Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3137372e3130312e3132382e302f32302d3234203d3e203238313538.roa
File:                     3137372e3130312e3132382e302f32302d3234203d3e203238313538.roa (raw, json)
Hash identifier:          bt/4Q0nD2l5MJE55FKU5rwRKuXCxoS2aD08wErTIbVk=
Subject key identifier:   7B:70:25:13:7C:F7:42:D4:E2:D6:E7:C9:E5:1B:54:16:CA:BC:DF:29
Certificate issuer:       /CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
Certificate serial:       3B53397BE2495AD3CA17481F5A2147CAC23F2246
Authority key identifier: B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3137372e3130312e3132382e302f32302d3234203d3e203238313538.roa
Signing time:             Thu 23 Jul 2026 16:05:40 +0000
ROA not before:           Thu 23 Jul 2026 16:00:40 +0000
ROA not after:            Thu 22 Jul 2027 16:05:40 +0000
asID:                     28158
IP address blocks:        177.101.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl
                          rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:53:39:7b:e2:49:5a:d3:ca:17:48:1f:5a:21:47:ca:c2:3f:22:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
        Validity
            Not Before: Jul 23 16:00:40 2026 GMT
            Not After : Jul 22 16:05:40 2027 GMT
        Subject: CN=7B7025137CF742D4E2D6E7C9E51B5416CABCDF29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4b:a6:fc:0f:43:95:e4:18:7c:37:53:df:0a:
                    de:73:85:90:89:a5:65:97:d9:78:d3:9a:ef:6e:17:
                    c3:90:b0:db:be:89:83:2d:1b:80:03:43:a8:f6:ba:
                    5d:3d:2a:e2:41:f0:2b:f6:13:9b:d2:3c:7e:13:0f:
                    37:28:bb:98:ea:09:8b:f7:2b:c8:15:e0:82:e3:53:
                    79:d8:15:97:97:a4:35:b2:e1:72:93:bb:6d:be:00:
                    6c:da:c3:31:ed:30:8f:a6:78:c6:b8:14:a9:28:29:
                    a2:99:a0:ab:08:74:c5:c2:10:ef:a7:78:e4:fe:4e:
                    4f:fd:2f:90:69:c8:c3:bb:29:07:76:d1:30:89:06:
                    9e:a3:e1:db:41:2c:70:af:1e:28:f5:9e:79:0e:42:
                    e5:26:e5:dc:2d:4b:3f:cd:bf:14:77:ee:20:cb:d5:
                    07:97:e3:f8:f1:54:eb:61:36:89:8e:c8:e6:cc:6e:
                    3a:24:75:30:0d:6f:7b:51:d4:aa:fa:c8:52:b8:ce:
                    2f:4b:3b:5d:1f:6e:7e:9a:96:79:b5:46:dc:9a:d5:
                    d7:90:c5:1e:20:bb:cb:19:ec:dc:38:ca:41:2b:82:
                    48:1e:86:9a:4b:0c:fd:e5:fd:34:4a:9a:da:6d:2b:
                    e6:4a:16:0f:6f:14:d5:23:6b:cc:79:93:89:24:40:
                    fe:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:70:25:13:7C:F7:42:D4:E2:D6:E7:C9:E5:1B:54:16:CA:BC:DF:29
            X509v3 Authority Key Identifier:
                keyid:B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3137372e3130312e3132382e302f32302d3234203d3e203238313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b4:05:f2:c3:cb:80:a4:01:db:48:ea:cd:a5:cc:5d:42:2b:dd:
         3f:27:f2:22:ca:9d:f4:8c:9e:7b:4f:1e:77:dd:f6:3b:7c:b5:
         47:c6:c0:bd:34:3a:e2:b0:e9:a3:ff:5e:24:42:84:73:17:99:
         e8:6d:f0:92:8b:59:a8:5a:ba:25:f9:6c:a0:50:cf:82:b7:5a:
         61:97:75:ce:74:d5:1a:11:29:2e:e4:fe:b8:28:82:8c:e9:96:
         e3:fa:56:89:d6:85:03:52:12:86:36:ab:e7:d2:a6:02:5d:04:
         35:12:20:2e:8e:00:75:45:02:c8:40:d2:4e:56:dd:39:87:e4:
         f5:a1:24:ec:e3:7d:d5:f8:1b:2a:e5:a1:b0:c0:b4:a1:72:bf:
         93:3f:38:d3:99:66:9a:0e:1c:82:4f:18:52:9b:03:42:37:19:
         77:8a:11:43:a1:2e:8b:6e:b3:e8:bd:d2:23:a6:a7:5f:6f:c1:
         d3:39:53:81:a8:e7:ec:db:e5:f0:1c:1c:73:5a:c9:64:e9:0c:
         dd:d3:c0:a5:52:e8:d7:56:13:d7:ba:bb:36:d2:e7:91:7e:85:
         de:fb:b2:4d:74:07:db:69:22:cf:ed:cb:d0:8e:32:d3:f4:cb:
         47:90:4a:2f:10:ec:76:55:3a:3e:b8:9f:18:9f:93:a6:88:d6:
         e7:ba:98:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:15:48 2026 by rpki-client