Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3137352e302f32342d3234203d3e203238323532.roa
File:                     3138372e312e3137352e302f32342d3234203d3e203238323532.roa (raw, json)
Hash identifier:          nEelW+Gqab9ZUtHOofmtK1KhMOHwkjpfzGmuCF9rfwM=
Subject key identifier:   88:81:CF:BE:CE:F9:39:0A:EF:5E:2C:0F:FA:C3:88:9A:3D:E1:5E:20
Certificate issuer:       /CN=7BD1822386ABA0E476B538AE1CE5CC51409C0B9F
Certificate serial:       14B5DB62C2226FC3E50614CF6B1DD2EBEA2B4463
Authority key identifier: 7B:D1:82:23:86:AB:A0:E4:76:B5:38:AE:1C:E5:CC:51:40:9C:0B:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3137352e302f32342d3234203d3e203238323532.roa
Signing time:             Tue 01 Sep 2026 12:16:42 +0000
ROA not before:           Tue 01 Sep 2026 12:11:42 +0000
ROA not after:            Tue 31 Aug 2027 12:16:42 +0000
asID:                     28252
IP address blocks:        187.1.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 02:29:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b5:db:62:c2:22:6f:c3:e5:06:14:cf:6b:1d:d2:eb:ea:2b:44:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BD1822386ABA0E476B538AE1CE5CC51409C0B9F
        Validity
            Not Before: Sep  1 12:11:42 2026 GMT
            Not After : Aug 31 12:16:42 2027 GMT
        Subject: CN=8881CFBECEF9390AEF5E2C0FFAC3889A3DE15E20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:09:e4:e9:55:c2:00:51:7b:2b:36:f4:12:d1:
                    83:8b:e4:16:b0:75:d4:27:77:fe:d9:51:df:cc:6f:
                    98:74:da:8a:a9:87:5c:c5:7a:52:94:e9:09:4b:81:
                    2b:1b:99:17:2b:9b:4e:d7:50:ed:99:33:8e:ac:f4:
                    ba:d8:43:3d:20:76:ed:c1:62:c5:72:1c:35:15:68:
                    5c:fa:80:5f:6a:05:d0:ea:65:29:69:42:f7:91:91:
                    65:42:64:6f:9d:8e:ab:9e:03:6a:65:81:d2:29:e5:
                    ba:59:36:62:1b:f4:9b:d2:ea:9f:85:c0:19:86:c6:
                    51:8c:bf:d3:56:b9:2a:42:f1:b7:dc:ee:83:48:af:
                    f8:9f:1a:2c:8c:b5:a3:0d:9d:05:11:61:de:df:f8:
                    f7:de:b2:a7:98:a9:9b:25:be:8e:ce:59:87:6b:de:
                    ce:39:1a:25:d3:21:db:ae:53:30:4d:79:8e:28:d7:
                    47:64:09:6e:6d:0a:13:8a:7c:15:70:28:f5:eb:47:
                    18:37:b9:69:09:4f:8b:51:ed:86:88:f7:9d:3d:d2:
                    53:f4:de:e9:60:17:5d:29:ef:ff:6f:65:3b:f2:7f:
                    87:2f:a6:c6:40:94:41:17:d8:d9:f7:e0:c5:50:27:
                    0a:8d:e4:bc:cf:11:c3:0d:12:9d:d4:f1:ca:13:38:
                    7e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:81:CF:BE:CE:F9:39:0A:EF:5E:2C:0F:FA:C3:88:9A:3D:E1:5E:20
            X509v3 Authority Key Identifier:
