Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3137372e37322e3233332e302f32342d3234203d3e203532383932.roa
File:                     3137372e37322e3233332e302f32342d3234203d3e203532383932.roa (raw, json)
Hash identifier:          UItaIpayg+4NDxjiKf5+jWke6HSo0mKnJ1YZPRbfDbg=
Subject key identifier:   E7:C4:37:C9:AD:EE:B9:94:36:97:17:01:B5:32:80:CF:F2:22:6A:6B
Certificate issuer:       /CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Certificate serial:       5E773C0D873F3B7C7AADCCE2AD47188A7CDE896B
Authority key identifier: 02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3137372e37322e3233332e302f32342d3234203d3e203532383932.roa
Signing time:             Tue 20 May 2025 03:52:40 +0000
ROA not before:           Tue 20 May 2025 03:47:40 +0000
ROA not after:            Tue 19 May 2026 03:52:40 +0000
asID:                     52892
IP address blocks:        177.72.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl
                          rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 00:39:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:77:3c:0d:87:3f:3b:7c:7a:ad:cc:e2:ad:47:18:8a:7c:de:89:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
        Validity
            Not Before: May 20 03:47:40 2025 GMT
            Not After : May 19 03:52:40 2026 GMT
        Subject: CN=E7C437C9ADEEB99436971701B53280CFF2226A6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b5:e9:e1:6d:ec:75:1d:c6:6a:d6:68:07:ad:
                    8b:d2:c2:90:ef:4e:d8:a1:a9:2d:f4:49:35:1d:3a:
                    10:e5:ec:ff:47:33:f7:9b:e8:18:79:9d:e3:c1:22:
                    70:a3:01:39:7f:43:fa:5d:f0:4b:d2:4c:9e:ed:60:
                    cd:35:79:20:0a:b1:7b:f0:ad:d5:61:65:89:cb:e4:
                    1e:cc:66:c0:fe:13:ae:9e:80:7b:a5:b2:7e:b6:c6:
                    20:d5:b5:53:0a:42:4b:c9:9d:f4:0e:d3:8d:18:88:
                    fa:87:6c:f6:a4:1b:fa:0c:b6:e0:58:a7:9c:b2:7b:
                    09:06:b5:0b:2f:f9:1d:a5:74:2c:2c:ba:66:4d:73:
                    9d:c5:96:22:d9:1a:21:35:9c:36:6d:e8:b8:e4:12:
                    3b:03:f7:63:ee:40:7f:d2:da:f7:cc:d1:37:98:a0:
                    27:b9:2c:63:d5:b5:2d:8e:59:ac:12:c9:8a:e0:5c:
                    08:7e:f4:94:75:a8:83:46:91:16:8a:b4:59:84:4d:
                    77:e4:a5:53:d3:1e:7b:4e:e3:15:7e:eb:52:b0:a8:
                    72:0f:2c:29:4e:dc:0f:e0:d1:5e:08:23:aa:74:af:
                    85:50:c1:b9:70:bc:b2:b5:63:aa:87:0b:fa:51:e7:
                    a3:97:c5:a2:66:2f:6c:82:3c:5d:1c:46:50:ac:24:
                    01:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C4:37:C9:AD:EE:B9:94:36:97:17:01:B5:32:80:CF:F2:22:6A:6B
            X509v3 Authority Key Identifier:
                keyid:02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3137372e37322e3233332e302f32342d3234203d3e203532383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:7d:1a:bc:79:c2:1e:a5:33:06:ab:07:5d:53:59:9d:33:b2:
         d5:0e:83:93:13:77:08:af:ab:6e:5d:f4:e2:9c:7f:35:c8:e2:
         b9:4a:c5:72:13:f5:a4:fa:30:af:cc:4a:c4:30:df:7f:9f:fc:
         e3:86:a0:3c:4e:34:0f:30:38:f2:38:9e:aa:d7:3e:a4:5a:1d:
         22:b4:7c:ea:21:d3:c3:37:fa:ea:83:7f:99:4b:b9:06:87:02:
         0f:81:26:8b:88:c3:fc:eb:95:20:b2:1d:f2:30:ef:73:69:9e:
         c7:4d:38:cc:eb:b5:e4:a6:c8:55:a1:0a:8a:35:17:0e:6d:6a:
         71:bf:ab:d3:34:c2:3c:f0:33:87:3a:9f:77:40:3a:93:20:06:
         c1:18:73:84:cd:69:e9:08:e5:56:ad:f2:fa:a0:3b:85:e2:d8:
         3a:12:8e:c7:9b:c6:f1:54:6c:2a:26:b6:fc:18:81:ce:fd:b4:
         67:81:15:a8:8e:42:a7:e1:7e:aa:ca:94:aa:64:4f:67:e3:81:
         35:52:8f:27:8d:6c:b6:c8:40:70:a7:08:e3:a6:b0:10:d5:6c:
         d0:86:23:f2:9b:34:80:2b:f5:9e:c0:3b:2e:76:6e:25:ea:6c:
         bb:4a:c2:e1:9d:b1:40:32:8a:e8:78:f3:74:26:0f:da:c0:76:
         59:e8:78:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:35:20 2025 by rpki-client