Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133362e302f32322d3232203d3e203533303138.roa
File:                     3137372e37322e3133362e302f32322d3232203d3e203533303138.roa (raw, json)
Hash identifier:          F2zXmmWfB9QOJ3u+e5KLxVmE6VpP2KIBCqfXV+XTOTA=
Subject key identifier:   96:27:3B:FF:5F:3A:97:4D:26:8C:64:45:18:D0:13:03:07:C1:A6:23
Certificate issuer:       /CN=7853A8579AAC25C1D3CF341C8737A6301EAA865C
Certificate serial:       49CFAC6779F6C65AB644F0E913F0A8D518914115
Authority key identifier: 78:53:A8:57:9A:AC:25:C1:D3:CF:34:1C:87:37:A6:30:1E:AA:86:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7853A8579AAC25C1D3CF341C8737A6301EAA865C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133362e302f32322d3232203d3e203533303138.roa
Signing time:             Tue 18 Aug 2026 12:55:59 +0000
ROA not before:           Tue 18 Aug 2026 12:50:59 +0000
ROA not after:            Tue 17 Aug 2027 12:55:59 +0000
asID:                     53018
IP address blocks:        177.72.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/7853A8579AAC25C1D3CF341C8737A6301EAA865C.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/7853A8579AAC25C1D3CF341C8737A6301EAA865C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7853A8579AAC25C1D3CF341C8737A6301EAA865C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 21:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:cf:ac:67:79:f6:c6:5a:b6:44:f0:e9:13:f0:a8:d5:18:91:41:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7853A8579AAC25C1D3CF341C8737A6301EAA865C
        Validity
            Not Before: Aug 18 12:50:59 2026 GMT
            Not After : Aug 17 12:55:59 2027 GMT
        Subject: CN=96273BFF5F3A974D268C644518D0130307C1A623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f4:f2:18:f5:aa:44:23:d5:e7:a4:6a:3d:5e:
                    7a:89:a8:38:19:f1:5f:34:90:8b:db:71:91:0c:cb:
                    56:35:d3:c6:15:85:e1:ce:b1:61:ba:da:d9:38:98:
                    f9:8a:90:2a:72:08:90:99:4b:b1:c7:4d:46:85:31:
                    a0:33:82:b1:34:9f:1b:63:66:c9:42:d2:95:97:71:
                    a4:b9:f0:ed:e3:c4:30:29:c5:9d:dd:64:a2:d6:63:
                    a7:83:d1:3c:cc:4d:02:33:ed:a3:10:db:65:d9:12:
                    b1:ae:76:36:90:98:d4:a6:82:a3:99:a0:df:9a:28:
                    cb:f1:ac:a1:bf:6c:45:bf:ca:14:96:bb:bc:6e:f5:
                    0e:ef:fc:92:8f:bf:21:86:2d:5b:1c:2a:36:c7:eb:
                    8e:cb:68:19:96:5b:ce:76:4a:bc:c0:e5:49:fe:37:
                    15:9f:62:eb:9d:13:42:ae:d1:9a:37:06:64:a3:50:
                    9d:ac:e9:6b:ed:1d:fa:54:79:a7:23:2a:32:e4:c2:
                    76:8c:71:45:79:ed:93:ca:38:3c:22:cf:5e:e1:3d:
                    9b:d2:70:54:45:f9:b9:08:13:1f:fb:bd:8a:63:1f:
                    5f:e6:44:e5:1d:5d:39:b5:79:d1:96:e2:71:d6:c3:
                    22:22:84:a1:84:2f:62:87:19:92:c7:58:37:c2:02:
                    97:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:27:3B:FF:5F:3A:97:4D:26:8C:64:45:18:D0:13:03:07:C1:A6:23
            X509v3 Authority Key Identifier:
                keyid:78:53:A8:57:9A:AC:25:C1:D3:CF:34:1C:87:37:A6:30:1E:AA:86:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/7853A8579AAC25C1D3CF341C8737A6301EAA865C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7853A8579AAC25C1D3CF341C8737A6301EAA865C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133362e302f32322d3232203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:10:f9:79:bc:8d:15:33:8a:36:a1:70:63:b3:7c:96:9a:40:
         ff:e9:56:56:16:1a:21:17:e3:a9:6f:0c:8f:ca:04:7e:d1:a8:
         5f:be:c7:23:21:51:cf:9f:84:d3:a0:28:e3:4b:b8:b3:a8:93:
         16:3e:e2:ec:92:b0:13:2c:5a:bf:39:12:23:64:22:37:0d:83:
         1b:3f:3d:fe:75:27:bd:67:2d:a3:34:f6:ef:7b:99:c2:bd:d9:
         ad:30:6e:10:86:9f:c4:14:28:da:34:63:ed:bc:08:e5:d6:cc:
         8a:ed:be:1e:26:da:51:b1:20:8f:af:8f:88:01:99:19:95:54:
         2c:d5:50:cb:e0:de:fb:77:32:09:2f:2d:b4:46:75:0e:81:62:
         d5:da:63:05:ff:59:a0:5c:07:52:97:b0:56:17:ca:ba:fa:20:
         3e:36:aa:e6:bb:8c:c8:b6:f9:03:f5:3f:0e:be:c3:0b:94:7b:
         66:32:87:87:39:12:9f:af:e4:80:d5:63:e5:76:cc:4a:c9:7e:
         5d:a5:f0:a8:fe:df:fd:ab:b9:65:5d:da:2a:ce:6a:77:59:e3:
         48:7a:f1:e7:ce:6c:b1:f1:ec:e6:67:f2:1d:ac:89:f1:80:60:
         46:a5:29:3b:27:df:a0:d9:ad:77:7a:21:67:f7:4e:69:26:d5:
         0d:65:ee:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 12:08:09 2026 by rpki-client