                keyid:7B:D1:82:23:86:AB:A0:E4:76:B5:38:AE:1C:E5:CC:51:40:9C:0B:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3137352e302f32342d3234203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:37:c8:96:53:0b:b1:02:6c:ec:c8:78:6d:46:19:57:b8:71:
         29:75:c8:a9:d3:d1:d6:33:69:14:c7:8d:dd:fe:7b:b8:cf:91:
         62:0d:bf:c8:ec:9c:1b:a6:dc:f9:48:59:11:e7:53:4b:18:30:
         15:46:51:ef:13:49:0c:bc:ab:77:b2:f8:e5:af:35:e0:07:65:
         02:3f:05:64:f8:2e:44:f7:1f:96:22:68:9a:b2:f1:86:26:c9:
         01:4f:95:96:d9:d1:05:82:9b:50:99:5a:e0:6f:d1:e2:57:a3:
         ba:f2:79:99:ad:e5:05:16:e2:96:69:2f:aa:52:f6:08:28:36:
         31:ba:67:12:3a:75:82:8e:c5:8e:52:5b:88:43:65:3c:51:22:
         ee:bb:dd:06:ec:58:be:1b:ad:00:b5:47:72:49:5d:87:02:32:
         b9:44:b5:3a:f9:f6:a6:89:6f:a6:c3:2a:d8:aa:d3:a5:63:07:
         5b:a4:d9:bf:69:38:91:2e:9a:52:7a:12:20:06:f3:f5:ba:41:
         97:3f:6f:50:07:bf:66:24:82:7c:41:c8:01:f4:fb:90:e1:09:
         c4:6f:46:c0:76:22:29:06:9c:cd:53:6f:6c:d9:87:b6:9b:7f:
         20:32:0a:bd:2c:7b:55:d5:4a:9e:b6:c0:1e:4a:58:cd:37:04:
         fe:75:76:02
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUFLXbYsIib8PlBhTPax3S6+orRGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0JEMTgyMjM4NkFCQTBFNDc2QjUzOEFFMUNFNUNDNTE0
MDlDMEI5RjAeFw0yNjA5MDExMjExNDJaFw0yNzA4MzExMjE2NDJaMDMxMTAvBgNV
BAMTKDg4ODFDRkJFQ0VGOTM5MEFFRjVFMkMwRkZBQzM4ODlBM0RFMTVFMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsCeTpVcIAUXsrNvQS0YOL5Baw
ddQnd/7ZUd/Mb5h02oqph1zFelKU6QlLgSsbmRcrm07XUO2ZM46s9LrYQz0gdu3B
YsVyHDUVaFz6gF9qBdDqZSlpQveRkWVCZG+djqueA2plgdIp5bpZNmIb9JvS6p+F
wBmGxlGMv9NWuSpC8bfc7oNIr/ifGiyMtaMNnQURYd7f+PfesqeYqZslvo7OWYdr
3s45GiXTIduuUzBNeY4o10dkCW5tChOKfBVwKPXrRxg3uWkJT4tR7YaI95090lP0
3ulgF10p7/9vZTvyf4cvpsZAlEEX2Nn34MVQJwqN5LzPEcMNEp3U8coTOH5zAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUiIHPvs75OQrvXiwP+sOImj3hXiAwHwYDVR0j
BBgwFoAUe9GCI4aroOR2tTiuHOXMUUCcC58wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3hTb0E0SkdDeHc0UVFIeEQySkNXWXFBaW5ucUIzZUVGdnFVNG4zbnZ1
bTMvMC83QkQxODIyMzg2QUJBMEU0NzZCNTM4QUUxQ0U1Q0M1MTQwOUMwQjlGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCRDE4MjIzODZBQkEwRTQ3
NkI1MzhBRTFDRTVDQzUxNDA5QzBCOUYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd4U29BNEpHQ3h3NFFRSHhEMkpDV1lxQWlubnFCM2VFRnZxVTRuM252dW0zLzAv
MzEzODM3MmUzMTJlMzEzNzM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMy
MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALsBrzANBgkqhkiG9w0BAQsFAAOCAQEAKDfIllMLsQJs
7Mh4bUYZV7hxKXXIqdPR1jNpFMeN3f57uM+RYg2/yOycG6bc+UhZEedTSxgwFUZR
7xNJDLyrd7L45a814AdlAj8FZPguRPcfliJomrLxhibJAU+VltnRBYKbUJla4G/R
4lejuvJ5ma3lBRbilmkvqlL2CCg2MbpnEjp1go7FjlJbiENlPFEi7rvdBuxYvhut
ALVHckldhwIyuUS1Ovn2polvpsMq2KrTpWMHW6TZv2k4kS6aUnoSIAbz9bpBlz9v
UAe/ZiSCfEHIAfT7kOEJxG9GwHYiKQaczVNvbNmHtpt/IDIKvSx7VdVKnrbAHkpY
zTcE/nV2Ag==
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:40:31 2026 by rpki-client