Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3132382e302f32342d3234203d3e20323731363234.roa
File:                     3137372e37332e3132382e302f32342d3234203d3e20323731363234.roa (raw, json)
Hash identifier:          ZOpR6ebnsVEr7B8GeJB46CIo4HJA09T6JKXiyd5NmYM=
Subject key identifier:   6D:50:2A:69:A6:67:A6:CC:2E:E6:83:26:BE:DE:51:EC:7F:71:68:C9
Certificate issuer:       /CN=1B53B172975323FAF6658D8A0A1F69E7CF3CA14D
Certificate serial:       5ED9D31547D6EA779423BA9AC8DEFC6940969C81
Authority key identifier: 1B:53:B1:72:97:53:23:FA:F6:65:8D:8A:0A:1F:69:E7:CF:3C:A1:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3132382e302f32342d3234203d3e20323731363234.roa
Signing time:             Tue 17 Jun 2025 20:18:36 +0000
ROA not before:           Tue 17 Jun 2025 20:13:36 +0000
ROA not after:            Tue 16 Jun 2026 20:18:36 +0000
asID:                     271624
IP address blocks:        177.73.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.crl
                          rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 17:47:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d9:d3:15:47:d6:ea:77:94:23:ba:9a:c8:de:fc:69:40:96:9c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B53B172975323FAF6658D8A0A1F69E7CF3CA14D
        Validity
            Not Before: Jun 17 20:13:36 2025 GMT
            Not After : Jun 16 20:18:36 2026 GMT
        Subject: CN=6D502A69A667A6CC2EE68326BEDE51EC7F7168C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d4:5b:06:1f:34:1d:d1:56:8e:c3:c6:25:1f:
                    ee:6f:71:71:50:8a:a5:8d:0c:df:b0:c4:73:7c:46:
                    83:ce:29:16:92:63:4c:aa:2b:19:4b:1c:be:f6:03:
                    25:3f:2d:c1:28:a0:d8:ad:6a:9d:79:c3:2b:79:db:
                    2a:a9:4b:17:92:24:9a:64:cf:33:66:52:76:57:ea:
                    1b:82:b7:24:52:f4:0d:ee:de:12:af:3b:7a:4d:62:
                    5c:77:3e:82:5a:49:f6:bd:61:84:b6:34:d7:7e:09:
                    20:bb:26:19:f5:72:c9:c6:68:7d:23:0a:7d:9f:de:
                    84:3b:dd:ef:75:ad:36:5b:69:fe:03:a3:11:47:8a:
                    32:9a:e5:08:80:da:2d:ec:7c:8c:f3:7e:57:68:34:
                    67:ca:04:fa:b2:88:77:2d:40:87:db:67:20:1c:75:
                    fd:2c:57:65:de:31:f5:90:dc:59:25:c0:20:4b:57:
                    73:29:11:d5:47:c3:05:38:2b:cc:9d:75:ac:7a:fe:
                    f8:92:8e:25:e4:ac:f3:56:41:b5:79:56:06:57:75:
                    dc:d4:de:95:0c:b1:9d:5a:93:de:cf:1b:95:0c:ee:
                    0c:94:34:c3:18:5c:4b:e6:26:4d:7b:17:7c:da:2d:
                    84:32:5f:bb:bb:e2:f8:64:fa:a9:c0:37:b1:66:21:
                    12:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:50:2A:69:A6:67:A6:CC:2E:E6:83:26:BE:DE:51:EC:7F:71:68:C9
            X509v3 Authority Key Identifier:
