Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3134302e302f32322d3232203d3e203533303138.roa
File:                     3137372e37322e3134302e302f32322d3232203d3e203533303138.roa (raw, json)
Hash identifier:          1M5DCZXivl3U8eWfd0AMEBg4ANdi0R5miz0tbTik9gI=
Subject key identifier:   8A:D5:24:59:83:65:D9:D3:1F:7D:63:A4:BD:F0:19:0B:9D:B3:61:0E
Certificate issuer:       /CN=7853A8579AAC25C1D3CF341C8737A6301EAA865C
Certificate serial:       6AC97A287D814203E52E35CA515D713261B5F8AB
Authority key identifier: 78:53:A8:57:9A:AC:25:C1:D3:CF:34:1C:87:37:A6:30:1E:AA:86:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7853A8579AAC25C1D3CF341C8737A6301EAA865C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3134302e302f32322d3232203d3e203533303138.roa
Signing time:             Tue 18 Aug 2026 12:55:59 +0000
ROA not before:           Tue 18 Aug 2026 12:50:59 +0000
ROA not after:            Tue 17 Aug 2027 12:55:59 +0000
asID:                     53018
IP address blocks:        177.72.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/7853A8579AAC25C1D3CF341C8737A6301EAA865C.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/7853A8579AAC25C1D3CF341C8737A6301EAA865C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7853A8579AAC25C1D3CF341C8737A6301EAA865C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 21:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c9:7a:28:7d:81:42:03:e5:2e:35:ca:51:5d:71:32:61:b5:f8:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7853A8579AAC25C1D3CF341C8737A6301EAA865C
        Validity
            Not Before: Aug 18 12:50:59 2026 GMT
            Not After : Aug 17 12:55:59 2027 GMT
        Subject: CN=8AD524598365D9D31F7D63A4BDF0190B9DB3610E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6f:c0:f0:e2:c6:1a:ce:ec:00:08:90:fc:6b:
                    67:93:2c:2a:18:30:12:c1:a3:a6:03:e6:ba:32:34:
                    8d:3e:e2:84:1e:05:71:c9:f0:74:2e:21:e9:2d:5a:
                    88:c2:82:1e:09:17:31:bd:2c:2e:65:d2:55:d3:23:
                    41:c6:3b:a0:bd:85:b8:44:1d:cb:c1:81:62:67:b6:
                    d7:8b:67:e0:0b:d3:6a:a5:03:62:2b:f5:05:67:73:
                    c2:7f:d2:b2:6d:91:51:57:d6:9d:18:8e:12:a7:1b:
                    66:a5:71:ae:73:8a:bd:57:7e:e4:63:51:b0:76:e4:
                    6e:69:36:17:63:aa:4e:a3:41:f0:e0:cd:77:b3:f1:
                    ec:7e:80:32:ec:49:66:2d:68:61:48:ba:b0:63:80:
                    d7:21:88:7d:4a:00:93:c0:f3:ff:94:c2:94:0a:78:
                    ba:ce:a8:54:77:cd:09:d9:36:71:7b:b3:98:f9:c5:
                    a3:0a:9f:a6:3c:68:61:d1:86:3e:7b:f7:3f:7f:0f:
                    f9:10:90:e0:66:84:8d:04:8d:67:c0:32:5f:79:a8:
                    8d:50:52:0a:5f:02:90:8e:78:83:9e:f5:53:cb:fa:
                    57:58:b6:31:da:e7:fd:2c:1b:87:92:00:99:bc:81:
                    2e:f6:34:08:03:bd:54:1a:ee:e3:f2:9b:82:bd:8f:
                    ab:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D5:24:59:83:65:D9:D3:1F:7D:63:A4:BD:F0:19:0B:9D:B3:61:0E
            X509v3 Authority Key Identifier:
