Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3134302e302f32332d3233203d3e203533303138.roa
File:                     3137372e37322e3134302e302f32332d3233203d3e203533303138.roa (raw, json)
Hash identifier:          yqNujw9MpAjsV4a8KTww8SZmtSsN2YpkhFjFUTGA7xg=
Subject key identifier:   08:8A:F9:89:AB:ED:2E:4F:FA:04:84:91:FB:4F:70:34:3B:D2:D6:3A
Certificate issuer:       /CN=7853A8579AAC25C1D3CF341C8737A6301EAA865C
Certificate serial:       17606A6829A974E8037BC713886869FD7E6DA82B
Authority key identifier: 78:53:A8:57:9A:AC:25:C1:D3:CF:34:1C:87:37:A6:30:1E:AA:86:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7853A8579AAC25C1D3CF341C8737A6301EAA865C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3134302e302f32332d3233203d3e203533303138.roa
Signing time:             Tue 18 Aug 2026 12:55:57 +0000
ROA not before:           Tue 18 Aug 2026 12:50:57 +0000
ROA not after:            Tue 17 Aug 2027 12:55:57 +0000
asID:                     53018
IP address blocks:        177.72.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/7853A8579AAC25C1D3CF341C8737A6301EAA865C.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/7853A8579AAC25C1D3CF341C8737A6301EAA865C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7853A8579AAC25C1D3CF341C8737A6301EAA865C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 21:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:60:6a:68:29:a9:74:e8:03:7b:c7:13:88:68:69:fd:7e:6d:a8:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7853A8579AAC25C1D3CF341C8737A6301EAA865C
        Validity
            Not Before: Aug 18 12:50:57 2026 GMT
            Not After : Aug 17 12:55:57 2027 GMT
        Subject: CN=088AF989ABED2E4FFA048491FB4F70343BD2D63A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ac:26:5a:68:74:3c:92:83:f5:28:41:db:94:
                    9b:9d:d2:3b:eb:a9:d2:9e:08:29:24:ac:ca:04:d6:
                    f1:ed:19:84:22:da:f2:d8:6a:9c:de:80:83:37:07:
                    64:55:c6:c4:cf:d3:dc:65:7b:40:b8:c3:ca:65:ac:
                    ca:5a:60:42:2b:b6:56:b9:80:31:f1:6d:b3:3d:cc:
                    8e:df:48:4b:ec:7b:77:37:0d:f2:94:b9:e3:b6:90:
                    30:e4:fb:ff:c1:80:48:f4:3c:68:35:13:09:e8:83:
                    27:02:bb:1b:6a:93:bb:c1:50:2d:b1:c3:a7:ab:13:
                    98:a8:d5:ef:08:3a:4f:32:79:ca:ea:90:49:6b:83:
                    d3:0d:4b:ae:e4:19:b7:32:2b:1b:60:98:3d:c2:1e:
                    09:28:4f:d3:88:2b:2f:68:ab:3a:fd:62:88:35:42:
                    0c:49:2e:e2:70:7b:e9:a2:4c:f6:74:cd:b9:13:a0:
                    97:6c:b1:7a:46:9f:54:bb:33:ad:b2:43:a6:a4:d3:
                    69:5b:94:5a:d1:8d:20:0f:3e:d6:71:1a:7f:41:17:
                    d7:a0:1c:f2:7b:b5:af:08:47:67:6c:dc:87:dc:ed:
                    01:a1:3b:7b:43:c3:94:a9:2a:a4:9e:58:3a:ba:dc:
                    3e:71:6e:45:26:01:58:86:ec:41:c6:09:58:2c:5a:
                    c5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8A:F9:89:AB:ED:2E:4F:FA:04:84:91:FB:4F:70:34:3B:D2:D6:3A
            X509v3 Authority Key Identifier:
                keyid:78:53:A8:57:9A:AC:25:C1:D3:CF:34:1C:87:37:A6:30:1E:AA:86:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/7853A8579AAC25C1D3CF341C8737A6301EAA865C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7853A8579AAC25C1D3CF341C8737A6301EAA865C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3134302e302f32332d3233203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:7e:2b:b5:29:b3:b2:8b:d6:4f:07:74:a9:10:a6:b3:ac:0c:
         c5:65:ea:32:99:c5:be:72:36:27:c2:8f:d3:11:4c:f3:49:5c:
         7a:aa:92:db:98:21:de:32:34:61:17:d1:a5:9c:bb:ee:82:80:
         60:71:66:f7:26:9b:e5:1c:5e:42:d5:d8:3f:1d:91:c2:50:b0:
         b9:7a:2c:77:30:83:d1:02:9b:43:b3:91:5e:eb:6d:d3:f5:4b:
         c1:25:0b:30:b2:9d:20:67:69:48:2c:4b:92:14:92:e2:49:93:
         45:50:08:cd:26:e5:90:09:97:24:6e:a6:6f:18:35:22:2f:96:
         cb:eb:cd:a7:fc:e6:9b:0c:50:11:0c:71:e9:d0:d2:06:d4:17:
         75:c3:95:f1:bc:13:9d:be:41:58:d5:98:da:85:e2:b5:13:17:
         86:4c:1d:91:04:4d:b5:c5:0d:80:35:dd:8f:c4:70:f7:f0:e3:
         10:e3:5a:be:a3:96:8a:4b:d8:f5:9c:80:28:a6:c1:16:ae:e5:
         c1:c6:86:1e:22:5c:0a:f9:3f:29:de:0c:63:68:e8:91:8b:0f:
         45:c1:da:50:31:9d:82:a1:ae:7c:c7:82:92:b9:cf:46:20:76:
         e4:e3:ae:a5:c0:30:dd:5b:40:e0:76:22:74:3a:c5:a8:1c:cd:
         eb:e3:b5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 04:38:27 2026 by rpki-client