Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133302e302f32332d3233203d3e203533303138.roa
File:                     3137372e37322e3133302e302f32332d3233203d3e203533303138.roa (raw, json)
Hash identifier:          EgCp0ym1pCL1YNoLYERbDANYalYxg2R2DbtpbwVu2XI=
Subject key identifier:   7D:28:B4:F5:87:22:B7:1A:03:19:C9:0B:F2:38:9C:84:A0:55:9E:B5
Certificate issuer:       /CN=7853A8579AAC25C1D3CF341C8737A6301EAA865C
Certificate serial:       37E81C3E3803075902A193E3EF46506D148DD35B
Authority key identifier: 78:53:A8:57:9A:AC:25:C1:D3:CF:34:1C:87:37:A6:30:1E:AA:86:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7853A8579AAC25C1D3CF341C8737A6301EAA865C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133302e302f32332d3233203d3e203533303138.roa
Signing time:             Tue 18 Aug 2026 12:55:56 +0000
ROA not before:           Tue 18 Aug 2026 12:50:56 +0000
ROA not after:            Tue 17 Aug 2027 12:55:56 +0000
asID:                     53018
IP address blocks:        177.72.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/7853A8579AAC25C1D3CF341C8737A6301EAA865C.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/7853A8579AAC25C1D3CF341C8737A6301EAA865C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7853A8579AAC25C1D3CF341C8737A6301EAA865C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 21:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:e8:1c:3e:38:03:07:59:02:a1:93:e3:ef:46:50:6d:14:8d:d3:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7853A8579AAC25C1D3CF341C8737A6301EAA865C
        Validity
            Not Before: Aug 18 12:50:56 2026 GMT
            Not After : Aug 17 12:55:56 2027 GMT
        Subject: CN=7D28B4F58722B71A0319C90BF2389C84A0559EB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0f:0a:6b:52:48:3b:99:8e:43:ea:8d:c5:0e:
                    ee:95:e7:be:56:0c:78:b4:78:2c:0f:4d:7e:56:32:
                    f0:b2:b1:e6:6b:50:77:f6:29:c8:cf:f1:ca:e8:74:
                    41:3b:7c:95:19:c2:27:07:d3:f7:ca:8d:27:09:98:
                    ac:6a:73:7a:ab:e0:38:f2:b5:95:e7:6d:d1:b4:ee:
                    00:e0:d7:1c:b8:b0:a2:94:83:3d:83:31:67:51:e7:
                    93:67:80:02:46:6e:55:c9:01:1a:50:10:d5:93:3b:
                    19:63:cd:6b:c7:ac:38:52:86:1d:0c:17:9d:4f:18:
                    ac:3e:5f:21:b8:f6:85:71:33:3f:5f:13:9c:04:00:
                    b8:9b:b8:f0:a3:16:4b:7c:b1:06:9d:a7:61:54:ac:
                    4a:d4:5f:57:d6:75:00:28:f8:53:0a:27:85:c2:96:
                    63:d0:64:e5:20:5d:05:ce:f8:22:45:38:c9:bc:92:
                    11:1b:0c:c7:f7:7a:df:77:cc:41:85:02:7d:b5:16:
                    0f:f4:b7:61:a4:f1:a5:66:57:f3:d2:89:ab:39:3e:
                    0b:fc:47:3b:db:1b:40:b8:c4:df:19:72:09:fb:45:
                    60:dc:ec:16:18:13:ec:25:e0:f1:bd:f5:ba:05:f0:
                    4f:b9:51:7f:d3:de:a9:8d:07:58:7d:cc:13:25:bc:
                    f9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:28:B4:F5:87:22:B7:1A:03:19:C9:0B:F2:38:9C:84:A0:55:9E:B5
            X509v3 Authority Key Identifier:
                keyid:78:53:A8:57:9A:AC:25:C1:D3:CF:34:1C:87:37:A6:30:1E:AA:86:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/7853A8579AAC25C1D3CF341C8737A6301EAA865C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7853A8579AAC25C1D3CF341C8737A6301EAA865C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133302e302f32332d3233203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:7c:7a:72:1d:62:a4:56:dd:14:f2:03:4e:a5:b8:b5:9a:a8:
         45:04:fd:e3:55:5d:8f:77:30:00:c8:74:b6:ee:1f:a1:95:fe:
         a2:91:52:46:c1:7a:99:42:b6:a8:ed:3d:2e:b8:b0:ad:ea:c2:
         41:0e:51:a0:5f:e7:6a:f5:d0:02:f7:f9:aa:97:4c:cd:bb:37:
         a4:b8:83:22:e8:e5:72:48:0e:c2:01:88:5e:4f:0f:d4:ff:4b:
         bc:ff:7e:5c:1f:c0:fb:8b:9c:c4:2f:6d:08:00:af:e9:ca:99:
         e7:90:5e:84:91:6a:4f:4c:70:45:8b:f1:b0:2f:db:24:f3:94:
         1d:02:a7:fc:88:30:b4:49:56:de:33:46:7e:cf:a3:f7:ff:d3:
         8e:b2:47:19:13:d2:3c:f0:c5:35:bb:cf:f7:9a:1d:8a:87:20:
         83:2a:bb:fb:60:70:54:dc:65:6d:f3:52:3f:27:b3:45:d5:6c:
         c4:f2:98:8f:a0:4c:7e:b4:82:39:ea:fd:5f:6b:44:e1:77:61:
         d3:ac:83:b0:f3:3e:17:87:de:58:e4:56:c8:26:73:b2:43:58:
         f3:84:dc:e4:29:24:fb:b3:0f:17:71:60:63:68:61:ce:18:32:
         06:63:ec:88:bf:01:66:d7:07:8e:70:6a:4d:7e:30:61:15:06:
         b7:64:87:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 04:33:26 2026 by rpki-client