Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3136382e302f32322d3234203d3e20323632353530.roa
File:                     3137372e37322e3136382e302f32322d3234203d3e20323632353530.roa (raw, json)
Hash identifier:          jIXloGZnI3qCNkbmxgig41rXYS+Mo8kTvOmuVSf3E+U=
Subject key identifier:   42:B0:0E:A5:33:F8:13:9B:6F:A4:77:F2:6E:A9:FA:6F:C2:D2:42:B3
Certificate issuer:       /CN=4D6CE36DB2E2A67225BE6062A896CD4FFFE3DCDB
Certificate serial:       3D779A9AE1DA4DAB522CC6569469C459724CF629
Authority key identifier: 4D:6C:E3:6D:B2:E2:A6:72:25:BE:60:62:A8:96:CD:4F:FF:E3:DC:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6CE36DB2E2A67225BE6062A896CD4FFFE3DCDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3136382e302f32322d3234203d3e20323632353530.roa
Signing time:             Sat 16 May 2026 14:13:29 +0000
ROA not before:           Sat 16 May 2026 14:08:29 +0000
ROA not after:            Sat 15 May 2027 14:13:29 +0000
asID:                     262550
IP address blocks:        177.72.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/4D6CE36DB2E2A67225BE6062A896CD4FFFE3DCDB.crl
                          rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/4D6CE36DB2E2A67225BE6062A896CD4FFFE3DCDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6CE36DB2E2A67225BE6062A896CD4FFFE3DCDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 10:22:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:77:9a:9a:e1:da:4d:ab:52:2c:c6:56:94:69:c4:59:72:4c:f6:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D6CE36DB2E2A67225BE6062A896CD4FFFE3DCDB
        Validity
            Not Before: May 16 14:08:29 2026 GMT
            Not After : May 15 14:13:29 2027 GMT
        Subject: CN=42B00EA533F8139B6FA477F26EA9FA6FC2D242B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5c:4d:2a:cc:0e:5c:56:4c:5a:51:4c:0c:e0:
                    40:11:a1:7d:53:20:99:0a:ed:46:e9:e2:65:ff:0d:
                    c9:d2:ba:72:91:fa:a6:01:e7:98:a6:75:1f:f8:56:
                    c8:bc:f3:c9:e9:3f:50:e7:33:eb:31:af:3a:e8:af:
                    b6:75:07:1c:4d:47:ea:00:c9:02:0b:d8:78:ac:76:
                    fb:e8:1e:fc:dc:d9:6e:53:4b:ec:1b:48:03:de:7f:
                    43:0f:9b:c6:ed:bf:0a:c3:ed:d3:15:b2:71:6b:6f:
                    99:5f:bf:c7:83:12:07:9f:79:be:1a:5c:f8:b1:60:
                    1b:e3:19:55:d9:5c:26:e6:80:bf:0b:4c:96:0e:d6:
                    e2:10:0f:f0:17:32:5b:65:c0:c8:dc:af:be:63:bd:
                    e5:92:ab:15:a8:85:41:24:4b:90:79:60:e3:fb:da:
                    f2:6d:3a:cf:3b:b4:d1:cd:60:15:a0:e2:6f:61:d4:
                    d4:87:5a:77:4a:3a:b7:79:8f:13:62:4e:dc:b6:79:
                    3c:12:0f:74:ea:bb:4b:ae:54:6b:0e:8b:32:5d:0c:
                    d3:76:c7:e1:c3:aa:9a:63:b6:1c:2e:e3:d8:1f:b7:
                    b1:11:7f:fc:f1:37:c0:7a:d4:f4:32:b6:5e:dc:3a:
                    07:27:ea:51:71:64:95:f1:14:4d:64:70:4a:a7:1a:
                    73:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B0:0E:A5:33:F8:13:9B:6F:A4:77:F2:6E:A9:FA:6F:C2:D2:42:B3
            X509v3 Authority Key Identifier:
                keyid:4D:6C:E3:6D:B2:E2:A6:72:25:BE:60:62:A8:96:CD:4F:FF:E3:DC:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/4D6CE36DB2E2A67225BE6062A896CD4FFFE3DCDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6CE36DB2E2A67225BE6062A896CD4FFFE3DCDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3136382e302f32322d3234203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:1c:33:d9:9b:af:6f:e6:95:0f:c4:64:6b:5e:c7:72:d0:e7:
         2f:fc:63:58:d2:b3:f5:48:0a:31:51:0a:31:c5:8b:4a:aa:ec:
         9d:2c:59:26:de:cf:4c:ce:c9:d4:bf:21:ae:f1:71:7d:37:ba:
         76:9e:fe:3b:98:61:1f:77:04:ad:7f:2f:94:f1:23:b3:18:b5:
         84:8b:10:06:99:b3:02:09:c8:b3:f5:71:9c:c3:fa:90:f7:da:
         fe:c9:6b:98:a6:66:fc:36:c1:3d:c3:1e:5d:dc:c2:e0:5f:bc:
         04:73:27:98:11:94:98:5b:af:5a:74:0e:b6:48:d6:14:ec:a4:
         db:a6:a0:5b:2a:e6:0e:45:7d:f6:42:38:e1:05:49:7a:68:36:
         96:60:0d:62:9a:39:0e:ab:f9:97:c6:c9:b8:28:dd:50:3a:c2:
         0b:5d:59:62:0b:33:d9:d6:97:94:43:4d:5f:10:15:14:80:9d:
         71:9c:05:35:51:4c:ba:b5:c0:82:03:6d:0c:7b:32:86:95:82:
         d6:3a:7a:f8:6a:63:b5:8f:83:e1:cf:36:54:14:45:dd:d9:c3:
         1f:c5:ae:a2:6a:7f:ee:fe:a8:75:6a:eb:07:2e:83:53:d6:66:
         5e:7c:df:fe:6f:96:7c:fa:85:78:83:e2:b9:95:67:a9:11:b7:
         b7:e7:8d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 19:20:43 2026 by rpki-client