Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136322e302f32332d3233203d3e203238323532.roa
File:                     3138372e312e3136322e302f32332d3233203d3e203238323532.roa (raw, json)
Hash identifier:          6N/fFWBC38CmQUY1riK56XCtKW5A9512Mqa8sIA7Vns=
Subject key identifier:   78:DF:E7:CF:F9:13:D6:54:01:F9:4F:EE:A3:13:B2:50:36:30:B7:B0
Certificate issuer:       /CN=7BD1822386ABA0E476B538AE1CE5CC51409C0B9F
Certificate serial:       532D7687FE8A7705E9A78B64657E2C01E465D112
Authority key identifier: 7B:D1:82:23:86:AB:A0:E4:76:B5:38:AE:1C:E5:CC:51:40:9C:0B:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136322e302f32332d3233203d3e203238323532.roa
Signing time:             Tue 01 Sep 2026 12:16:38 +0000
ROA not before:           Tue 01 Sep 2026 12:11:38 +0000
ROA not after:            Tue 31 Aug 2027 12:16:38 +0000
asID:                     28252
IP address blocks:        187.1.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 21:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:2d:76:87:fe:8a:77:05:e9:a7:8b:64:65:7e:2c:01:e4:65:d1:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BD1822386ABA0E476B538AE1CE5CC51409C0B9F
        Validity
            Not Before: Sep  1 12:11:38 2026 GMT
            Not After : Aug 31 12:16:38 2027 GMT
        Subject: CN=78DFE7CFF913D65401F94FEEA313B2503630B7B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9b:df:35:dd:f4:bb:f4:68:f4:bd:bb:e7:f4:
                    66:34:7b:77:36:3b:e9:56:fe:a5:a9:00:2d:60:87:
                    b3:bb:2d:e6:df:82:85:4a:81:e5:b0:a7:13:b2:a4:
                    91:f4:82:ab:a5:34:a6:2c:76:f8:92:26:01:7e:99:
                    69:fb:ee:a2:ec:0b:e5:05:c0:97:a2:c5:a2:34:27:
                    0a:f9:72:b5:e7:ed:e7:89:7c:67:1b:a0:fe:a3:96:
                    71:43:c5:4a:13:a0:89:13:0b:15:c0:41:9f:ff:22:
                    da:5e:aa:a8:3e:cb:58:66:aa:95:72:a4:d4:07:e2:
                    ea:51:84:0d:eb:17:3b:4d:2b:8b:fd:23:d1:36:d1:
                    43:3d:e6:01:10:4d:cf:fa:b8:41:53:ea:d2:5e:74:
                    b7:12:42:b5:60:11:79:1d:8b:15:b2:fb:2e:d1:9a:
                    b6:c9:7c:fc:d8:3b:d5:9a:bf:dc:47:d1:91:06:32:
                    9c:e4:55:97:8f:34:19:09:52:0f:03:6b:fb:b5:31:
                    19:ad:2e:8b:d0:80:3b:9b:1f:e7:a5:ec:7b:0f:c7:
                    f4:7d:bb:cb:a9:e7:a6:2d:92:86:2f:99:77:8e:3e:
                    40:f4:34:c3:f7:01:73:41:7b:c0:d7:b2:8e:37:ab:
                    e8:47:d8:7e:b4:9a:d5:ca:2a:94:c7:e9:5d:de:02:
                    84:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DF:E7:CF:F9:13:D6:54:01:F9:4F:EE:A3:13:B2:50:36:30:B7:B0
            X509v3 Authority Key Identifier:
                keyid:7B:D1:82:23:86:AB:A0:E4:76:B5:38:AE:1C:E5:CC:51:40:9C:0B:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136322e302f32332d3233203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:35:c6:ad:9e:2c:36:6a:ee:84:72:80:ff:19:9a:ef:b9:5d:
         af:39:b3:d3:0d:b3:e5:42:13:ff:cf:fa:5f:ab:8f:1a:47:23:
         50:4f:eb:93:3a:a3:5d:98:d8:c5:2b:0a:a2:e0:37:6c:52:50:
         91:60:9f:72:a0:78:9a:55:9f:3d:20:fc:43:18:0b:07:d1:c8:
         58:99:d7:8f:b3:40:51:9d:ef:73:dc:f5:4d:d7:3f:28:37:78:
         01:86:78:8b:e6:ad:c3:14:e1:e2:c7:bf:a2:8f:29:8f:eb:82:
         09:6f:19:bf:57:59:71:d3:e0:3f:f1:6e:2e:97:6a:2a:20:b6:
         0f:5e:fc:9f:d2:50:fa:00:65:93:ad:45:fe:19:64:2c:c7:71:
         1f:52:da:4d:ca:9e:02:bc:db:9b:23:81:d8:a4:84:31:b1:d1:
         75:5b:f7:a1:5e:56:65:82:cb:be:d4:0c:a1:a8:8c:e4:b7:16:
         ec:ce:30:16:c6:3d:c6:1d:4e:ee:cf:2d:c5:88:7c:a4:3b:75:
         c3:79:51:b4:00:bf:cc:2d:02:10:2b:5c:4b:2b:45:4f:67:28:
         d2:8e:71:fa:c4:2f:e3:9f:7f:ab:79:18:4e:1d:03:b5:d5:23:
         cf:28:8b:fa:a6:4f:a5:d0:ea:e0:61:df:a6:85:19:74:92:ed:
         c4:2a:5a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:39:01 2026 by rpki-client