Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133352e302f32342d3234203d3e203533303138.roa
File:                     3137372e37322e3133352e302f32342d3234203d3e203533303138.roa (raw, json)
Hash identifier:          BZkcC6EysRE36ahuYycdfUZRbatp7dJbdI96I5IgDj0=
Subject key identifier:   AC:93:5F:26:BE:43:59:A4:0D:4E:F2:44:06:4A:CE:76:AF:5E:94:63
Certificate issuer:       /CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
Certificate serial:       4D00FA23E62326B1FD7157BAB2974C59123EE785
Authority key identifier: A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133352e302f32342d3234203d3e203533303138.roa
Signing time:             Thu 06 Mar 2025 14:33:20 +0000
ROA not before:           Thu 06 Mar 2025 14:28:20 +0000
ROA not after:            Thu 05 Mar 2026 14:33:20 +0000
asID:                     53018
IP address blocks:        177.72.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 23:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:00:fa:23:e6:23:26:b1:fd:71:57:ba:b2:97:4c:59:12:3e:e7:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
        Validity
            Not Before: Mar  6 14:28:20 2025 GMT
            Not After : Mar  5 14:33:20 2026 GMT
        Subject: CN=AC935F26BE4359A40D4EF244064ACE76AF5E9463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1d:9e:ec:20:fc:17:8a:1c:6b:47:ab:e9:33:
                    35:4a:5c:ae:7c:5f:73:d3:4a:50:36:7e:97:d4:e6:
                    58:8f:ee:62:98:e6:bd:52:32:53:b1:e3:b2:50:fb:
                    b8:3f:f6:d4:c2:8d:87:2d:e9:2c:a3:1b:cf:84:cf:
                    e3:9d:95:1e:2b:22:38:ee:5b:c9:fe:31:e8:df:9e:
                    09:c4:04:89:1e:af:cb:24:3d:21:9c:dd:94:1e:82:
                    a4:1a:0b:e8:65:80:0c:3c:fc:bd:c1:2e:3b:53:7e:
                    9e:84:51:40:52:24:b4:d7:39:c7:5f:29:15:2e:8e:
                    8f:a6:59:9e:f3:0b:c1:0e:82:a0:c5:c3:db:07:21:
                    5c:a0:d3:1f:6a:73:08:5d:a0:84:a9:19:9b:64:7f:
                    1a:8d:7e:48:28:b1:62:5a:71:e0:3e:89:70:3e:4a:
                    9f:7c:c5:0a:9e:13:f1:23:9c:d4:6c:2d:4b:0f:8e:
                    0e:36:05:56:af:a8:41:c0:5c:51:25:39:cd:2b:93:
                    5f:6f:f6:d2:da:2a:fc:44:03:47:b7:be:95:cf:0d:
                    75:55:cf:b0:62:af:c6:76:80:0a:19:65:2d:4c:2a:
                    62:32:b4:d7:1d:b4:fc:55:37:9f:1f:b4:06:4f:b9:
                    de:e4:c2:9d:a2:83:18:43:59:8b:36:31:8e:f1:b8:
                    eb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:93:5F:26:BE:43:59:A4:0D:4E:F2:44:06:4A:CE:76:AF:5E:94:63
            X509v3 Authority Key Identifier:
                keyid:A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133352e302f32342d3234203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:cd:ee:9f:87:5b:94:d7:43:02:15:fb:f3:83:61:36:b7:55:
