Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3137372e37322e3233352e302f32342d3234203d3e203532383932.roa
File:                     3137372e37322e3233352e302f32342d3234203d3e203532383932.roa (raw, json)
Hash identifier:          6PKhf7xERq8Bg0ZuwOrX3Qz57UKRHLwgKy5VB75JdX4=
Subject key identifier:   92:2E:65:E9:CC:FA:50:71:70:50:F6:A9:22:E3:5A:BC:2E:EA:D8:47
Certificate issuer:       /CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Certificate serial:       13C948AE8FC0DA81EA4C6C4ACC9C1B87991CEBFF
Authority key identifier: 02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3137372e37322e3233352e302f32342d3234203d3e203532383932.roa
Signing time:             Tue 21 Apr 2026 04:38:04 +0000
ROA not before:           Tue 21 Apr 2026 04:33:04 +0000
ROA not after:            Tue 20 Apr 2027 04:38:04 +0000
asID:                     52892
IP address blocks:        177.72.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl
                          rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 18:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c9:48:ae:8f:c0:da:81:ea:4c:6c:4a:cc:9c:1b:87:99:1c:eb:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
        Validity
            Not Before: Apr 21 04:33:04 2026 GMT
            Not After : Apr 20 04:38:04 2027 GMT
        Subject: CN=922E65E9CCFA50717050F6A922E35ABC2EEAD847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:10:c7:6c:92:ef:5b:34:ac:ed:2e:e0:93:7c:
                    f3:7d:5e:31:13:95:6c:f3:98:34:f2:86:9c:3e:1b:
                    70:c4:5c:eb:f5:0d:e9:22:e9:73:b1:e7:2c:0f:30:
                    c3:1b:79:d8:cb:9a:82:9b:bf:e7:19:c6:ea:61:73:
                    3c:b2:e4:8e:be:d8:b0:5b:97:22:a2:61:c8:aa:85:
                    14:c7:d0:ea:43:5b:3e:f2:da:92:72:89:5a:ca:53:
                    10:91:3d:00:1b:d2:32:1d:f0:56:68:17:91:eb:d1:
                    55:af:3c:6c:1b:81:db:a5:e6:04:bd:90:be:2d:8c:
                    d9:54:57:4c:ea:eb:69:91:d1:4a:fd:60:66:cc:ad:
                    74:2a:54:4e:90:b8:83:a1:78:57:9c:6c:16:67:07:
                    8a:b6:36:12:01:16:f1:47:e1:77:d9:9f:a4:b2:e3:
                    41:d5:b3:9c:fb:2b:8e:33:8d:b9:9f:9b:da:93:33:
                    a1:2d:b5:a1:6a:34:8b:e2:15:f8:51:2f:42:c6:18:
                    02:a7:85:5b:15:da:d4:e8:b3:6e:b6:0c:2e:92:87:
                    01:25:1b:b9:f6:cc:13:65:79:e4:f9:f1:94:19:60:
                    0b:14:e8:db:08:22:dd:5a:38:8b:8f:59:c5:50:9d:
                    02:e4:f6:b8:14:08:08:77:df:74:75:5b:09:90:9d:
                    8c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2E:65:E9:CC:FA:50:71:70:50:F6:A9:22:E3:5A:BC:2E:EA:D8:47
            X509v3 Authority Key Identifier:
                keyid:02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3137372e37322e3233352e302f32342d3234203d3e203532383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:4b:fa:40:b0:97:6f:ef:e6:29:31:d7:3f:0a:35:39:f0:8d:
         12:c8:92:85:28:ec:81:7f:54:62:4f:4c:78:2c:f7:d8:cf:51:
         1c:6c:5c:81:92:af:c3:7d:6c:ca:b8:17:53:d2:e6:fb:7e:60:
         c7:54:ee:34:97:49:eb:e6:f1:53:97:b9:e3:4a:18:1b:a8:f0:
         5b:7b:ed:19:b8:46:83:68:8e:c8:1e:56:87:2b:85:45:6b:dc:
         d7:ea:35:12:9c:08:78:da:5c:49:9c:37:fd:55:e4:ce:b3:07:
         a8:97:50:1a:77:49:77:1f:6b:34:8e:7c:1f:b2:ca:f6:e1:70:
         af:89:e9:46:7b:c3:4b:1c:00:63:49:69:31:85:f9:a3:bd:d2:
         8d:ff:d1:ff:9d:24:32:85:64:32:a0:15:80:e0:35:e5:fb:56:
         e4:38:ec:42:31:dc:44:5a:b8:af:00:0d:b6:eb:55:d3:16:bb:
         62:58:bc:fa:71:51:fd:e3:fb:45:a7:32:14:af:2b:a3:be:0b:
         ae:13:8a:00:8f:ef:78:be:bb:f3:c9:c4:43:0d:2f:96:03:81:
         7d:11:b7:81:54:56:3a:0b:dc:60:e7:ad:c8:6b:52:3e:bc:00:
         a6:14:18:ef:79:e2:e4:d4:27:f7:75:93:7b:05:8a:c8:d0:64:
         59:61:5d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:16:51 2026 by rpki-client