Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/3137372e37322e38382e302f32312d3332203d3e203532383232.roa
File:                     3137372e37322e38382e302f32312d3332203d3e203532383232.roa (raw, json)
Hash identifier:          EdXGWg8fVwvBOIWebg+UjttmH2/mjqW6AO4Uhpj29NA=
Subject key identifier:   54:40:DF:EC:02:17:08:5E:92:75:C7:44:68:60:2D:8A:00:2C:71:DC
Certificate issuer:       /CN=2ECFD6270713C15F56BC52BA66D1A749FFE56168
Certificate serial:       16DC96F6CE933FE1B68FCD0FB91A1ED590895EFD
Authority key identifier: 2E:CF:D6:27:07:13:C1:5F:56:BC:52:BA:66:D1:A7:49:FF:E5:61:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ECFD6270713C15F56BC52BA66D1A749FFE56168.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/3137372e37322e38382e302f32312d3332203d3e203532383232.roa
Signing time:             Wed 22 Apr 2026 18:31:32 +0000
ROA not before:           Wed 22 Apr 2026 18:26:32 +0000
ROA not after:            Wed 21 Apr 2027 18:31:32 +0000
asID:                     52822
IP address blocks:        177.72.88.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.crl
                          rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ECFD6270713C15F56BC52BA66D1A749FFE56168.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:dc:96:f6:ce:93:3f:e1:b6:8f:cd:0f:b9:1a:1e:d5:90:89:5e:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ECFD6270713C15F56BC52BA66D1A749FFE56168
        Validity
            Not Before: Apr 22 18:26:32 2026 GMT
            Not After : Apr 21 18:31:32 2027 GMT
        Subject: CN=5440DFEC0217085E9275C74468602D8A002C71DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d9:3f:a4:25:0e:6d:8c:70:a8:3d:a0:a1:23:
                    62:ae:fb:57:f8:a2:bc:fc:19:6c:38:df:71:5a:9c:
                    3c:f9:df:6f:c0:85:c6:41:a6:85:a8:bf:bf:d1:c6:
                    68:2f:a8:24:7a:64:02:70:b0:7d:c4:b2:30:51:55:
                    ab:c9:14:f4:d0:85:82:30:69:9e:38:a7:f7:40:a5:
                    7e:0d:75:01:7d:b5:0a:4e:f7:ae:41:24:3d:50:04:
                    90:a3:07:21:08:a5:b0:3e:83:00:73:73:1b:0e:90:
                    2e:3e:08:b2:e1:aa:26:54:0f:62:ba:a9:7e:41:40:
                    3b:d6:f1:57:b3:92:4c:52:c1:82:73:91:9c:51:fd:
                    18:84:9d:e4:14:45:58:71:dd:69:41:39:87:63:5f:
                    2a:26:47:f8:f8:42:ab:05:ac:72:7e:b4:99:a6:4b:
                    13:d8:36:d8:6d:7e:f4:1a:b1:98:40:05:7b:4c:ca:
                    b3:d9:97:09:d5:73:9b:25:c2:f9:c8:2e:45:0d:0f:
                    85:6b:c1:74:43:52:49:7e:ef:43:d9:53:83:c4:b0:
                    b7:72:de:dc:ef:4d:e4:d0:6c:a7:1e:0d:68:91:62:
                    5a:aa:4a:e3:2f:cd:05:76:ed:dc:cd:f1:23:4f:f9:
                    fe:08:8b:81:8d:18:48:ee:e1:f5:f4:d3:9d:a6:99:
                    1d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:40:DF:EC:02:17:08:5E:92:75:C7:44:68:60:2D:8A:00:2C:71:DC
            X509v3 Authority Key Identifier:
                keyid:2E:CF:D6:27:07:13:C1:5F:56:BC:52:BA:66:D1:A7:49:FF:E5:61:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ECFD6270713C15F56BC52BA66D1A749FFE56168.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/3137372e37322e38382e302f32312d3332203d3e203532383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         82:d8:78:a3:cb:4a:58:f0:d4:37:c3:3a:05:c9:2c:47:59:e8:
         c9:5b:0b:6d:2f:ef:0f:aa:34:d7:1a:eb:a5:19:2b:c1:74:6a:
         e8:b0:3b:5f:0c:9e:4f:62:9a:fe:49:45:3d:12:c5:19:12:95:
         92:1e:10:0d:fb:5e:82:54:f2:b5:41:50:45:42:e4:99:28:65:
         8f:09:33:83:ad:5a:f5:78:34:fe:a4:6c:41:ab:3e:13:1e:ba:
         89:cd:df:01:ca:9e:fd:07:a2:db:20:36:f7:1e:79:e4:6f:5e:
         3a:92:55:fc:f4:c2:4d:ee:67:a5:26:cf:ea:82:63:21:35:2e:
         82:a0:ce:b3:ed:5b:0e:fc:54:78:b8:bb:f0:01:ae:eb:a0:6a:
         4c:98:7f:e7:0c:48:cc:c8:50:3d:82:5f:9a:1d:b8:46:9f:32:
         b1:53:97:4a:c4:96:61:c8:33:1f:fc:8e:e1:58:4c:38:f8:ec:
         e3:5d:67:69:f9:64:98:c4:2e:d4:4b:8c:ff:59:b6:11:3e:a1:
         96:48:95:04:1c:16:4b:74:87:ef:43:2e:1b:78:19:f1:87:53:
         0f:90:dd:0a:94:89:4c:b4:59:b9:6a:c6:61:24:49:b1:79:37:
         1f:82:87:5b:4c:13:4d:e2:6c:3f:28:b5:ff:ae:bd:ef:5f:05:
         58:0c:52:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:40:22 2026 by rpki-client