Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133382e302f32332d3233203d3e203533303138.roa
File:                     3137372e37322e3133382e302f32332d3233203d3e203533303138.roa (raw, json)
Hash identifier:          3hUaH7IYhfD5DctI1GlVtdiUpJZYKeLuwk7icvIWEGY=
Subject key identifier:   B3:54:C2:75:8B:7C:87:8E:4E:2A:BB:5F:40:B3:62:88:56:06:8D:A2
Certificate issuer:       /CN=7853A8579AAC25C1D3CF341C8737A6301EAA865C
Certificate serial:       79997B9C5CF719F1949AF0654FB8B5FC1564727B
Authority key identifier: 78:53:A8:57:9A:AC:25:C1:D3:CF:34:1C:87:37:A6:30:1E:AA:86:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7853A8579AAC25C1D3CF341C8737A6301EAA865C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133382e302f32332d3233203d3e203533303138.roa
Signing time:             Tue 18 Aug 2026 12:55:56 +0000
ROA not before:           Tue 18 Aug 2026 12:50:56 +0000
ROA not after:            Tue 17 Aug 2027 12:55:56 +0000
asID:                     53018
IP address blocks:        177.72.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/7853A8579AAC25C1D3CF341C8737A6301EAA865C.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/7853A8579AAC25C1D3CF341C8737A6301EAA865C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7853A8579AAC25C1D3CF341C8737A6301EAA865C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 21:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:99:7b:9c:5c:f7:19:f1:94:9a:f0:65:4f:b8:b5:fc:15:64:72:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7853A8579AAC25C1D3CF341C8737A6301EAA865C
        Validity
            Not Before: Aug 18 12:50:56 2026 GMT
            Not After : Aug 17 12:55:56 2027 GMT
        Subject: CN=B354C2758B7C878E4E2ABB5F40B3628856068DA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a0:69:8c:cd:58:7d:ce:ee:ea:b2:ee:66:d3:
                    d8:53:36:9c:3a:02:7b:64:31:a1:4e:83:85:87:3b:
                    be:b1:c5:da:34:e8:ec:bb:d0:8b:6b:92:30:10:ec:
                    94:92:11:92:d4:2e:cf:43:19:60:4a:ca:05:c1:46:
                    c1:30:f8:f3:27:9c:e9:25:e0:52:48:a4:ec:84:f9:
                    69:1b:13:16:ce:1e:86:c7:9f:35:c6:74:08:8a:01:
                    4c:b7:fc:fc:5d:28:f8:97:93:21:f6:3f:62:94:52:
                    78:25:77:3a:45:47:15:4e:55:dd:de:3c:bf:da:89:
                    c7:f6:09:17:11:12:75:da:92:07:7f:2f:5c:6d:07:
                    3a:15:7a:60:38:31:1a:87:51:2a:8e:08:7a:6c:b3:
                    38:f0:b4:5c:a3:50:ac:a4:9c:4d:7c:04:7e:ec:1c:
                    fd:29:29:01:50:31:ce:66:4b:af:83:ed:f4:ea:4c:
                    59:a9:fd:27:77:79:f6:34:c2:44:37:b2:e5:b1:a5:
                    31:8f:78:0b:75:3a:34:f1:5f:b7:3e:a4:bb:09:52:
                    77:1f:5a:ae:78:4e:4f:94:79:e8:65:b4:16:6c:fb:
                    3d:f6:b0:1a:17:5e:55:c2:93:8e:fe:3a:37:b7:7e:
                    a4:d1:09:d2:74:f5:a3:8d:a7:5a:9b:6a:2f:3f:9f:
                    26:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:54:C2:75:8B:7C:87:8E:4E:2A:BB:5F:40:B3:62:88:56:06:8D:A2
            X509v3 Authority Key Identifier:
                keyid:78:53:A8:57:9A:AC:25:C1:D3:CF:34:1C:87:37:A6:30:1E:AA:86:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/7853A8579AAC25C1D3CF341C8737A6301EAA865C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7853A8579AAC25C1D3CF341C8737A6301EAA865C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133382e302f32332d3233203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:9d:f0:66:e4:31:84:10:7b:7d:e4:57:6e:cd:c8:12:4b:9a:
         69:b6:e6:10:be:bc:08:ab:c5:92:52:fb:60:0d:2b:14:d1:6b:
         ef:2b:02:ce:87:1a:1d:46:a9:83:54:68:28:d3:0e:cb:52:13:
         4e:55:fb:25:c9:cf:8e:6b:31:70:ce:05:06:b8:b4:eb:7e:3e:
         ab:8a:24:b9:fc:43:4b:cb:a5:5f:5f:c9:9a:e8:a7:bc:9d:80:
         1a:26:d5:49:22:26:dd:0f:21:9f:38:3b:b0:7e:8d:63:99:63:
         7e:c2:bf:0e:6b:8d:45:ed:af:18:c5:5a:a7:e6:56:8b:f3:ac:
         1a:2d:4d:45:0b:93:0e:5f:c0:b9:46:6f:10:69:f6:16:aa:3c:
         9d:85:4e:8d:96:73:03:cd:b1:1c:10:6d:0c:f6:f9:ee:c6:d0:
         d2:d3:6a:c5:df:8b:e1:5b:70:ee:dd:50:ec:cc:cf:0c:b1:b3:
         de:20:52:36:58:58:95:bf:15:64:36:7d:1f:a1:05:04:d2:ee:
         02:a8:c4:cf:a9:60:26:ce:ee:3d:bf:1f:c6:dd:29:bd:ad:74:
         92:06:d2:27:88:17:f8:f0:74:8e:c6:f5:9c:89:ff:f5:55:e6:
         04:96:40:05:90:73:73:dc:d3:a7:00:e9:a2:3e:07:6e:45:3c:
         3a:0e:47:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:53:50 2026 by rpki-client