Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/3137372e37322e35342e302f32342d3234203d3e20323634383830.roa
File:                     3137372e37322e35342e302f32342d3234203d3e20323634383830.roa (raw, json)
Hash identifier:          qb3P5E4/vdNFJQ//Fm7SEJjcWhLVz59jXXjEo5GS8iU=
Subject key identifier:   AE:5D:D3:B1:39:D0:A1:F5:C9:2F:FB:B7:A6:56:EC:AA:63:E4:E5:7E
Certificate issuer:       /CN=DFBB164DBC72494619B08F0FA235F18F7F107520
Certificate serial:       4CF1C76FE2C2B50F0797CD10302D2277A47AB3EA
Authority key identifier: DF:BB:16:4D:BC:72:49:46:19:B0:8F:0F:A2:35:F1:8F:7F:10:75:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBB164DBC72494619B08F0FA235F18F7F107520.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/3137372e37322e35342e302f32342d3234203d3e20323634383830.roa
Signing time:             Wed 08 Apr 2026 21:00:32 +0000
ROA not before:           Wed 08 Apr 2026 20:55:32 +0000
ROA not after:            Wed 07 Apr 2027 21:00:32 +0000
asID:                     264880
IP address blocks:        177.72.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.crl
                          rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBB164DBC72494619B08F0FA235F18F7F107520.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 00:53:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f1:c7:6f:e2:c2:b5:0f:07:97:cd:10:30:2d:22:77:a4:7a:b3:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBB164DBC72494619B08F0FA235F18F7F107520
        Validity
            Not Before: Apr  8 20:55:32 2026 GMT
            Not After : Apr  7 21:00:32 2027 GMT
        Subject: CN=AE5DD3B139D0A1F5C92FFBB7A656ECAA63E4E57E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3e:50:ce:b3:81:95:fd:10:30:8a:47:a4:cd:
                    ff:e3:41:ef:de:b7:ed:78:33:22:33:69:f2:76:38:
                    e6:cc:53:87:3d:7a:78:ad:91:3d:be:7f:4e:f1:e0:
                    e6:04:75:c5:6f:d7:b0:f8:b7:81:7a:5c:fa:61:74:
                    06:4f:03:b5:05:da:0e:b7:aa:2d:c5:74:4d:33:b4:
                    f0:df:eb:ca:11:0c:6e:02:f6:02:9d:a0:99:f4:1f:
                    08:64:53:0e:3b:47:07:39:46:7d:7d:e8:9e:0a:f1:
                    2e:23:de:7e:e3:ae:08:7a:1b:34:58:38:57:cb:8f:
                    4b:f1:e1:8c:64:eb:71:a1:f6:97:ce:55:ea:89:2d:
                    c9:87:42:98:a5:7e:3e:ff:9f:d8:73:c7:c9:ac:dd:
                    8c:7d:5d:6b:9c:fc:0d:4f:ad:e9:6b:0f:5a:60:5d:
                    7e:2a:73:79:bb:f7:42:9c:86:58:2b:af:5d:e7:ad:
                    5c:4b:f4:2e:a9:c5:b2:5f:c9:1f:d5:b7:76:27:44:
                    9e:1a:7c:e5:fe:1c:6a:1e:d1:f6:e9:b4:f2:81:55:
                    0a:cc:1e:f2:02:3f:98:99:03:29:20:fb:2a:e6:d7:
                    ea:ac:f0:5b:00:02:25:1b:ef:90:56:c8:ad:16:99:
                    a6:42:62:75:2a:86:00:8c:af:8f:e0:fa:f5:a0:7b:
                    55:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5D:D3:B1:39:D0:A1:F5:C9:2F:FB:B7:A6:56:EC:AA:63:E4:E5:7E
            X509v3 Authority Key Identifier:
                keyid:DF:BB:16:4D:BC:72:49:46:19:B0:8F:0F:A2:35:F1:8F:7F:10:75:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBB164DBC72494619B08F0FA235F18F7F107520.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/3137372e37322e35342e302f32342d3234203d3e20323634383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:4e:20:35:e4:ee:a4:2e:01:52:7e:3d:b1:9d:c6:02:b3:c4:
         18:b7:d5:dc:85:12:5a:f1:5d:a4:96:47:54:54:cf:59:c8:4c:
         38:f2:78:5d:25:b9:06:6e:22:8e:4d:74:3b:8d:1e:8c:74:a8:
         ea:8e:a6:2f:99:3b:18:4d:bb:46:a4:10:8e:9e:b8:e6:bc:d7:
         f9:d3:79:ea:52:8e:07:34:91:9c:7e:ee:76:6e:7d:2d:d5:2d:
         0c:e1:d3:94:46:b1:4d:e4:b5:fa:87:73:d7:2a:9c:38:87:2c:
         90:3f:07:bd:28:a4:aa:a5:83:13:30:fc:25:92:81:14:60:11:
         ca:bd:16:b2:b2:58:b0:75:e8:05:5a:5a:6b:73:78:bf:ab:8c:
         fb:ea:dd:41:86:e0:1f:61:fc:ed:68:01:69:d5:e9:c4:d4:ae:
         f0:39:9d:30:52:57:8c:75:9f:fa:73:e9:fd:e7:c7:98:42:ca:
         62:9c:9e:41:89:01:be:7c:ad:62:f4:ab:62:e3:54:b9:de:36:
         35:cd:74:5f:63:be:9d:ca:4c:f3:17:14:a4:c5:98:0c:aa:b4:
         48:c6:54:77:92:84:dc:c5:99:76:4a:3c:10:f6:0f:49:a6:73:
         e1:34:13:74:2b:92:21:d6:05:57:b9:05:b2:0a:1b:97:61:bb:
         d8:a2:05:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:58:49 2026 by rpki-client