Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136302e302f32332d3233203d3e203238323532.roa
File:                     3138372e312e3136302e302f32332d3233203d3e203238323532.roa (raw, json)
Hash identifier:          9z6JWKaA4pzALaVfFXMyf4qkMKIlQOpG2gNxD4bfMRU=
Subject key identifier:   24:66:5B:99:12:EB:03:F3:26:4B:ED:0C:97:B0:AC:46:AE:C0:A7:24
Certificate issuer:       /CN=7BD1822386ABA0E476B538AE1CE5CC51409C0B9F
Certificate serial:       29F98F38F874697CF5052BCD3908FB7D33766721
Authority key identifier: 7B:D1:82:23:86:AB:A0:E4:76:B5:38:AE:1C:E5:CC:51:40:9C:0B:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136302e302f32332d3233203d3e203238323532.roa
Signing time:             Tue 01 Sep 2026 12:16:40 +0000
ROA not before:           Tue 01 Sep 2026 12:11:40 +0000
ROA not after:            Tue 31 Aug 2027 12:16:40 +0000
asID:                     28252
IP address blocks:        187.1.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 07:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f9:8f:38:f8:74:69:7c:f5:05:2b:cd:39:08:fb:7d:33:76:67:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BD1822386ABA0E476B538AE1CE5CC51409C0B9F
        Validity
            Not Before: Sep  1 12:11:40 2026 GMT
            Not After : Aug 31 12:16:40 2027 GMT
        Subject: CN=24665B9912EB03F3264BED0C97B0AC46AEC0A724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4d:fd:25:ef:a5:af:2f:fe:aa:32:b9:24:23:
                    22:31:3e:27:08:68:df:70:85:75:d0:a6:f2:65:f8:
                    0b:69:34:26:5d:96:7d:1a:3e:5f:31:f5:53:a0:71:
                    82:13:de:d1:07:be:8c:8e:fd:bf:57:90:e2:b3:f0:
                    7a:37:b8:5c:a1:ec:91:a3:09:77:82:81:5e:1c:35:
                    c1:c3:49:e1:b7:f8:ef:b8:96:8a:db:c4:57:e7:94:
                    0d:44:e2:77:c7:ff:aa:37:47:42:ff:61:55:bd:15:
                    00:f2:dc:c0:24:6b:5c:dc:0d:65:0b:30:05:5c:34:
                    cc:55:87:6a:69:7e:b0:d7:73:71:f1:25:1c:6a:49:
                    2d:af:1d:4c:77:7a:bc:f1:2e:d4:a5:b2:11:c3:e9:
                    42:1c:7e:d0:e3:7a:da:80:ef:16:cb:97:c6:14:b4:
                    9d:dd:20:cb:c5:e7:63:38:81:d7:31:72:c9:00:70:
                    35:ad:fc:12:fa:2d:68:ca:13:17:f2:fb:fa:da:46:
                    c7:5b:b7:74:48:eb:b5:8e:84:ed:d0:8d:67:ae:a1:
                    5f:d5:0e:f4:20:a4:09:d6:88:9b:ab:7d:75:69:01:
                    1c:7a:8b:98:3d:f0:27:32:a4:14:d1:72:a7:9f:df:
                    44:e8:89:b1:48:2f:45:c9:a6:b5:14:41:bb:74:c1:
                    01:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:66:5B:99:12:EB:03:F3:26:4B:ED:0C:97:B0:AC:46:AE:C0:A7:24
            X509v3 Authority Key Identifier:
                keyid:7B:D1:82:23:86:AB:A0:E4:76:B5:38:AE:1C:E5:CC:51:40:9C:0B:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136302e302f32332d3233203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:15:13:f9:7a:14:ec:45:75:3f:c7:3a:87:24:2e:1d:89:46:
         5d:4b:bd:09:a5:4f:7f:8b:cc:3d:67:53:e7:27:0e:73:cc:0f:
         02:9b:68:85:58:e5:78:20:b0:52:87:1c:2f:8c:06:00:29:94:
         fc:73:df:f4:f3:43:43:5a:9a:ea:db:9a:28:32:32:a1:05:19:
         b4:0e:50:e3:22:29:3b:be:d6:80:a7:12:21:98:3b:05:e9:1a:
         a4:cb:06:aa:8f:60:2a:ee:58:1a:78:2b:8c:4e:97:83:00:95:
         ce:b7:fa:76:9c:44:93:60:d7:d8:ad:cc:8d:dc:e7:b9:97:dd:
         54:40:b9:07:68:27:2e:05:55:af:19:7d:72:8d:59:f4:7b:06:
         20:f1:bb:41:b2:a5:95:6a:a5:25:30:82:8f:51:4f:cd:16:23:
         38:d9:4b:90:0a:7c:e2:4f:11:13:aa:41:6f:c1:35:fb:42:d1:
         22:b8:6b:61:69:a0:75:32:87:a8:ef:73:d5:e9:17:46:20:71:
         24:35:68:e8:40:f3:1a:21:42:0f:b2:cb:0a:2b:67:70:3b:1f:
         97:16:3c:51:1e:e7:f8:f0:8f:43:02:56:ba:b4:c4:03:08:5d:
         79:3b:3e:1c:24:af:c3:a8:ca:24:3c:bd:fc:dc:9c:a8:4d:dc:
         ce:70:4b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:35:15 2026 by rpki-client