Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/3133312e37322e3136342e302f32322d3332203d3e20323638343837.roa
File:                     3133312e37322e3136342e302f32322d3332203d3e20323638343837.roa (raw, json)
Hash identifier:          apyabX/LQitzZgl7oK3AbXVnIbVT0nuxfU7fofGZhzQ=
Subject key identifier:   F8:40:FE:95:46:F7:34:47:42:61:3B:BA:77:6E:80:52:A0:39:CB:4C
Certificate issuer:       /CN=464B947257F06B70E4456A2AACFED298FBBEE866
Certificate serial:       54009B671D9A803580EA7FBE4870EACD13516B1E
Authority key identifier: 46:4B:94:72:57:F0:6B:70:E4:45:6A:2A:AC:FE:D2:98:FB:BE:E8:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464B947257F06B70E4456A2AACFED298FBBEE866.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/3133312e37322e3136342e302f32322d3332203d3e20323638343837.roa
Signing time:             Mon 13 Jul 2026 17:12:57 +0000
ROA not before:           Mon 13 Jul 2026 17:07:57 +0000
ROA not after:            Mon 12 Jul 2027 17:12:57 +0000
asID:                     268487
IP address blocks:        131.72.164.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/464B947257F06B70E4456A2AACFED298FBBEE866.crl
                          rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/464B947257F06B70E4456A2AACFED298FBBEE866.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464B947257F06B70E4456A2AACFED298FBBEE866.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:04:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:00:9b:67:1d:9a:80:35:80:ea:7f:be:48:70:ea:cd:13:51:6b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464B947257F06B70E4456A2AACFED298FBBEE866
        Validity
            Not Before: Jul 13 17:07:57 2026 GMT
            Not After : Jul 12 17:12:57 2027 GMT
        Subject: CN=F840FE9546F7344742613BBA776E8052A039CB4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:60:45:26:38:10:4b:27:03:85:ed:ee:de:17:
                    9d:26:70:ec:c3:32:ec:70:eb:88:f4:25:cb:be:7d:
                    a9:5f:45:6b:0d:39:b2:a5:ab:3c:85:b2:40:d1:61:
                    b8:d1:2e:54:e1:06:36:da:f7:cf:3f:41:06:00:6d:
                    85:db:4f:29:f1:46:bc:ab:75:fa:d5:1c:50:4b:b7:
                    43:13:6b:f7:d6:fe:16:29:c6:8c:af:37:d0:8b:06:
                    7b:b1:fb:fe:5b:e7:e6:94:c8:88:5b:bb:01:4d:b4:
                    9a:9b:4f:72:a5:77:d8:f2:ce:1b:22:d9:27:cf:c0:
                    c8:93:1b:40:fa:17:f9:17:66:ca:64:30:d4:88:3e:
                    e4:98:05:36:5a:25:85:8d:0b:4c:14:0e:10:f3:21:
                    3d:c8:8a:97:ad:74:10:cd:74:1c:f2:ce:7f:e9:2e:
                    4e:b0:c9:1a:da:61:7d:22:ae:b7:4a:58:da:31:c4:
                    8e:b0:dc:b4:cd:ba:2c:73:a4:fd:5b:45:b4:bd:dc:
                    ca:94:67:ff:24:eb:2f:27:c9:d0:96:a3:c5:d4:be:
                    b5:36:07:7e:eb:d8:c1:ad:62:2f:d4:04:db:ad:a0:
                    31:ee:e3:eb:a1:e1:8a:32:6b:57:80:64:4a:42:0e:
                    b3:c9:91:24:8f:3b:4e:00:b5:f8:b8:45:dd:4d:71:
                    89:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:40:FE:95:46:F7:34:47:42:61:3B:BA:77:6E:80:52:A0:39:CB:4C
            X509v3 Authority Key Identifier:
