrR8GP0PYlNwwpvtDP6zvCiWD4RWYU4OeJT+E=
Subject key identifier:   3E:CC:32:A5:F7:4A:74:99:62:89:95:C5:5A:1A:FF:76:34:FA:7F:66
Certificate issuer:       /CN=E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B
Certificate serial:       6D1BF4DEA9AF9812221B733B1CA8578FB35E9731
Authority key identifier: E1:93:FD:FC:3B:77:CF:47:FC:3A:F6:3B:30:8B:7B:AD:0A:3F:7A:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3133312e37322e3231382e302f32332d3233203d3e20323632333532.roa
Signing time:             Tue 11 Aug 2026 12:25:36 +0000
ROA not before:           Tue 11 Aug 2026 12:20:36 +0000
ROA not after:            Tue 10 Aug 2027 12:25:36 +0000
asID:                     262352
IP address blocks:        131.72.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 22:51:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:1b:f4:de:a9:af:98:12:22:1b:73:3b:1c:a8:57:8f:b3:5e:97:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B
        Validity
            Not Before: Aug 11 12:20:36 2026 GMT
            Not After : Aug 10 12:25:36 2027 GMT
        Subject: CN=3ECC32A5F74A7499628995C55A1AFF7634FA7F66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a3:bc:68:df:f6:a7:33:fd:4d:c0:bb:0a:91:
                    f7:4c:80:6f:6f:d7:74:85:6b:33:5f:86:f6:4b:d6:
                    6e:cf:fe:23:25:32:59:6c:b6:5a:aa:51:f1:55:a5:
                    e8:18:12:81:9f:d5:2e:19:e1:c4:24:b2:99:6f:b5:
                    d3:36:eb:4e:54:f4:6b:f9:1a:54:ee:da:89:49:a6:
                    1a:d4:f5:87:95:e7:f4:58:4c:9f:b9:a6:da:74:99:
                    8f:ef:08:70:0e:e9:0e:e8:31:5e:2b:d7:12:22:c1:
                    40:2d:5b:99:ea:f8:a2:34:b4:2f:fc:c6:31:12:11:
                    99:b9:16:1f:ea:5e:25:84:5c:1b:d8:c6:d7:75:be:
                    92:08:63:a7:9e:8c:1e:56:b1:98:76:6a:ff:38:4c:
                    05:2c:f3:f5:81:fc:b4:00:06:8f:68:1f:08:99:66:
                    31:12:f7:2c:80:51:3f:a4:be:eb:f9:bb:be:3a:04:
                    fb:f1:2d:78:6f:35:36:ce:cd:37:f5:69:15:b0:c6:
                    f5:5f:b5:1e:3b:a1:87:38:92:32:2a:c1:49:47:12:
                    4e:cc:81:88:f8:dc:4c:3a:bc:b3:08:ae:8c:8a:c8:
                    f0:8e:d5:04:ff:fc:79:4c:14:a4:90:14:63:44:f8:
                    71:d1:66:74:63:ac:2a:30:02:2b:91:09:6e:61:b4:
                    4f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CC:32:A5:F7:4A:74:99:62:89:95:C5:5A:1A:FF:76:34:FA:7F:66
            X509v3 Authority Key Identifier:
                keyid:E1:93:FD:FC:3B:77:CF:47:FC:3A:F6:3B:30:8B:7B:AD:0A:3F:7A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3133312e37322e3231382e302f32332d3233203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:d7:92:54:c4:40:6f:76:ff:1b:15:52:fe:8f:e1:39:b0:03:
         92:7e:7b:a1:74:90:ec:3d:d1:6a:3b:9a:10:7f:37:92:26:5f:
         83:18:df:59:f5:7d:54:b0:77:0c:9d:84:43:bf:f4:1b:28:5b:
         3f:a9:72:89:b7:dd:71:9b:f1:84:11:64:1e:e2:16:cc:0e:61:
         e6:aa:9b:94:c8:02:f9:f9:d8:b9:8b:cc:a2:c8:2e:4d:80:f1:
         4c:2f:db:e2:f0:48:30:fb:ff:b8:4c:64:31:2c:60:bf:cc:28:
         f6:63:36:a8:a1:30:56:30:43:e4:39:12:22:2b:8a:94:d8:3a:
         5e:e5:0f:89:72:23:02:a0:c1:23:a5:16:a8:aa:da:b1:30:e5:
         f0:4e:48:4f:30:0a:fc:b9:6f:14:3d:3e:e5:30:a8:fb:5a:e8:
         b6:24:c2:82:30:a1:56:fe:bd:11:45:31:b9:26:38:be:d1:26:
         f7:d6:27:84:4c:b3:88:0b:86:96:54:3a:2d:ef:2f:45:ba:99:
         9c:f9:b9:1e:40:6a:ce:14:cf:5c:0c:8c:af:8b:0d:e0:0f:bb:
         dd:40:f5:f4:99:59:8d:c2:08:2a:18:10:b3:5f:9b:08:04:f8:
         c4:ea:d7:09:8c:7c:b8:a6:53:fa:d1:70:da:0f:dd:7b:78:c5:
         f0:82:12:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:51:52 2026 by rpki-client