Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133302e302f32332d3234203d3e203533303138.roa
File:                     3137372e37322e3133302e302f32332d3234203d3e203533303138.roa (raw, json)
Hash identifier:          W6Zzq2esgc7+atjbF/W3ONJ/DuwG9MKSOSQH90PrLrc=
Subject key identifier:   A1:14:21:49:BE:19:7C:73:CB:BE:52:96:CF:B5:23:EA:D4:ED:C0:46
Certificate issuer:       /CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
Certificate serial:       5F403D68F8B34FDBE921F04A2E9E8D1B5F161105
Authority key identifier: A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133302e302f32332d3234203d3e203533303138.roa
Signing time:             Thu 06 Mar 2025 14:33:20 +0000
ROA not before:           Thu 06 Mar 2025 14:28:20 +0000
ROA not after:            Thu 05 Mar 2026 14:33:20 +0000
asID:                     53018
IP address blocks:        177.72.130.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 19:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:40:3d:68:f8:b3:4f:db:e9:21:f0:4a:2e:9e:8d:1b:5f:16:11:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
        Validity
            Not Before: Mar  6 14:28:20 2025 GMT
            Not After : Mar  5 14:33:20 2026 GMT
        Subject: CN=A1142149BE197C73CBBE5296CFB523EAD4EDC046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:72:d6:2a:27:89:ed:4a:20:7d:66:a5:ae:89:
                    ba:8b:04:f5:ac:9c:75:d9:82:e1:3a:97:63:aa:b2:
                    7e:ed:c6:05:91:d9:c5:74:51:26:1c:ad:47:b2:5d:
                    83:d6:cf:51:09:c3:76:32:0f:2d:da:a9:7b:51:f9:
                    cb:21:05:24:fc:4f:65:f0:70:68:78:0a:7b:8b:f5:
                    21:7a:15:83:4a:19:dd:4b:b8:57:c2:83:40:29:a4:
                    97:11:19:24:8d:84:7b:96:ea:21:f2:fa:73:21:16:
                    5f:4d:2a:51:9e:e0:e8:23:4d:af:4a:c7:a8:8b:08:
                    d3:26:4c:df:85:30:d3:aa:9e:e6:c5:7e:9f:f0:ae:
                    37:0c:fa:7b:a5:6d:01:8f:de:f4:64:7b:9b:d5:cf:
                    85:33:2c:c7:1b:04:62:c5:9b:6b:bc:19:e1:b8:e9:
                    cd:b3:44:1d:41:d8:32:72:d6:24:c1:1f:04:c8:52:
                    72:22:10:13:5b:d1:61:d8:31:5f:15:f9:fe:cc:8a:
                    1d:e1:3e:da:29:2c:75:83:83:b7:b6:3b:e8:16:8d:
                    31:8a:91:c0:c0:6b:45:6a:57:80:05:90:ca:11:b3:
                    d2:90:92:af:04:31:a2:d7:7c:8b:8b:65:a9:b2:f0:
                    61:f7:1d:06:ec:6b:b5:c2:f7:70:89:1e:f5:54:29:
                    f6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:14:21:49:BE:19:7C:73:CB:BE:52:96:CF:B5:23:EA:D4:ED:C0:46
            X509v3 Authority Key Identifier:
                keyid:A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133302e302f32332d3234203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:d9:06:ab:41:f5:4d:c5:d9:93:74:fa:69:24:3d:2b:d6:c6:
         ff:bf:1e:75:66:6f:f7:92:d1:e5:06:bf:6f:8f:61:c1:bc:36:
         40:77:a3:78:05:09:5d:0b:be:bc:c1:0f:2d:bc:4a:93:29:a1:
         65:7d:d3:42:45:ba:16:bd:9f:2d:b0:e8:43:8f:81:74:89:67:
         da:53:16:28:6e:a9:10:54:68:dd:82:12:44:26:24:3d:0d:be:
         c5:6b:9c:a8:49:a7:28:1f:c4:18:4a:be:b5:b1:3a:1d:f3:58:
         f8:50:50:b6:d2:cc:85:e7:5a:29:c3:dc:17:76:6d:6a:b4:ba:
         d2:df:07:1b:93:99:6c:b1:61:ba:47:5c:42:1e:3e:c2:23:0f:
         b7:72:01:77:2a:1c:9c:80:d7:3d:b4:22:6e:49:b1:c8:46:77:
         3d:1b:57:df:29:27:9c:02:3d:74:25:b7:7b:fc:b3:f8:b0:fb:
         3d:59:66:dd:dc:9d:68:21:93:75:94:0f:57:74:31:79:96:28:
         31:18:f2:40:a9:b6:24:21:8e:cb:35:ea:cc:72:a8:4b:e7:2c:
         1e:ca:62:5e:63:b4:f7:6f:f4:7b:34:e7:1a:bd:45:c5:fe:0b:
         02:8b:a7:07:37:d9:45:c3:f3:17:e2:b1:9b:90:57:4d:fa:4e:
         f1:7a:24:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:11:17 2025 by rpki-client