                keyid:46:4B:94:72:57:F0:6B:70:E4:45:6A:2A:AC:FE:D2:98:FB:BE:E8:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/464B947257F06B70E4456A2AACFED298FBBEE866.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464B947257F06B70E4456A2AACFED298FBBEE866.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/3133312e37322e3136342e302f32322d3332203d3e20323638343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:bd:43:27:4c:dc:26:bf:0f:a3:14:ec:ba:34:d9:19:52:81:
         fd:7a:6e:6f:cf:23:b2:eb:b6:52:1d:76:ff:e7:2c:c9:0e:a2:
         64:63:f1:c0:1c:a7:04:17:e3:5b:8c:50:16:fa:b2:7c:c5:f9:
         a5:0f:76:46:f6:be:5c:d6:7d:0f:73:33:d6:c0:61:8e:c5:7d:
         f3:4a:aa:61:68:2c:39:b4:2a:1f:7f:72:b5:39:3d:b7:21:bd:
         4d:a9:9c:39:ee:f9:1f:aa:b9:d2:91:8a:fa:10:99:9e:3f:8b:
         8f:11:b1:2e:9c:f6:1a:43:e9:47:f7:bb:1b:ce:29:0a:24:e3:
         76:05:fa:7b:f6:37:53:dd:bc:b6:d8:20:32:60:d4:db:ba:7a:
         6f:25:b1:b0:41:aa:d8:1a:a8:42:e2:bd:8d:38:31:5d:01:3a:
         8c:9b:80:e7:68:e3:94:03:9b:98:58:7a:c6:a2:c0:25:5a:04:
         b2:ed:f2:24:c8:b8:f5:26:34:9a:5f:32:18:b1:98:6e:6d:df:
         f4:5e:09:76:4d:ef:5f:4f:ce:db:3d:96:f1:37:29:09:20:20:
         db:56:76:8d:b3:29:2c:ed:cc:a6:6a:9f:89:7c:76:5c:21:86:
         b5:28:98:19:b7:21:29:c2:f3:3e:af:54:0e:f1:56:b8:f5:9b:
         1f:3e:08:d0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVACbZx2agDWA6n++SHDqzRNRax4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDY0Qjk0NzI1N0YwNkI3MEU0NDU2QTJBQUNGRUQyOThG
QkJFRTg2NjAeFw0yNjA3MTMxNzA3NTdaFw0yNzA3MTIxNzEyNTdaMDMxMTAvBgNV
BAMTKEY4NDBGRTk1NDZGNzM0NDc0MjYxM0JCQTc3NkU4MDUyQTAzOUNCNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrYEUmOBBLJwOF7e7eF50mcOzD
Muxw64j0Jcu+falfRWsNObKlqzyFskDRYbjRLlThBjba988/QQYAbYXbTynxRryr
dfrVHFBLt0MTa/fW/hYpxoyvN9CLBnux+/5b5+aUyIhbuwFNtJqbT3Kld9jyzhsi
2SfPwMiTG0D6F/kXZspkMNSIPuSYBTZaJYWNC0wUDhDzIT3IipetdBDNdBzyzn/p
Lk6wyRraYX0irrdKWNoxxI6w3LTNuixzpP1bRbS93MqUZ/8k6y8nydCWo8XUvrU2
B37r2MGtYi/UBNutoDHu4+uh4Yoya1eAZEpCDrPJkSSPO04Atfi4Rd1NcYlpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+ED+lUb3NEdCYTu6d26AUqA5y0wwHwYDVR0j
BBgwFoAURkuUclfwa3DkRWoqrP7SmPu+6GYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN243Y2c1VHVVOEg1ZG5UUWk1N1JUNUhBQ2ZSZ0E3SmRuWUViR2FQWVlC
V2kvMC80NjRCOTQ3MjU3RjA2QjcwRTQ0NTZBMkFBQ0ZFRDI5OEZCQkVFODY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ2NEI5NDcyNTdGMDZCNzBF
NDQ1NkEyQUFDRkVEMjk4RkJCRUU4NjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzduN2NnNVR1VThINWRuVFFpNTdSVDVIQUNmUmdBN0pkbllFYkdhUFlZQldpLzAv
MzEzMzMxMmUzNzMyMmUzMTM2MzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzgzNDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKDSKQwDQYJKoZIhvcNAQELBQADggEBACy9QydM
3Ca/D6MU7Lo02RlSgf16bm/PI7LrtlIddv/nLMkOomRj8cAcpwQX41uMUBb6snzF
+aUPdkb2vlzWfQ9zM9bAYY7FffNKqmFoLDm0Kh9/crU5PbchvU2pnDnu+R+qudKR
ivoQmZ4/i48RsS6c9hpD6Uf3uxvOKQok43YF+nv2N1PdvLbYIDJg1Nu6em8lsbBB
qtgaqELivY04MV0BOoybgOdo45QDm5hYesaiwCVaBLLt8iTIuPUmNJpfMhixmG5t
3/ReCXZN719Pzts9lvE3KQkgINtWdo2zKSztzKZqn4l8dlwhhrUomBm3ISnC8z6v
VA7xVrj1mx8+CNA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:52:34 2026 by rpki-client