         60:70:bd:79:f8:1d:25:e0:fb:da:a2:88:5f:e1:52:7c:45:d7:
         59:9b:72:90:68:fb:6a:b0:83:fb:bd:aa:dc:bf:47:20:af:8e:
         24:aa:ce:47:a3:49:54:dd:d5:b2:42:87:3d:fe:11:b2:ae:69:
         ee:ff:a9:27:e9:97:41:ae:16:ec:1c:2f:bb:35:a5:a0:bb:57:
         d9:a0:e4:6a:a8:8a:82:27:28:ec:c0:eb:89:a9:1f:fb:ca:ac:
         1a:68:84:9a:9b:32:56:04:e1:d2:c6:64:1e:ca:60:0d:34:29:
         06:2b:a5:79:2c:62:95:ef:a2:17:07:90:14:7b:68:4d:85:cb:
         ab:19:27:94:b3:8e:da:b5:04:c5:d9:64:18:77:a5:4d:c4:a9:
         b0:63:d3:f5:b8:22:55:3e:4e:1e:96:99:f9:00:6a:52:00:e8:
         09:0d:e3:37:7d:a4:44:60:e5:b3:15:15:b9:6f:bd:0b:eb:74:
         2c:09:cb:44:b4:ad:24:ce:3a:eb:b8:61:d3:92:1c:bc:fe:e0:
         56:fd:9d:b0:73:5e:8e:96:cb:3c:33:ef:25:ec:4d:4d:76:87:
         ef:57:0a:37:8f:3c:76:56:3c:fb:e7:fa:a1:95:f4:e5:3c:75:
         b1:90:30:35
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTQD6I+YjJrH9cVe6spdMWRI+54UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU0NEREMkFBNTIwOThCRkI4N0JBNTc5MTRBQjk0MDBF
QUVFNEZDMDAeFw0yNTAzMDYxNDI4MjBaFw0yNjAzMDUxNDMzMjBaMDMxMTAvBgNV
BAMTKEFDOTM1RjI2QkU0MzU5QTQwRDRFRjI0NDA2NEFDRTc2QUY1RTk0NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtHZ7sIPwXihxrR6vpMzVKXK58
X3PTSlA2fpfU5liP7mKY5r1SMlOx47JQ+7g/9tTCjYct6SyjG8+Ez+OdlR4rIjju
W8n+MejfngnEBIker8skPSGc3ZQegqQaC+hlgAw8/L3BLjtTfp6EUUBSJLTXOcdf
KRUujo+mWZ7zC8EOgqDFw9sHIVyg0x9qcwhdoISpGZtkfxqNfkgosWJaceA+iXA+
Sp98xQqeE/EjnNRsLUsPjg42BVavqEHAXFElOc0rk19v9tLaKvxEA0e3vpXPDXVV
z7Bir8Z2gAoZZS1MKmIytNcdtPxVN58ftAZPud7kwp2igxhDWYs2MY7xuOtNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUrJNfJr5DWaQNTvJEBkrOdq9elGMwHwYDVR0j
BBgwFoAUpUTdKqUgmL+4e6V5FKuUAOruT8AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0U3Tk1BUnBnM2NQYzN0VVprRk1yS3pSdEdiNVJIdHlCR3B6dEZWV011
SmYvMS9BNTQ0REQyQUE1MjA5OEJGQjg3QkE1NzkxNEFCOTQwMEVBRUU0RkMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NDRERDJBQTUyMDk4QkZC
ODdCQTU3OTE0QUI5NDAwRUFFRTRGQzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdFN05NQVJwZzNjUGMzdFVaa0ZNckt6UnRHYjVSSHR5QkdwenRGVldNdUpmLzEv
MzEzNzM3MmUzNzMyMmUzMTMzMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzAzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsUiHMA0GCSqGSIb3DQEBCwUAA4IBAQBGze6fh1uU
10MCFfvzg2E2t1VgcL15+B0l4Pvaoohf4VJ8RddZm3KQaPtqsIP7varcv0cgr44k
qs5Ho0lU3dWyQoc9/hGyrmnu/6kn6ZdBrhbsHC+7NaWgu1fZoORqqIqCJyjswOuJ
qR/7yqwaaISamzJWBOHSxmQeymANNCkGK6V5LGKV76IXB5AUe2hNhcurGSeUs47a
tQTF2WQYd6VNxKmwY9P1uCJVPk4elpn5AGpSAOgJDeM3faREYOWzFRW5b70L63Qs
CctEtK0kzjrruGHTkhy8/uBW/Z2wc16Olss8M+8l7E1NdofvVwo3jzx2Vjz75/qh
lfTlPHWxkDA1
-----END CERTIFICATE-----
Generated at Fri Apr 18 08:14:38 2025 by rpki-client