Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3132382e302f32312d3234203d3e203533303138.roa
File:                     3137372e37322e3132382e302f32312d3234203d3e203533303138.roa (raw, json)
Hash identifier:          cblOh2S7j4hdXPGfAC6eX1eYay1h63BGfEZGy7L3QyE=
Subject key identifier:   CF:9D:4E:74:F4:95:D6:BE:A0:23:64:A5:2F:8A:F8:52:C8:8C:87:30
Certificate issuer:       /CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
Certificate serial:       67ACCD5C709CE11B7CB38133FA15D01FC62DD130
Authority key identifier: A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3132382e302f32312d3234203d3e203533303138.roa
Signing time:             Thu 06 Mar 2025 14:33:19 +0000
ROA not before:           Thu 06 Mar 2025 14:28:19 +0000
ROA not after:            Thu 05 Mar 2026 14:33:19 +0000
asID:                     53018
IP address blocks:        177.72.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 23:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ac:cd:5c:70:9c:e1:1b:7c:b3:81:33:fa:15:d0:1f:c6:2d:d1:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
        Validity
            Not Before: Mar  6 14:28:19 2025 GMT
            Not After : Mar  5 14:33:19 2026 GMT
        Subject: CN=CF9D4E74F495D6BEA02364A52F8AF852C88C8730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:04:29:1b:17:92:88:5b:7f:08:38:42:97:c0:
                    de:4f:f8:37:2d:be:36:c5:55:d2:ae:93:3b:df:d4:
                    e4:51:4d:95:ed:3b:4e:4c:c8:2a:59:6d:48:5a:3f:
                    6a:ee:95:ad:78:88:af:fa:e6:0a:89:80:bb:97:c0:
                    64:ad:f9:c0:e2:c2:0b:93:22:bd:17:20:79:65:4a:
                    37:9d:1b:8c:c5:ea:f3:6a:82:fa:20:c1:ac:f4:0b:
                    10:76:4a:5c:f5:04:74:cd:96:a5:63:82:ab:75:de:
                    ba:a5:ea:34:86:3a:48:14:8d:2c:44:c3:4c:68:b2:
                    54:71:6d:e9:44:b4:64:4d:d4:c7:47:2d:6f:1f:d3:
                    ed:17:76:81:24:b8:94:23:2b:d0:d3:26:39:ea:b1:
                    cc:97:65:62:d3:6f:3e:9d:f1:7a:23:f4:49:c1:a6:
                    71:c0:eb:ca:21:ed:44:60:a2:cf:93:37:14:9e:ec:
                    82:e0:60:7d:2b:f5:ab:bf:c6:1a:9c:04:ff:c0:50:
                    f3:e9:61:36:11:4e:63:80:56:17:7a:c8:61:cd:28:
                    85:f3:f7:aa:7a:59:dd:2b:a7:dc:80:24:49:49:51:
                    eb:35:60:14:3f:18:f6:29:98:fa:69:48:c3:18:d0:
                    8f:ae:e7:05:97:6f:67:57:73:3f:58:3a:e2:23:8c:
                    0f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9D:4E:74:F4:95:D6:BE:A0:23:64:A5:2F:8A:F8:52:C8:8C:87:30
            X509v3 Authority Key Identifier:
                keyid:A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3132382e302f32312d3234203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         37:fe:46:42:be:0d:53:1e:c7:34:44:d6:1f:7d:20:25:cd:b9:
         3d:a2:cc:a2:e9:6a:0d:45:16:89:b1:d5:8e:bc:db:cc:a7:15:
         db:ce:63:b7:be:f7:6b:cd:34:39:08:35:75:dc:b4:57:00:cb:
         81:f6:f5:87:95:1a:91:84:07:d6:6b:d0:57:df:35:96:e0:22:
         a4:93:b6:71:21:53:94:89:f6:3a:98:33:35:85:c4:cf:f6:59:
         a6:cb:0d:f7:fc:0a:00:61:3a:b4:36:4d:cc:7e:81:4d:d4:ff:
         67:cb:07:61:87:27:d4:c0:b2:c0:90:b7:0b:19:3c:0c:37:80:
         f9:86:3b:1f:d0:b9:6a:c1:0f:2e:99:af:2a:b7:92:dc:d8:a2:
         53:f6:d5:d7:ed:57:24:22:9f:a7:af:ac:5c:95:bb:1f:0f:36:
         d7:28:a7:e2:4b:cc:54:64:78:ea:da:32:b4:14:76:22:7e:6b:
         65:c2:74:e3:7e:f3:d4:e0:d9:35:c5:59:6a:bf:06:43:d0:71:
         83:bf:40:b1:89:c1:c7:a7:2c:e9:86:c2:bd:57:55:a0:7e:f8:
         5c:b4:59:2b:34:4e:4f:d9:76:2e:2f:15:42:c9:5c:af:af:49:
         35:b0:8c:c5:b4:40:a5:92:3d:3f:1d:1d:e9:47:85:67:63:bb:
         c6:ee:e8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:09:20 2025 by rpki-client