Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3GB14fVk4b3QvBZtLv7W9XdfmU166wMcby927QadMBc/0/3137372e37322e3230302e302f32322d3332203d3e20323730373739.roa
File:                     3137372e37322e3230302e302f32322d3332203d3e20323730373739.roa (raw, json)
Hash identifier:          dlvC0EnSq7B/B4FMlvPY76aSvqn5Qk45p+D0IWMpf40=
Subject key identifier:   DA:C3:42:11:40:CD:DF:33:4E:B8:51:47:09:AF:61:E0:8C:F1:FF:22
Certificate issuer:       /CN=BBD4A4154059C64E6D7856A60B02AB43992088B4
Certificate serial:       4AF18A3EC9F2C3385FF3D5D6B794959C5A8534C3
Authority key identifier: BB:D4:A4:15:40:59:C6:4E:6D:78:56:A6:0B:02:AB:43:99:20:88:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBD4A4154059C64E6D7856A60B02AB43992088B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3GB14fVk4b3QvBZtLv7W9XdfmU166wMcby927QadMBc/0/3137372e37322e3230302e302f32322d3332203d3e20323730373739.roa
Signing time:             Sat 25 Apr 2026 01:34:52 +0000
ROA not before:           Sat 25 Apr 2026 01:29:52 +0000
ROA not after:            Sat 24 Apr 2027 01:34:52 +0000
asID:                     270779
IP address blocks:        177.72.200.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3GB14fVk4b3QvBZtLv7W9XdfmU166wMcby927QadMBc/0/BBD4A4154059C64E6D7856A60B02AB43992088B4.crl
                          rsync://rpki-repo.registro.br/repo/H3GB14fVk4b3QvBZtLv7W9XdfmU166wMcby927QadMBc/0/BBD4A4154059C64E6D7856A60B02AB43992088B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBD4A4154059C64E6D7856A60B02AB43992088B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:28:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f1:8a:3e:c9:f2:c3:38:5f:f3:d5:d6:b7:94:95:9c:5a:85:34:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBD4A4154059C64E6D7856A60B02AB43992088B4
        Validity
            Not Before: Apr 25 01:29:52 2026 GMT
            Not After : Apr 24 01:34:52 2027 GMT
        Subject: CN=DAC3421140CDDF334EB8514709AF61E08CF1FF22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:72:5e:fe:81:cf:c8:56:0b:db:f8:ce:ae:81:
                    68:0e:d2:00:2a:f5:21:fb:e0:64:28:a8:d5:0a:84:
                    06:ce:cd:43:75:25:bf:07:ff:46:fd:2c:ed:4c:a6:
                    2d:ad:a1:35:11:bb:bb:e6:7d:08:74:ba:5a:b0:c2:
                    57:a5:11:4c:08:fa:46:76:1e:f6:91:15:9b:1d:c2:
                    89:10:ee:28:6f:61:ed:91:fa:a1:2b:c3:f4:68:24:
                    86:83:89:fd:d7:ba:20:5b:e3:de:cc:9b:e2:04:78:
                    82:08:27:90:85:61:d8:24:f7:ce:1d:bd:57:51:f9:
                    73:c6:b5:34:eb:12:2e:78:f2:11:d6:19:a1:8c:6b:
                    8f:99:03:e3:f4:9c:4c:5b:9d:1c:88:03:eb:0f:9e:
                    95:71:47:76:37:64:c7:64:d4:d1:6b:ba:15:11:e4:
                    32:28:0f:03:93:2f:78:ea:d8:23:25:30:bc:1b:c5:
                    27:71:a2:68:ed:fc:9b:31:75:12:10:d8:b3:3f:4f:
                    0b:c2:3e:41:8e:d9:78:8f:f5:b8:97:50:49:93:60:
                    3c:ff:95:e0:28:fe:77:8e:0f:c8:c4:ef:c1:35:a4:
                    6f:78:66:e3:4c:0b:59:2a:05:3f:8c:15:2f:d0:e2:
                    a1:6f:87:ba:4e:41:6b:86:72:19:05:6c:e2:95:5a:
                    b6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C3:42:11:40:CD:DF:33:4E:B8:51:47:09:AF:61:E0:8C:F1:FF:22
            X509v3 Authority Key Identifier:
                keyid:BB:D4:A4:15:40:59:C6:4E:6D:78:56:A6:0B:02:AB:43:99:20:88:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3GB14fVk4b3QvBZtLv7W9XdfmU166wMcby927QadMBc/0/BBD4A4154059C64E6D7856A60B02AB43992088B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBD4A4154059C64E6D7856A60B02AB43992088B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3GB14fVk4b3QvBZtLv7W9XdfmU166wMcby927QadMBc/0/3137372e37322e3230302e302f32322d3332203d3e20323730373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:b2:b2:85:a0:c6:a6:db:63:e1:c8:07:32:b8:32:fe:6c:cc:
         67:21:f8:0b:d8:10:fa:02:3d:30:c7:a2:f3:40:2c:ab:38:27:
         5e:a9:98:5f:d4:97:cb:5a:af:c4:fb:fd:fc:9d:8e:30:dc:57:
         a6:13:02:1a:4b:b3:a4:ac:33:f9:bc:28:fd:5c:a6:71:55:8c:
         de:7d:f8:37:87:04:a7:f6:c1:9c:3e:95:5a:12:90:8f:a5:c4:
         2a:0c:64:f7:82:82:c3:49:c6:5d:9f:69:01:87:1b:28:e6:ff:
         00:ce:af:25:39:3e:23:47:cc:36:89:26:ce:9a:54:de:de:40:
         97:a4:60:44:eb:3f:70:2c:ef:59:6b:79:98:7a:17:21:7f:f2:
         2a:a2:bc:d6:af:38:75:0c:2b:cf:62:bf:1d:dc:d9:39:83:03:
         90:cd:bd:c0:d0:1a:66:6e:e3:d3:91:eb:4f:e0:f9:cd:a6:2e:
         11:51:81:35:31:49:51:81:dd:97:b5:03:d1:db:b3:fe:31:42:
         23:2c:a1:90:60:da:05:39:ff:61:16:46:50:2b:28:1d:de:50:
         9d:39:06:2a:5a:8b:f5:75:6c:f5:20:57:36:f2:d3:ab:80:71:
         1f:4e:d3:bb:99:51:f4:c4:09:11:a1:8d:de:1b:3d:5f:3c:48:
         14:87:1a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:19:00 2026 by rpki-client