Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3132382e302f32332d3233203d3e203533303138.roa
File:                     3137372e37322e3132382e302f32332d3233203d3e203533303138.roa (raw, json)
Hash identifier:          8JYpY3MHGBeJD77doudcXSQEP62wuLMpZWanv9iG15k=
Subject key identifier:   15:4A:8B:1D:A2:0A:F7:A1:D5:EF:A8:24:ED:2A:6B:1A:CC:B8:99:2C
Certificate issuer:       /CN=7853A8579AAC25C1D3CF341C8737A6301EAA865C
Certificate serial:       266EF15A87284B006D0C3DC531D32F4CA591B46D
Authority key identifier: 78:53:A8:57:9A:AC:25:C1:D3:CF:34:1C:87:37:A6:30:1E:AA:86:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7853A8579AAC25C1D3CF341C8737A6301EAA865C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3132382e302f32332d3233203d3e203533303138.roa
Signing time:             Tue 18 Aug 2026 12:55:58 +0000
ROA not before:           Tue 18 Aug 2026 12:50:58 +0000
ROA not after:            Tue 17 Aug 2027 12:55:58 +0000
asID:                     53018
IP address blocks:        177.72.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/7853A8579AAC25C1D3CF341C8737A6301EAA865C.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/7853A8579AAC25C1D3CF341C8737A6301EAA865C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7853A8579AAC25C1D3CF341C8737A6301EAA865C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 21:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6e:f1:5a:87:28:4b:00:6d:0c:3d:c5:31:d3:2f:4c:a5:91:b4:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7853A8579AAC25C1D3CF341C8737A6301EAA865C
        Validity
            Not Before: Aug 18 12:50:58 2026 GMT
            Not After : Aug 17 12:55:58 2027 GMT
        Subject: CN=154A8B1DA20AF7A1D5EFA824ED2A6B1ACCB8992C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f4:e0:29:3e:a5:14:7f:11:6a:3a:92:62:09:
                    36:e4:a4:ef:c2:47:ca:c8:d3:24:cc:12:1c:1d:85:
                    df:0c:7a:d7:56:cd:2a:29:e9:44:d1:86:5e:40:5c:
                    0a:ad:f7:1d:a8:55:dd:bf:98:c5:5a:26:8f:fc:d8:
                    20:ed:df:03:31:c2:50:3b:60:12:47:5d:ec:d5:94:
                    32:02:f9:85:69:82:41:70:88:60:ab:42:2a:61:15:
                    dc:8e:59:6f:3d:32:21:ee:22:74:1b:21:1d:55:0d:
                    e4:f4:74:9f:de:59:2a:c3:94:45:0a:57:f8:b6:3c:
                    c7:03:b2:a7:2a:ca:1e:47:67:99:fd:c4:6e:7f:c0:
                    99:10:24:bb:a2:84:05:59:ee:d4:5b:d9:20:8a:63:
                    46:14:a6:d4:f6:d3:ea:a8:41:0a:70:12:17:76:5d:
                    7a:6c:53:d0:5f:8a:9e:95:d9:a7:de:a1:e2:b1:e8:
                    c8:ee:7e:e6:d7:4d:08:4e:2a:da:9c:5e:c6:7b:1c:
                    91:1c:cb:fe:0c:fa:0b:9f:81:38:60:02:80:4b:97:
                    7b:91:13:dc:a4:bd:72:8e:5a:bf:67:82:75:e2:9b:
                    c6:f5:c1:55:1d:c4:11:2e:c9:6e:c6:78:e5:b1:3c:
                    3f:95:f4:42:3d:eb:31:65:20:99:92:6f:8a:b1:b3:
                    08:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4A:8B:1D:A2:0A:F7:A1:D5:EF:A8:24:ED:2A:6B:1A:CC:B8:99:2C
            X509v3 Authority Key Identifier:
                keyid:78:53:A8:57:9A:AC:25:C1:D3:CF:34:1C:87:37:A6:30:1E:AA:86:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/7853A8579AAC25C1D3CF341C8737A6301EAA865C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7853A8579AAC25C1D3CF341C8737A6301EAA865C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3132382e302f32332d3233203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:7a:96:01:ef:e9:4e:4d:46:3f:d8:8f:e2:de:d0:d6:39:5e:
         57:0d:d5:ba:31:0d:12:cc:b4:10:33:8a:53:5c:ed:83:ac:5a:
         e9:5d:b2:7a:a5:73:de:01:81:62:54:19:b7:cc:da:9a:dc:9e:
         fd:61:59:37:30:ef:a4:62:52:93:c9:1f:8d:8c:fd:d4:d6:53:
         bf:1b:7c:2a:d8:fd:96:d6:b5:ab:24:bb:e4:93:74:4c:38:d3:
         85:52:cd:4e:8e:37:d4:fd:ac:91:d2:24:9c:49:81:26:9c:d1:
         fe:94:56:92:db:e4:bf:bf:48:87:24:ca:a1:5e:f4:25:6f:29:
         9b:51:32:b3:13:f3:ef:2d:d0:bc:91:01:64:8b:4c:65:b3:7d:
         31:d7:e2:88:65:6c:7d:ce:29:b0:8c:64:7a:b7:a3:f0:a9:18:
         1c:6a:5e:31:2c:87:4c:3f:e0:98:fb:43:40:c0:a2:7f:cb:05:
         4f:20:af:89:85:ac:ac:b9:7e:ab:a1:f4:3f:cf:ef:28:c4:53:
         ad:f4:9b:46:dd:f5:5f:b2:59:5c:41:3b:e9:55:43:af:a7:b1:
         6c:46:d1:16:43:ac:01:1e:a4:64:96:07:79:95:3b:b5:cf:81:
         db:e3:e6:5e:54:f7:ee:f8:e4:3f:cf:fd:7e:ad:53:c6:bf:dc:
         58:b0:b8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 04:33:32 2026 by rpki-client