Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/3133312e37322e3136342e302f32332d3233203d3e20323638343837.roa
File:                     3133312e37322e3136342e302f32332d3233203d3e20323638343837.roa (raw, json)
Hash identifier:          vglmPAoxLieTpCsvtJL1yFqDJMtJJIvjcxswebuuxac=
Subject key identifier:   2E:05:9A:05:AD:9A:C5:E1:64:FB:05:B2:61:A0:73:CB:9E:6D:D3:A4
Certificate issuer:       /CN=464B947257F06B70E4456A2AACFED298FBBEE866
Certificate serial:       70C6752327B1FD8D1E247C23CE2503E77C3F9C24
Authority key identifier: 46:4B:94:72:57:F0:6B:70:E4:45:6A:2A:AC:FE:D2:98:FB:BE:E8:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464B947257F06B70E4456A2AACFED298FBBEE866.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/3133312e37322e3136342e302f32332d3233203d3e20323638343837.roa
Signing time:             Fri 26 Jun 2026 13:54:20 +0000
ROA not before:           Fri 26 Jun 2026 13:49:20 +0000
ROA not after:            Fri 25 Jun 2027 13:54:20 +0000
asID:                     268487
IP address blocks:        131.72.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/464B947257F06B70E4456A2AACFED298FBBEE866.crl
                          rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/464B947257F06B70E4456A2AACFED298FBBEE866.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464B947257F06B70E4456A2AACFED298FBBEE866.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 11:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c6:75:23:27:b1:fd:8d:1e:24:7c:23:ce:25:03:e7:7c:3f:9c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464B947257F06B70E4456A2AACFED298FBBEE866
        Validity
            Not Before: Jun 26 13:49:20 2026 GMT
            Not After : Jun 25 13:54:20 2027 GMT
        Subject: CN=2E059A05AD9AC5E164FB05B261A073CB9E6DD3A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a6:34:50:d0:c8:ab:85:06:3b:8a:fb:03:5b:
                    11:dc:bb:ff:9c:66:d1:94:dc:6a:2c:22:3a:61:cb:
                    42:54:e1:1a:db:c3:21:eb:0a:ec:1a:d0:5d:50:2b:
                    73:2c:a5:71:17:e5:b6:f5:a9:f9:37:10:57:f1:9a:
                    4c:55:ac:c5:8e:18:da:8e:5f:9b:46:3c:a5:df:63:
                    59:ef:21:c1:2d:64:3f:7a:d5:10:51:f8:0c:a1:a9:
                    dc:58:34:11:70:4e:a5:24:b9:f4:41:6c:97:30:42:
                    3c:95:a0:1d:63:61:97:ab:43:a3:d4:4f:dd:fc:19:
                    c9:08:a1:5b:09:b3:c2:a8:a2:94:e3:16:5c:15:fe:
                    ac:c7:7c:ff:00:ff:2f:25:d6:a2:2d:c4:e7:1c:39:
                    50:44:5e:df:16:d0:25:c8:64:d8:0f:79:57:00:3f:
                    0e:44:a7:b7:e4:ee:65:4d:31:34:ac:5e:79:17:99:
                    d4:08:57:4b:f8:fc:83:c0:25:19:c6:fc:2b:33:f2:
                    64:bc:ba:4c:3f:fb:af:d2:92:7f:b2:a1:0a:21:60:
                    1b:1e:83:28:32:df:92:70:5d:14:d8:c1:4e:7a:63:
                    fa:ba:4b:29:34:04:54:a7:97:9b:7c:ba:60:d4:a4:
                    15:67:19:a9:2a:df:54:54:97:a7:d3:1c:ce:dc:d2:
                    9e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:05:9A:05:AD:9A:C5:E1:64:FB:05:B2:61:A0:73:CB:9E:6D:D3:A4
            X509v3 Authority Key Identifier:
                keyid:46:4B:94:72:57:F0:6B:70:E4:45:6A:2A:AC:FE:D2:98:FB:BE:E8:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/464B947257F06B70E4456A2AACFED298FBBEE866.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464B947257F06B70E4456A2AACFED298FBBEE866.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/3133312e37322e3136342e302f32332d3233203d3e20323638343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:93:6b:95:f6:b6:59:aa:95:b5:39:89:1e:c7:c8:e7:c6:38:
         fc:b1:21:5a:f5:16:bd:c7:b3:e6:d9:11:9a:b0:93:2a:1a:b9:
         e4:75:a6:da:8a:34:cb:d1:bd:3d:3c:e6:f7:87:cb:70:c5:a8:
         63:a9:13:b4:dc:07:f5:fc:eb:25:27:cd:c6:4f:bc:d8:8f:25:
         13:ad:45:70:33:c9:4a:b5:40:f8:ee:8f:bb:68:6c:da:d0:eb:
         cb:dc:89:d9:b3:8f:b9:58:57:7e:18:6d:fc:dc:63:a6:7a:37:
         a3:73:07:a0:ad:e4:2a:06:7d:0f:ec:fb:a8:ae:5e:a6:0d:70:
         45:46:9c:f5:18:18:c4:71:be:95:62:90:e8:f5:c5:89:aa:37:
         d8:08:0b:86:78:5d:00:62:1a:5d:bf:50:19:d1:67:c6:5b:c6:
         ed:e1:01:44:1c:18:bf:57:f6:1e:37:ab:77:bd:27:b5:98:32:
         9a:03:14:a2:2b:a9:54:67:f7:e9:55:ef:2e:46:d7:35:f3:a5:
         2b:05:d2:e9:11:71:41:b4:9f:03:e6:40:f4:69:cf:8d:c7:7c:
         29:d8:f7:2e:ed:c6:0b:87:7f:64:42:a8:ec:92:60:b6:60:12:
         62:57:89:0f:15:1e:91:ab:13:21:06:91:06:89:c9:4c:50:c0:
         c7:e5:6b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:01:00 2026 by rpki-client