Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3136382e302f32312d3234203d3e20323632353530.roa
File:                     3137372e37322e3136382e302f32312d3234203d3e20323632353530.roa (raw, json)
Hash identifier:          3E1H2r8ovgBYdXByG78yUFnrhr96mV+wjjWuIpqLMGI=
Subject key identifier:   E5:E6:99:50:69:0B:41:4B:82:26:B6:77:DA:30:7A:69:77:64:D0:70
Certificate issuer:       /CN=9B54308B9152DD415CBD122B076FA6C8D2B993B5
Certificate serial:       7F9AAEA3A39EB7BD36A6DCBECD60E3AC552768DE
Authority key identifier: 9B:54:30:8B:91:52:DD:41:5C:BD:12:2B:07:6F:A6:C8:D2:B9:93:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B54308B9152DD415CBD122B076FA6C8D2B993B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3136382e302f32312d3234203d3e20323632353530.roa
Signing time:             Tue 22 Jul 2025 14:41:32 +0000
ROA not before:           Tue 22 Jul 2025 14:36:32 +0000
ROA not after:            Tue 21 Jul 2026 14:41:32 +0000
asID:                     262550
IP address blocks:        177.72.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/9B54308B9152DD415CBD122B076FA6C8D2B993B5.crl
                          rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/9B54308B9152DD415CBD122B076FA6C8D2B993B5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B54308B9152DD415CBD122B076FA6C8D2B993B5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 04:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:9a:ae:a3:a3:9e:b7:bd:36:a6:dc:be:cd:60:e3:ac:55:27:68:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B54308B9152DD415CBD122B076FA6C8D2B993B5
        Validity
            Not Before: Jul 22 14:36:32 2025 GMT
            Not After : Jul 21 14:41:32 2026 GMT
        Subject: CN=E5E69950690B414B8226B677DA307A697764D070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:28:1a:23:61:03:af:94:2a:cc:29:1f:91:a4:
                    21:00:04:e3:e4:75:d8:ca:90:5a:d0:49:ab:d1:75:
                    9f:0e:22:3a:c2:fe:3b:6f:f3:7f:25:2b:f7:56:6c:
                    cf:c2:fb:52:ba:a3:3b:bb:2d:b4:5c:9d:4f:cc:34:
                    a8:59:e0:8a:4b:c6:f6:af:d5:13:0a:5f:02:b5:4e:
                    1b:c3:bd:e1:ce:a5:89:1b:3c:c6:45:74:6b:68:95:
                    56:e4:98:39:bc:a0:b1:69:db:6c:65:25:83:40:82:
                    af:b7:a1:77:20:22:03:ec:3e:7d:89:04:a9:26:85:
                    92:e7:d8:ff:b9:c9:bf:9c:47:75:2b:f4:a8:b3:4c:
                    d6:6a:c6:01:4d:a6:44:d3:0f:51:cb:39:b3:56:7d:
                    89:3a:2f:76:7a:b7:cd:9b:f2:b0:e3:a7:36:1f:b2:
                    b9:d2:b2:f8:a9:d7:a8:c0:de:e0:c5:1a:75:4b:04:
                    f3:57:30:e4:65:11:8f:55:12:65:44:0d:3c:c5:db:
                    68:da:6f:2c:d6:37:b0:cf:ca:63:69:7e:f0:6c:76:
                    85:cf:dd:b5:61:c9:ba:e6:5b:41:24:93:cc:7a:2f:
                    96:9d:aa:b3:d7:1d:41:4f:3c:fb:91:5a:2c:8f:44:
                    3b:85:b8:5c:d6:f6:39:d5:03:fb:8d:7b:65:07:2d:
                    82:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E6:99:50:69:0B:41:4B:82:26:B6:77:DA:30:7A:69:77:64:D0:70
            X509v3 Authority Key Identifier:
                keyid:9B:54:30:8B:91:52:DD:41:5C:BD:12:2B:07:6F:A6:C8:D2:B9:93:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/9B54308B9152DD415CBD122B076FA6C8D2B993B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B54308B9152DD415CBD122B076FA6C8D2B993B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3136382e302f32312d3234203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1b:48:0b:fb:dc:93:a5:d3:21:cb:fd:0b:33:c2:cd:67:25:1f:
         65:9f:39:5a:c8:ad:79:82:10:f4:35:35:b6:68:81:81:1f:25:
         c1:3f:f4:50:f1:8b:50:2e:df:dc:e5:94:38:0f:82:5f:f9:d6:
         12:e2:1a:9c:c7:9f:bf:56:8f:2c:e9:81:7a:30:cb:a6:1e:80:
         c5:00:f6:8f:97:73:84:ce:4b:cf:88:3d:18:a8:6a:57:49:58:
         4f:35:21:50:37:8b:29:54:e4:c1:f3:a2:18:f9:d6:b4:3e:a0:
         10:55:40:90:70:67:fe:7c:8b:a3:08:d3:a4:55:8a:60:bf:b8:
         08:fc:22:bd:4e:34:73:c0:95:ff:0e:99:48:c6:1e:fb:38:bb:
         65:bb:bb:76:d8:f9:e1:4b:4e:60:37:01:d6:3f:64:71:3c:13:
         0f:6d:a3:82:e0:84:7b:ed:a4:70:23:3d:00:58:d3:e1:74:94:
         5d:f4:23:b3:5f:8f:e0:ad:bc:44:2b:0b:18:9c:0c:82:cd:30:
         27:3e:fb:59:80:e5:4e:b6:e4:ff:3f:7c:c7:a7:46:e4:19:f1:
         55:6e:80:f3:9f:64:16:d9:48:f3:d0:75:ea:c6:d5:86:60:ba:
         2f:c4:bd:5c:8f:42:d1:f4:fa:74:2d:48:e8:b9:07:21:2a:eb:
         d4:e7:95:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:44:12 2025 by rpki-client