Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3137372e37322e3233322e302f32342d3234203d3e203532383932.roa
File:                     3137372e37322e3233322e302f32342d3234203d3e203532383932.roa (raw, json)
Hash identifier:          Fjq1VhR69DwGbc9emkKy05KAI7dnPkYVCj/pm8kQc4I=
Subject key identifier:   9A:C1:42:9E:22:4A:FA:2F:1A:E5:2F:2E:FA:2D:06:12:4E:A0:F6:4B
Certificate issuer:       /CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Certificate serial:       37464A42592C33F5715E3E6E1A9D771EF5FE0604
Authority key identifier: 02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3137372e37322e3233322e302f32342d3234203d3e203532383932.roa
Signing time:             Tue 21 Apr 2026 04:38:02 +0000
ROA not before:           Tue 21 Apr 2026 04:33:02 +0000
ROA not after:            Tue 20 Apr 2027 04:38:02 +0000
asID:                     52892
IP address blocks:        177.72.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl
                          rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 18:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:46:4a:42:59:2c:33:f5:71:5e:3e:6e:1a:9d:77:1e:f5:fe:06:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
        Validity
            Not Before: Apr 21 04:33:02 2026 GMT
            Not After : Apr 20 04:38:02 2027 GMT
        Subject: CN=9AC1429E224AFA2F1AE52F2EFA2D06124EA0F64B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0b:24:ea:6e:df:e6:27:4c:e1:a9:e2:ab:24:
                    88:85:d5:a6:53:dd:3b:65:40:0e:36:54:6c:f4:0f:
                    d7:d6:e1:05:55:ab:31:7f:7b:26:ce:3b:5a:d3:e3:
                    74:7e:89:bd:3d:ac:9d:1d:c3:fa:5c:74:6a:e4:50:
                    13:5a:8f:0e:cd:05:b6:75:17:cf:1b:c9:0f:b5:11:
                    ce:4f:1e:92:dc:50:aa:e7:f7:d7:12:a7:18:ba:8e:
                    04:bb:a6:0d:ab:d5:3e:60:23:33:f9:bb:66:d1:fa:
                    97:5f:10:96:88:2d:84:20:bb:78:71:ac:e6:3a:81:
                    9f:7b:6e:cb:ec:b1:1f:83:8c:e4:81:b6:ce:11:eb:
                    0f:c7:7a:17:7d:e9:9c:2c:73:09:8c:4c:4a:c0:1a:
                    d1:00:2a:b8:ac:23:74:93:e0:0d:3a:6f:d6:69:23:
                    10:9b:31:3e:f1:37:df:25:02:31:de:5c:f7:21:e8:
                    32:57:1a:ab:51:ff:2d:4f:3b:92:58:4e:de:93:de:
                    92:69:03:68:31:34:a3:18:1a:0f:9b:18:8c:f2:e1:
                    49:d9:06:19:49:09:dd:47:f3:a3:73:5a:10:10:8e:
                    ae:db:b8:ba:bc:f1:e9:b0:cd:3f:ac:c7:32:fc:bf:
                    4c:6b:91:33:c1:09:71:a8:56:0e:62:2c:6a:e6:0f:
                    2b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C1:42:9E:22:4A:FA:2F:1A:E5:2F:2E:FA:2D:06:12:4E:A0:F6:4B
            X509v3 Authority Key Identifier:
                keyid:02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3137372e37322e3233322e302f32342d3234203d3e203532383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:08:96:4d:f0:3f:6e:4d:08:98:6a:e6:84:37:0a:19:02:f8:
         94:63:e4:06:dd:5c:ce:1c:d1:a2:89:b2:85:db:3a:d3:7c:b1:
         57:a0:a4:05:f3:0f:d3:38:89:23:97:56:4c:91:c5:d8:e9:88:
         89:4a:d1:c7:6e:93:c4:c4:2e:ad:58:cd:4d:f2:5b:ca:0e:30:
         a0:5e:de:88:00:d7:b3:db:d9:09:d0:53:1b:48:da:a5:37:2b:
         26:f6:50:02:2a:71:a1:8b:fb:ba:9d:dc:6d:22:88:f8:56:63:
         fe:57:7c:6b:06:ab:4a:f5:fd:01:61:3e:16:4a:1d:38:71:0a:
         d0:35:d2:de:01:ac:2b:b9:26:ea:2b:d1:de:f7:5d:8e:15:67:
         62:51:34:e8:0d:d8:fb:47:26:13:99:b6:50:93:ab:71:30:0b:
         93:61:fb:45:19:7c:9d:f8:41:4b:a6:6b:9f:78:9e:fc:44:b1:
         ea:3a:c9:e8:84:68:89:70:43:da:36:9e:2c:12:00:4d:e2:31:
         25:de:66:75:c5:42:c9:64:23:d6:6c:57:e4:f4:55:95:f8:90:
         30:08:3b:b3:b5:38:27:8f:c9:af:db:be:4f:bd:0e:20:55:0f:
         55:11:b6:f7:19:29:3c:db:a2:16:24:cb:80:33:34:90:bd:b9:
         3d:4c:c8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:16:50 2026 by rpki-client