                keyid:1B:53:B1:72:97:53:23:FA:F6:65:8D:8A:0A:1F:69:E7:CF:3C:A1:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3132382e302f32342d3234203d3e20323731363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:76:18:27:20:72:f0:5b:50:ea:7b:25:d2:d2:88:6e:81:7f:
         d2:e8:82:89:8f:77:d1:49:a3:25:64:0d:57:80:49:88:c3:6e:
         0a:a1:44:14:5e:53:99:0d:10:a4:40:67:7c:52:9f:0c:59:03:
         0b:f1:4c:ab:95:3b:59:20:fc:f9:22:fd:7b:37:4c:32:f0:de:
         45:96:1e:45:fc:5d:e6:22:25:8d:df:73:f5:8e:0b:d6:34:87:
         3a:cc:9f:b6:12:79:12:63:d1:3c:30:d5:b0:53:51:ec:83:8b:
         64:42:95:30:04:33:ae:c5:4f:6c:51:b4:3e:50:13:02:a8:c2:
         0f:25:24:65:0a:af:38:a6:2f:61:f1:d5:f4:72:f5:a4:f4:7e:
         8a:16:6e:91:21:c7:a6:ce:60:68:48:8e:43:fc:32:9c:13:4e:
         ee:8e:96:88:1f:27:e1:94:f8:d0:7b:82:15:a8:1a:4f:d9:ab:
         40:88:bd:10:59:64:71:92:da:18:07:d1:d6:9f:0f:e5:c5:f6:
         f8:22:78:9d:e7:77:16:2f:0f:23:97:1c:7b:49:c4:f5:07:ef:
         f5:7d:11:a7:c9:1d:7c:5e:c9:82:03:a9:ce:fa:c0:14:b3:73:
         b9:c3:30:35:0c:6c:ff:8c:c0:f9:fb:d7:fb:89:c3:26:d5:a0:
         8a:1a:02:eb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXtnTFUfW6neUI7qayN78aUCWnIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI1M0IxNzI5NzUzMjNGQUY2NjU4RDhBMEExRjY5RTdD
RjNDQTE0RDAeFw0yNTA2MTcyMDEzMzZaFw0yNjA2MTYyMDE4MzZaMDMxMTAvBgNV
BAMTKDZENTAyQTY5QTY2N0E2Q0MyRUU2ODMyNkJFREU1MUVDN0Y3MTY4QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC31FsGHzQd0VaOw8YlH+5vcXFQ
iqWNDN+wxHN8RoPOKRaSY0yqKxlLHL72AyU/LcEooNitap15wyt52yqpSxeSJJpk
zzNmUnZX6huCtyRS9A3u3hKvO3pNYlx3PoJaSfa9YYS2NNd+CSC7Jhn1csnGaH0j
Cn2f3oQ73e91rTZbaf4DoxFHijKa5QiA2i3sfIzzfldoNGfKBPqyiHctQIfbZyAc
df0sV2XeMfWQ3FklwCBLV3MpEdVHwwU4K8yddax6/viSjiXkrPNWQbV5VgZXddzU
3pUMsZ1ak97PG5UM7gyUNMMYXEvmJk17F3zaLYQyX7u74vhk+qnAN7FmIRIrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUbVAqaaZnpswu5oMmvt5R7H9xaMkwHwYDVR0j
BBgwFoAUG1OxcpdTI/r2ZY2KCh9p5888oU0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXJuSlJXZ2MyY3E1QTdxcndMTFBXSlVxSlBmVTI5bUJKektqMjVxWHJp
N3IvMC8xQjUzQjE3Mjk3NTMyM0ZBRjY2NThEOEEwQTFGNjlFN0NGM0NBMTRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCNTNCMTcyOTc1MzIzRkFG
NjY1OEQ4QTBBMUY2OUU3Q0YzQ0ExNEQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VybkpSV2djMmNxNUE3cXJ3TExQV0pVcUpQZlUyOW1CSnpLajI1cVhyaTdyLzAv
MzEzNzM3MmUzNzMzMmUzMTMyMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzNjMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxSYAwDQYJKoZIhvcNAQELBQADggEBAD52GCcg
cvBbUOp7JdLSiG6Bf9LogomPd9FJoyVkDVeASYjDbgqhRBReU5kNEKRAZ3xSnwxZ
AwvxTKuVO1kg/Pki/Xs3TDLw3kWWHkX8XeYiJY3fc/WOC9Y0hzrMn7YSeRJj0Tww
1bBTUeyDi2RClTAEM67FT2xRtD5QEwKowg8lJGUKrzimL2Hx1fRy9aT0fooWbpEh
x6bOYGhIjkP8MpwTTu6OlogfJ+GU+NB7ghWoGk/Zq0CIvRBZZHGS2hgH0dafD+XF
9vgieJ3ndxYvDyOXHHtJxPUH7/V9EafJHXxeyYIDqc76wBSzc7nDMDUMbP+MwPn7
1/uJwybVoIoaAus=
-----END CERTIFICATE-----
Generated at Thu Jun 19 11:54:02 2025 by rpki-client