Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3132392e302f32342d3234203d3e20323731363234.roa
File:                     3137372e37332e3132392e302f32342d3234203d3e20323731363234.roa (raw, json)
Hash identifier:          H3Fty6AM5qsdOSemJKIqXgpR/iLPwcVLdmcMqZod3EA=
Subject key identifier:   78:39:F1:8B:34:65:67:6B:55:95:C1:36:51:F6:33:A8:26:5A:3C:58
Certificate issuer:       /CN=7D33CD8DF615911266433E77A191AE3004E30BD3
Certificate serial:       6CC71DC870C6830DFC0F3883BE9B3AC778503DDB
Authority key identifier: 7D:33:CD:8D:F6:15:91:12:66:43:3E:77:A1:91:AE:30:04:E3:0B:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D33CD8DF615911266433E77A191AE3004E30BD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3132392e302f32342d3234203d3e20323731363234.roa
Signing time:             Wed 30 Apr 2025 19:00:00 +0000
ROA not before:           Wed 30 Apr 2025 18:55:00 +0000
ROA not after:            Wed 29 Apr 2026 19:00:00 +0000
asID:                     271624
IP address blocks:        177.73.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/7D33CD8DF615911266433E77A191AE3004E30BD3.crl
                          rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/7D33CD8DF615911266433E77A191AE3004E30BD3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D33CD8DF615911266433E77A191AE3004E30BD3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 22:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c7:1d:c8:70:c6:83:0d:fc:0f:38:83:be:9b:3a:c7:78:50:3d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D33CD8DF615911266433E77A191AE3004E30BD3
        Validity
            Not Before: Apr 30 18:55:00 2025 GMT
            Not After : Apr 29 19:00:00 2026 GMT
        Subject: CN=7839F18B3465676B5595C13651F633A8265A3C58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:eb:fa:61:de:13:83:a6:6d:51:e4:59:d5:14:
                    d4:33:66:8c:b9:5c:41:ee:c5:e8:f8:d8:e5:2c:5b:
                    40:9a:83:6e:34:c3:50:04:68:ad:ea:0f:8e:b3:d9:
                    bc:3a:6b:80:59:71:7a:f2:0f:f3:a0:67:da:6c:68:
                    28:0e:9f:75:98:ec:e1:06:85:28:d8:2b:74:77:42:
                    95:3e:a1:1d:b3:ea:ac:5e:85:e1:6f:78:ad:a4:d0:
                    59:80:ac:3e:4b:6b:47:0b:31:3b:8a:19:13:ee:46:
                    fe:37:f7:59:8e:77:02:cc:49:1c:96:91:b3:92:dc:
                    dd:ae:36:77:1e:61:53:03:5e:9a:47:2c:aa:cc:a5:
                    d3:c0:ab:57:25:29:45:bd:84:f6:d0:20:69:18:e6:
                    25:a5:4a:04:d4:5f:61:98:a2:02:ea:64:5a:0d:a9:
                    9d:b7:4d:a1:08:0d:30:14:45:07:49:46:eb:47:0c:
                    37:b2:e6:ff:42:6b:81:4f:53:ad:6c:88:44:a4:57:
                    ec:5d:e2:85:6f:f6:f1:a5:58:4f:e6:42:d4:ce:75:
                    10:bc:92:d4:8f:40:9c:66:b0:2a:c3:33:dc:49:ec:
                    10:9f:6e:05:52:b1:06:d5:de:be:f5:22:5c:d4:b5:
                    9b:bd:63:eb:b4:5a:ae:0f:dd:fb:b7:fe:05:c3:8b:
                    84:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:39:F1:8B:34:65:67:6B:55:95:C1:36:51:F6:33:A8:26:5A:3C:58
            X509v3 Authority Key Identifier:
                keyid:7D:33:CD:8D:F6:15:91:12:66:43:3E:77:A1:91:AE:30:04:E3:0B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/7D33CD8DF615911266433E77A191AE3004E30BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D33CD8DF615911266433E77A191AE3004E30BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3132392e302f32342d3234203d3e20323731363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:6b:9d:6c:06:8b:e9:47:7b:3d:46:43:fe:05:d6:ff:58:59:
         32:ce:0a:68:7b:61:d7:d6:aa:e6:6e:76:4c:ff:20:db:ac:91:
         8e:3d:25:9f:c1:4e:dd:b3:2f:7b:cd:c3:cf:b8:d8:21:64:27:
         43:13:ca:24:59:c0:cd:ff:52:d9:e1:53:a1:93:b8:28:12:d2:
         1d:f9:f3:b9:55:f5:56:fb:4c:5f:5a:de:f8:6e:5c:62:17:66:
         cd:f5:9d:6c:c6:b8:c3:c8:b3:55:cb:80:09:c0:23:45:da:61:
         3a:47:e6:c4:d2:b1:31:87:09:7a:9e:38:79:4a:10:3b:40:77:
         e3:80:b5:a0:60:2c:2b:ff:5c:aa:22:df:a7:9a:e3:17:60:a8:
         b0:cd:78:7c:e3:99:9e:88:12:e8:df:95:41:ca:ae:cb:57:a6:
         eb:82:e9:8b:c9:a9:4c:d8:14:c3:b8:ad:aa:2f:2b:f3:b8:7c:
         1a:e9:e8:e0:c2:a7:bf:48:df:92:3b:a9:8b:c1:7f:46:d8:84:
         ac:08:de:12:79:ca:0a:31:7d:7a:37:ef:cc:ba:d7:03:17:bc:
         d4:7d:92:0d:b4:d0:8d:df:b5:bf:45:10:e6:98:c5:9b:12:2e:
         67:f6:29:56:5c:dd:b3:d9:20:39:24:54:8d:9c:4b:60:e9:96:
         7e:df:fa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:21:40 2025 by rpki-client