Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133382e302f32342d3234203d3e203533303138.roa
File:                     3137372e37322e3133382e302f32342d3234203d3e203533303138.roa (raw, json)
Hash identifier:          GWGcfbCZXCSRHd/bU4Y2q15NLL0T08wxY1knCxHcAGM=
Subject key identifier:   6B:A9:8B:07:B0:15:E7:0C:D5:A4:71:EC:0F:2C:D7:D1:32:CA:05:01
Certificate issuer:       /CN=7853A8579AAC25C1D3CF341C8737A6301EAA865C
Certificate serial:       36449A657914DD7A777785AB9592B2EB488DF9C5
Authority key identifier: 78:53:A8:57:9A:AC:25:C1:D3:CF:34:1C:87:37:A6:30:1E:AA:86:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7853A8579AAC25C1D3CF341C8737A6301EAA865C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133382e302f32342d3234203d3e203533303138.roa
Signing time:             Tue 18 Aug 2026 12:55:56 +0000
ROA not before:           Tue 18 Aug 2026 12:50:56 +0000
ROA not after:            Tue 17 Aug 2027 12:55:56 +0000
asID:                     53018
IP address blocks:        177.72.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/7853A8579AAC25C1D3CF341C8737A6301EAA865C.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/7853A8579AAC25C1D3CF341C8737A6301EAA865C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7853A8579AAC25C1D3CF341C8737A6301EAA865C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 21:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:44:9a:65:79:14:dd:7a:77:77:85:ab:95:92:b2:eb:48:8d:f9:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7853A8579AAC25C1D3CF341C8737A6301EAA865C
        Validity
            Not Before: Aug 18 12:50:56 2026 GMT
            Not After : Aug 17 12:55:56 2027 GMT
        Subject: CN=6BA98B07B015E70CD5A471EC0F2CD7D132CA0501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:11:d3:94:a8:78:d1:d0:08:d5:42:a5:1b:b0:
                    65:d2:0f:0b:fe:40:71:65:4d:12:ab:db:e9:60:e5:
                    72:70:55:ea:ec:0f:be:c4:d8:42:9e:4f:4a:c9:d4:
                    e6:81:2d:14:be:96:e1:15:e9:f5:4f:cc:77:39:dd:
                    b6:ee:c7:07:c4:f6:28:b2:1f:e9:66:e1:da:37:c2:
                    b3:26:28:e4:89:62:d8:ff:62:6a:af:f3:21:31:9f:
                    6a:67:82:af:bf:29:a0:e5:8d:db:90:32:62:ba:10:
                    dc:09:e1:9d:a0:27:86:a4:b8:ec:f2:59:b1:10:0d:
                    ab:a0:5e:15:9b:ac:3c:37:0c:e9:c1:95:0c:5a:ef:
                    9b:bc:49:c8:c0:b6:c0:a2:4c:d3:4c:50:4c:65:a8:
                    42:a4:04:c5:2d:48:07:4e:f8:d9:29:d1:8a:09:dc:
                    15:48:8c:94:49:fe:af:e9:a6:dc:a1:eb:0d:bf:6b:
                    11:79:c5:8d:12:72:c0:83:02:24:7a:b3:a1:da:eb:
                    0c:bb:02:5e:7c:05:13:b4:79:fa:b5:f9:47:ca:25:
                    fa:d6:ac:f2:5e:14:8f:09:61:25:2c:05:10:dd:01:
                    63:e6:e4:dd:99:61:49:24:55:e0:76:6a:7b:a4:86:
                    40:12:09:04:0a:86:51:2b:3c:ee:c3:41:ed:92:98:
                    fc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A9:8B:07:B0:15:E7:0C:D5:A4:71:EC:0F:2C:D7:D1:32:CA:05:01
            X509v3 Authority Key Identifier:
                keyid:78:53:A8:57:9A:AC:25:C1:D3:CF:34:1C:87:37:A6:30:1E:AA:86:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/7853A8579AAC25C1D3CF341C8737A6301EAA865C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7853A8579AAC25C1D3CF341C8737A6301EAA865C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133382e302f32342d3234203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:89:dc:45:34:0e:3a:58:27:28:bd:35:3d:f9:f1:e0:7e:a3:
         76:06:a2:c9:1f:31:8d:3f:ec:5b:24:c0:ac:ee:e3:e4:ba:ee:
         4e:c9:40:b3:e6:f5:e6:8a:7b:52:f9:6d:b6:d8:d6:98:0c:79:
         97:31:3d:18:b3:df:7b:2c:29:a8:4d:8f:50:8f:fe:73:e4:56:
         be:15:20:92:19:3a:25:e6:d3:a3:bf:ec:ce:18:c6:dc:43:7c:
         8c:b3:d1:96:94:aa:21:da:1a:72:fa:5d:1b:4d:a3:07:bf:83:
         48:65:9a:1b:57:23:b2:90:49:1e:99:df:c2:76:76:08:b0:b8:
         31:bd:47:62:f1:62:fd:eb:9f:21:3a:a6:50:c0:a5:8e:bf:6a:
         8f:ad:a0:a2:0e:93:16:b9:51:47:86:a7:18:38:97:db:ac:02:
         a8:01:a5:63:0a:08:c9:6e:37:ab:1b:ac:86:f9:e2:fb:48:e1:
         be:84:f6:ba:1a:57:dd:f8:9f:b8:2e:71:4d:a6:42:4a:78:e0:
         f3:81:48:ff:46:3c:fc:07:4d:71:02:98:7b:63:cc:9c:7a:55:
         e2:82:45:04:9d:80:fc:f3:fd:1a:eb:cd:6f:f1:2b:39:94:33:
         0e:6b:5d:56:69:5e:87:0d:47:09:7d:23:63:1b:82:c9:39:14:
         34:85:52:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 12:28:39 2026 by rpki-client