Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3137342e302f32342d3234203d3e203238323532.roa
File:                     3138372e312e3137342e302f32342d3234203d3e203238323532.roa (raw, json)
Hash identifier:          EML/UtfUCLUAjjzryS1mU6EHuTzV7YKeJRRYbA8/OTc=
Subject key identifier:   B5:D3:A3:A5:8B:2F:DC:BA:FA:3F:E0:8F:EC:4F:F1:B6:DD:3F:E2:B0
Certificate issuer:       /CN=7BD1822386ABA0E476B538AE1CE5CC51409C0B9F
Certificate serial:       4D8E1B3CDA3325AB2BC5B34DC7EB69A80B334C60
Authority key identifier: 7B:D1:82:23:86:AB:A0:E4:76:B5:38:AE:1C:E5:CC:51:40:9C:0B:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3137342e302f32342d3234203d3e203238323532.roa
Signing time:             Tue 01 Sep 2026 12:16:45 +0000
ROA not before:           Tue 01 Sep 2026 12:11:45 +0000
ROA not after:            Tue 31 Aug 2027 12:16:45 +0000
asID:                     28252
IP address blocks:        187.1.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 02:29:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:8e:1b:3c:da:33:25:ab:2b:c5:b3:4d:c7:eb:69:a8:0b:33:4c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BD1822386ABA0E476B538AE1CE5CC51409C0B9F
        Validity
            Not Before: Sep  1 12:11:45 2026 GMT
            Not After : Aug 31 12:16:45 2027 GMT
        Subject: CN=B5D3A3A58B2FDCBAFA3FE08FEC4FF1B6DD3FE2B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d0:22:b7:7a:c1:f4:9b:5c:19:94:b7:e6:b2:
                    b7:87:ca:73:c1:79:fd:64:ec:2e:f4:4e:5d:60:9d:
                    6b:bf:57:b9:e3:18:de:ea:11:d1:f5:e3:82:98:9f:
                    05:e7:39:29:58:03:75:b2:b8:3f:88:c8:14:20:2d:
                    35:e8:93:7b:2e:ca:07:12:57:c0:35:2d:f1:03:ec:
                    1e:c1:6b:97:96:9e:1d:a2:13:bc:59:b8:7c:fe:3a:
                    26:e5:ca:23:7d:d9:3d:2d:08:31:82:f8:0b:c4:2d:
                    b3:1b:2b:3d:9d:a7:ca:25:e5:33:3a:54:22:2e:ca:
                    b1:e3:23:e2:aa:1e:ea:c6:78:0c:0f:1f:71:60:97:
                    da:40:c9:7e:b4:69:02:0b:3a:18:4e:6b:d2:60:ee:
                    69:98:13:68:fc:91:f3:87:99:02:81:25:64:5e:48:
                    c9:38:bc:0b:fb:57:ba:ed:60:8b:33:ba:b1:3a:3b:
                    44:84:72:d7:fe:fb:f4:6f:88:d4:98:70:46:5e:a7:
                    e9:e2:2c:27:f3:db:10:9c:85:3b:1b:82:63:81:ca:
                    10:eb:b1:5e:a5:32:2c:7b:2e:61:f7:17:ce:21:7b:
                    c7:13:34:42:9e:36:4d:aa:19:68:53:25:56:27:b3:
                    6b:bf:49:5d:58:77:d4:eb:53:d3:70:f3:ca:08:6d:
                    0f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D3:A3:A5:8B:2F:DC:BA:FA:3F:E0:8F:EC:4F:F1:B6:DD:3F:E2:B0
            X509v3 Authority Key Identifier:
                keyid:7B:D1:82:23:86:AB:A0:E4:76:B5:38:AE:1C:E5:CC:51:40:9C:0B:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3137342e302f32342d3234203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:9f:8b:87:2f:d9:64:60:ae:03:38:9d:fb:a2:95:90:11:86:
         01:79:53:0f:e9:a5:eb:1e:11:44:39:92:5e:eb:7c:64:60:c5:
         c4:1d:f8:4b:35:dd:08:76:29:73:5d:3e:b0:10:38:85:b4:03:
         51:a4:95:58:4c:c9:10:78:69:cf:ef:04:1e:44:1a:a8:a8:0f:
         68:17:9d:ac:b2:40:4e:29:ca:9f:cb:65:cd:42:56:2e:37:82:
         5b:ee:b3:e6:75:62:1d:d2:7f:51:9f:dc:8e:4f:6f:48:09:b0:
         18:e4:31:9a:ef:38:e6:3b:91:b1:bd:7d:b1:be:00:13:ff:90:
         c4:bf:06:4f:3c:23:80:7d:82:c6:f0:8d:e6:cf:85:36:24:b2:
         8a:e0:4d:ba:a8:c6:fa:71:d1:5c:c0:b0:72:d2:a2:5a:cf:df:
         66:22:8c:e8:17:a8:a6:e3:81:8a:a3:e0:29:3a:cf:62:69:7d:
         0e:22:9a:28:05:11:82:cf:e8:ee:c7:74:d0:9e:f6:e3:78:57:
         a4:67:5f:9b:79:01:1f:b6:49:73:b4:a0:ba:d4:97:0d:77:8c:
         0c:33:ad:91:4b:0b:14:ba:4a:42:98:d8:5f:b5:18:b8:90:ac:
         3d:81:41:13:b1:e0:23:a7:bc:a0:70:45:41:f1:bf:98:58:9a:
         e6:66:f9:40
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUTY4bPNozJasrxbNNx+tpqAszTGAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0JEMTgyMjM4NkFCQTBFNDc2QjUzOEFFMUNFNUNDNTE0
MDlDMEI5RjAeFw0yNjA5MDExMjExNDVaFw0yNzA4MzExMjE2NDVaMDMxMTAvBgNV
BAMTKEI1RDNBM0E1OEIyRkRDQkFGQTNGRTA4RkVDNEZGMUI2REQzRkUyQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC40CK3esH0m1wZlLfmsreHynPB
ef1k7C70Tl1gnWu/V7njGN7qEdH144KYnwXnOSlYA3WyuD+IyBQgLTXok3suygcS
V8A1LfED7B7Ba5eWnh2iE7xZuHz+OiblyiN92T0tCDGC+AvELbMbKz2dp8ol5TM6
VCIuyrHjI+KqHurGeAwPH3Fgl9pAyX60aQILOhhOa9Jg7mmYE2j8kfOHmQKBJWRe
SMk4vAv7V7rtYIszurE6O0SEctf++/RviNSYcEZep+niLCfz2xCchTsbgmOByhDr
sV6lMix7LmH3F84he8cTNEKeNk2qGWhTJVYns2u/SV1Yd9TrU9Nw88oIbQ8lAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUtdOjpYsv3Lr6P+CP7E/xtt0/4rAwHwYDVR0j
BBgwFoAUe9GCI4aroOR2tTiuHOXMUUCcC58wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3hTb0E0SkdDeHc0UVFIeEQySkNXWXFBaW5ucUIzZUVGdnFVNG4zbnZ1
bTMvMC83QkQxODIyMzg2QUJBMEU0NzZCNTM4QUUxQ0U1Q0M1MTQwOUMwQjlGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCRDE4MjIzODZBQkEwRTQ3
NkI1MzhBRTFDRTVDQzUxNDA5QzBCOUYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd4U29BNEpHQ3h3NFFRSHhEMkpDV1lxQWlubnFCM2VFRnZxVTRuM252dW0zLzAv
MzEzODM3MmUzMTJlMzEzNzM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMy
MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALsBrjANBgkqhkiG9w0BAQsFAAOCAQEALZ+Lhy/ZZGCu
Azid+6KVkBGGAXlTD+ml6x4RRDmSXut8ZGDFxB34SzXdCHYpc10+sBA4hbQDUaSV
WEzJEHhpz+8EHkQaqKgPaBedrLJATinKn8tlzUJWLjeCW+6z5nViHdJ/UZ/cjk9v
SAmwGOQxmu845juRsb19sb4AE/+QxL8GTzwjgH2CxvCN5s+FNiSyiuBNuqjG+nHR
XMCwctKiWs/fZiKM6BeopuOBiqPgKTrPYml9DiKaKAURgs/o7sd00J7243hXpGdf
m3kBH7ZJc7SgutSXDXeMDDOtkUsLFLpKQpjYX7UYuJCsPYFBE7HgI6e8oHBFQfG/
mFia5mb5QA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 19:38:05 2026 by rpki-client