                keyid:78:53:A8:57:9A:AC:25:C1:D3:CF:34:1C:87:37:A6:30:1E:AA:86:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/7853A8579AAC25C1D3CF341C8737A6301EAA865C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7853A8579AAC25C1D3CF341C8737A6301EAA865C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3134302e302f32322d3232203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:53:1b:a7:d7:2c:d6:3a:0d:8e:52:e0:bc:3e:85:0b:89:55:
         13:0f:2a:8d:ff:26:65:4f:79:85:58:ac:1b:09:1c:6e:7d:46:
         13:ef:59:1e:35:47:2e:de:5f:1c:04:f2:47:f6:6d:2d:20:46:
         d6:d8:dd:26:c7:85:57:35:9c:37:ff:2d:b1:06:a2:d2:0c:16:
         e3:95:b6:ec:a1:ef:1f:9e:49:6a:91:4b:9d:36:0f:a0:2c:c2:
         a8:f7:01:cd:fb:a8:43:b1:ce:05:11:69:b7:6c:92:d0:76:63:
         78:69:58:15:6f:0b:e3:99:ea:e8:3a:3a:0a:65:00:0b:34:d8:
         e7:72:0e:eb:28:30:b3:60:ff:b5:17:82:20:d0:90:9f:2c:ec:
         c0:b9:1a:69:4e:44:ac:fa:01:1b:36:9b:47:6b:1e:64:3c:15:
         3a:06:cb:bd:31:c8:4d:4f:b8:e4:49:62:f1:f5:38:55:89:55:
         38:63:4b:57:69:e9:d5:f4:db:d8:dd:c4:96:58:aa:d2:48:0e:
         08:b2:32:21:bc:de:b4:af:9b:36:94:fa:9c:6a:45:36:91:25:
         81:48:d1:41:fb:04:97:31:f0:9e:66:89:c0:a8:b6:e2:b4:b6:
         51:6e:3f:7b:58:39:65:29:3a:f9:d2:df:c1:da:71:1e:5a:71:
         89:18:ed:5f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUasl6KH2BQgPlLjXKUV1xMmG1+KswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzg1M0E4NTc5QUFDMjVDMUQzQ0YzNDFDODczN0E2MzAx
RUFBODY1QzAeFw0yNjA4MTgxMjUwNTlaFw0yNzA4MTcxMjU1NTlaMDMxMTAvBgNV
BAMTKDhBRDUyNDU5ODM2NUQ5RDMxRjdENjNBNEJERjAxOTBCOURCMzYxMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKb8Dw4sYazuwACJD8a2eTLCoY
MBLBo6YD5royNI0+4oQeBXHJ8HQuIektWojCgh4JFzG9LC5l0lXTI0HGO6C9hbhE
HcvBgWJntteLZ+AL02qlA2Ir9QVnc8J/0rJtkVFX1p0YjhKnG2alca5zir1XfuRj
UbB25G5pNhdjqk6jQfDgzXez8ex+gDLsSWYtaGFIurBjgNchiH1KAJPA8/+UwpQK
eLrOqFR3zQnZNnF7s5j5xaMKn6Y8aGHRhj579z9/D/kQkOBmhI0EjWfAMl95qI1Q
UgpfApCOeIOe9VPL+ldYtjHa5/0sG4eSAJm8gS72NAgDvVQa7uPym4K9j6tFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUitUkWYNl2dMffWOkvfAZC52zYQ4wHwYDVR0j
BBgwFoAUeFOoV5qsJcHTzzQchzemMB6qhlwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0U3Tk1BUnBnM2NQYzN0VVprRk1yS3pSdEdiNVJIdHlCR3B6dEZWV011
SmYvMC83ODUzQTg1NzlBQUMyNUMxRDNDRjM0MUM4NzM3QTYzMDFFQUE4NjVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4NTNBODU3OUFBQzI1QzFE
M0NGMzQxQzg3MzdBNjMwMUVBQTg2NUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdFN05NQVJwZzNjUGMzdFVaa0ZNckt6UnRHYjVSSHR5QkdwenRGVldNdUpmLzAv
MzEzNzM3MmUzNzMyMmUzMTM0MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMz
MzAzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsUiMMA0GCSqGSIb3DQEBCwUAA4IBAQBoUxun1yzW
Og2OUuC8PoULiVUTDyqN/yZlT3mFWKwbCRxufUYT71keNUcu3l8cBPJH9m0tIEbW
2N0mx4VXNZw3/y2xBqLSDBbjlbbsoe8fnklqkUudNg+gLMKo9wHN+6hDsc4FEWm3
bJLQdmN4aVgVbwvjmeroOjoKZQALNNjncg7rKDCzYP+1F4Ig0JCfLOzAuRppTkSs
+gEbNptHax5kPBU6Bsu9MchNT7jkSWLx9ThViVU4Y0tXaenV9NvY3cSWWKrSSA4I
sjIhvN60r5s2lPqcakU2kSWBSNFB+wSXMfCeZonAqLbitLZRbj97WDllKTr50t/B
2nEeWnGJGO1f
-----END CERTIFICATE-----
Generated at Mon Aug 24 02:23:19 2026 by rpki-client