Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/SyWgTttsDpEDDEdEKwX9zTpQfmR3sXjmQLEiSo5GoWN/0/3137372e32332e37322e302f32312d3231203d3e20323633303339.roa
File:                     3137372e32332e37322e302f32312d3231203d3e20323633303339.roa (raw, json)
Hash identifier:          a6c2HRq7YJ4AUypH8xx7JyRcpCLUTxdgZrcIvLN7BWA=
Subject key identifier:   97:7F:27:2C:63:2A:0C:E6:D1:E6:12:D5:68:BE:2E:E8:AD:B7:64:CF
Certificate issuer:       /CN=765726ADE273A94CF498EF097DC1C078173BE5D4
Certificate serial:       27207E6D0A1C97EA764A41302F3AD8624B2DAA4A
Authority key identifier: 76:57:26:AD:E2:73:A9:4C:F4:98:EF:09:7D:C1:C0:78:17:3B:E5:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/765726ADE273A94CF498EF097DC1C078173BE5D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SyWgTttsDpEDDEdEKwX9zTpQfmR3sXjmQLEiSo5GoWN/0/3137372e32332e37322e302f32312d3231203d3e20323633303339.roa
Signing time:             Wed 02 Apr 2025 12:54:34 +0000
ROA not before:           Wed 02 Apr 2025 12:49:34 +0000
ROA not after:            Wed 01 Apr 2026 12:54:34 +0000
asID:                     263039
IP address blocks:        177.23.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/SyWgTttsDpEDDEdEKwX9zTpQfmR3sXjmQLEiSo5GoWN/0/765726ADE273A94CF498EF097DC1C078173BE5D4.crl
                          rsync://rpki-repo.registro.br/repo/SyWgTttsDpEDDEdEKwX9zTpQfmR3sXjmQLEiSo5GoWN/0/765726ADE273A94CF498EF097DC1C078173BE5D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/765726ADE273A94CF498EF097DC1C078173BE5D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 09:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:20:7e:6d:0a:1c:97:ea:76:4a:41:30:2f:3a:d8:62:4b:2d:aa:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765726ADE273A94CF498EF097DC1C078173BE5D4
        Validity
            Not Before: Apr  2 12:49:34 2025 GMT
            Not After : Apr  1 12:54:34 2026 GMT
        Subject: CN=977F272C632A0CE6D1E612D568BE2EE8ADB764CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:83:eb:cf:97:da:05:39:fa:b5:33:31:ee:57:
                    91:6a:8f:82:f5:a7:21:f3:6c:9a:bc:29:6c:e3:11:
                    2f:be:cb:5b:33:bf:80:77:58:db:52:2e:1a:89:42:
                    69:dc:bc:0e:dd:e0:b3:32:64:85:8f:fc:77:ae:18:
                    28:17:b5:d1:cd:da:b6:cb:25:d1:72:38:04:6a:79:
                    dd:d1:ed:a6:13:24:38:13:33:7c:14:95:9c:62:f1:
                    bd:a2:32:c8:d7:ba:95:da:11:b7:de:a3:8b:45:f4:
                    c9:72:bb:21:ae:4e:60:e2:83:ac:46:54:f2:86:2f:
                    29:79:22:bb:55:5f:66:e9:ae:6a:c0:c3:34:ad:69:
                    34:01:eb:a2:ed:35:10:fc:19:35:72:b3:95:11:1b:
                    b8:a4:d0:1a:6a:6a:3c:34:14:be:e1:b9:79:f5:b7:
                    b5:c8:4e:b4:a8:11:fa:9a:0e:e4:69:21:aa:5c:d2:
                    75:b9:45:56:e0:64:d7:c5:62:66:68:57:41:63:bf:
                    65:b2:1b:5d:d8:18:13:f9:ec:55:33:27:af:24:17:
                    aa:f5:dd:52:69:33:51:bc:b9:87:f6:0b:b9:68:dc:
                    72:16:09:85:cd:af:ed:54:d5:1f:ba:e1:a3:15:f2:
                    fc:01:ba:57:22:8f:e9:d9:c8:65:34:13:2f:fd:fe:
                    5c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7F:27:2C:63:2A:0C:E6:D1:E6:12:D5:68:BE:2E:E8:AD:B7:64:CF
            X509v3 Authority Key Identifier:
                keyid:76:57:26:AD:E2:73:A9:4C:F4:98:EF:09:7D:C1:C0:78:17:3B:E5:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SyWgTttsDpEDDEdEKwX9zTpQfmR3sXjmQLEiSo5GoWN/0/765726ADE273A94CF498EF097DC1C078173BE5D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/765726ADE273A94CF498EF097DC1C078173BE5D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SyWgTttsDpEDDEdEKwX9zTpQfmR3sXjmQLEiSo5GoWN/0/3137372e32332e37322e302f32312d3231203d3e20323633303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         87:47:b4:03:9f:d5:94:e5:6f:2f:0f:8f:f2:a2:0b:48:dc:5d:
         f2:34:ac:0a:7a:80:dd:c2:3f:ef:eb:4c:e0:96:84:51:cf:50:
         1e:7f:27:a0:be:7f:f0:68:58:01:ac:39:6d:fd:78:55:ae:16:
         03:06:d5:5d:61:2e:0b:05:ca:d7:dc:fa:2b:68:1c:10:3f:6a:
         e0:ad:05:46:42:23:19:5b:a8:2c:d0:e6:d0:f5:ad:5c:d0:ef:
         47:ba:4a:62:04:e2:73:54:b3:5a:c5:2d:44:64:f4:7d:70:5d:
         89:f2:ed:af:48:32:44:b5:c1:0b:ba:b4:53:77:f9:eb:39:90:
         98:64:43:b5:66:3f:75:33:9c:e5:ec:c5:03:a0:32:eb:2b:e7:
         09:8d:b0:35:e3:eb:ff:6a:06:a8:17:ed:ce:33:e5:d9:e9:57:
         b3:28:aa:d0:ae:c6:0e:26:26:cb:27:fe:f8:b7:f7:37:7f:3b:
         c2:3b:cc:fd:6d:3b:31:60:6e:40:b5:03:ff:14:f5:05:3b:c7:
         e4:80:76:e7:66:f2:e8:3c:18:7f:41:d3:b1:46:30:c2:83:b8:
         fa:2d:1f:39:dc:c1:f2:4b:48:8f:d0:d4:58:4e:a1:30:4c:ec:
         7c:5a:35:9b:ce:82:0d:36:43:82:1a:ab:53:84:67:53:32:8c:
         29:a9:fc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:58:51 2025 by rpki-client