Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/3137392e34392e3139302e302f32332d3332203d3e20323731323034.roa
File:                     3137392e34392e3139302e302f32332d3332203d3e20323731323034.roa (raw, json)
Hash identifier:          mOjjEPcviTZ+qCmYX6z5szjAD9RD9p34iWcHM8xiwZY=
Subject key identifier:   07:09:7D:4E:01:6B:DB:D5:32:0F:A3:E5:08:B8:49:0A:7F:94:11:D7
Certificate issuer:       /CN=072772F63E62DC06EAED9A555C2C793CEFF59262
Certificate serial:       4D903846758D72FF2961A508E3E0B4E781D8168E
Authority key identifier: 07:27:72:F6:3E:62:DC:06:EA:ED:9A:55:5C:2C:79:3C:EF:F5:92:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/072772F63E62DC06EAED9A555C2C793CEFF59262.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/3137392e34392e3139302e302f32332d3332203d3e20323731323034.roa
Signing time:             Wed 29 Apr 2026 14:00:00 +0000
ROA not before:           Wed 29 Apr 2026 13:55:00 +0000
ROA not after:            Wed 28 Apr 2027 14:00:00 +0000
asID:                     271204
IP address blocks:        179.49.190.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.crl
                          rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/072772F63E62DC06EAED9A555C2C793CEFF59262.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:90:38:46:75:8d:72:ff:29:61:a5:08:e3:e0:b4:e7:81:d8:16:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072772F63E62DC06EAED9A555C2C793CEFF59262
        Validity
            Not Before: Apr 29 13:55:00 2026 GMT
            Not After : Apr 28 14:00:00 2027 GMT
        Subject: CN=07097D4E016BDBD5320FA3E508B8490A7F9411D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:92:3d:8b:ad:db:2b:06:50:f5:3b:fe:60:17:
                    04:cc:f1:cf:22:99:c1:31:49:1e:f4:c1:d5:c9:75:
                    cc:07:db:28:f9:a7:9e:f3:d7:92:5e:82:31:fd:3f:
                    04:90:07:0e:bf:5a:0f:56:9b:e1:2d:e0:e2:6c:e9:
                    d7:ce:3b:9d:52:f0:61:10:2a:2d:53:c6:a9:f5:2e:
                    79:bf:61:99:8b:f6:e0:d5:e1:40:10:de:2c:d4:c8:
                    d4:2d:0b:53:5c:1b:50:df:91:43:f5:b7:9b:3b:1b:
                    e6:a6:a1:d3:79:87:f0:9f:26:32:2f:39:74:5c:09:
                    e5:95:71:36:c9:98:e7:7f:99:c5:c5:3f:4c:b3:8c:
                    b7:52:0b:8d:f1:90:ef:fd:ae:ea:f5:c4:08:87:15:
                    06:c3:df:f7:74:c6:c0:22:dc:7c:45:90:57:b2:94:
                    36:61:0c:29:8d:95:8c:18:84:f8:cf:e4:6d:c1:19:
                    98:77:e5:bd:4b:0e:1f:53:79:a8:41:4d:94:f4:3e:
                    b8:a8:1d:27:e5:70:f3:e8:81:43:34:ad:54:25:5c:
                    bb:ed:ec:6f:43:d8:39:52:0a:e7:37:ee:60:2c:8c:
                    14:0b:1c:29:92:37:6a:5a:37:8a:b2:71:00:5b:0d:
                    bd:e9:51:45:f5:07:ac:09:4c:28:e9:20:01:17:4c:
                    3b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:09:7D:4E:01:6B:DB:D5:32:0F:A3:E5:08:B8:49:0A:7F:94:11:D7
            X509v3 Authority Key Identifier:
                keyid:07:27:72:F6:3E:62:DC:06:EA:ED:9A:55:5C:2C:79:3C:EF:F5:92:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/072772F63E62DC06EAED9A555C2C793CEFF59262.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/3137392e34392e3139302e302f32332d3332203d3e20323731323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:2b:d7:1d:c9:0d:1c:9e:03:ed:d9:d9:76:b5:ba:81:23:ef:
         2e:6e:fa:62:e8:c9:8b:44:0a:0a:4f:0b:58:05:7e:af:29:c5:
         46:23:91:b9:c2:22:1c:5c:0e:8a:8e:1b:88:d8:74:6c:dd:8d:
         78:1c:b1:b8:ec:f8:f8:af:37:5e:e7:f6:63:a5:4c:70:b8:92:
         bb:c8:96:46:32:eb:99:f4:86:b8:3d:66:fd:e0:0a:bb:aa:d2:
         e7:2b:94:6b:da:67:58:29:ad:d7:b6:98:e9:b7:38:0c:6f:37:
         c4:99:c1:07:00:dd:23:4f:86:f8:1c:30:b4:72:d9:e9:24:9c:
         de:62:ee:8f:27:a2:d7:df:5c:5d:d2:98:9c:cb:92:79:d5:9d:
         85:88:d2:8c:1b:1b:1c:d9:bf:09:f2:0c:6e:1f:ea:1d:9e:74:
         9f:81:a1:b4:40:f0:57:35:bf:4f:11:b6:40:7f:d5:18:fc:c6:
         47:cf:21:00:80:28:f7:8f:de:40:a6:71:e2:d5:57:c8:77:44:
         f9:f1:1e:bf:32:15:81:98:bd:27:74:d2:cf:7f:0e:bc:ad:ee:
         35:0a:2f:89:90:64:68:d6:6f:f0:a3:d3:b0:96:7b:38:f3:2e:
         1f:03:1f:d3:68:39:63:fc:7e:d7:56:17:50:ce:34:ca:f9:a2:
         1c:1e:7e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:21:14 2026 by rpki-client