Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3133302e302f32332d3233203d3e20323731363234.roa
File:                     3137372e37332e3133302e302f32332d3233203d3e20323731363234.roa (raw, json)
Hash identifier:          8AGCIUvlnsyVd5ApR6n2bOubVo46Zi/chBeAoSNo7AQ=
Subject key identifier:   EC:85:D7:35:CA:CF:C7:D9:78:6F:E3:D1:12:08:0B:B1:0E:2B:92:1C
Certificate issuer:       /CN=7D33CD8DF615911266433E77A191AE3004E30BD3
Certificate serial:       7D0D89D75C993564C0C5EC6900F3C1D9219DB373
Authority key identifier: 7D:33:CD:8D:F6:15:91:12:66:43:3E:77:A1:91:AE:30:04:E3:0B:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D33CD8DF615911266433E77A191AE3004E30BD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3133302e302f32332d3233203d3e20323731363234.roa
Signing time:             Wed 30 Apr 2025 19:00:00 +0000
ROA not before:           Wed 30 Apr 2025 18:55:00 +0000
ROA not after:            Wed 29 Apr 2026 19:00:00 +0000
asID:                     271624
IP address blocks:        177.73.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/7D33CD8DF615911266433E77A191AE3004E30BD3.crl
                          rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/7D33CD8DF615911266433E77A191AE3004E30BD3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D33CD8DF615911266433E77A191AE3004E30BD3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 13:35:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:0d:89:d7:5c:99:35:64:c0:c5:ec:69:00:f3:c1:d9:21:9d:b3:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D33CD8DF615911266433E77A191AE3004E30BD3
        Validity
            Not Before: Apr 30 18:55:00 2025 GMT
            Not After : Apr 29 19:00:00 2026 GMT
        Subject: CN=EC85D735CACFC7D9786FE3D112080BB10E2B921C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:59:ed:b2:36:40:64:08:f6:24:cd:ea:1f:11:
                    22:65:92:9a:d8:6c:5a:21:f4:a3:73:2b:0e:19:da:
                    bd:5c:33:2b:a6:31:da:60:e7:1d:6b:e0:55:bd:88:
                    58:1d:69:5e:1c:fe:d8:7b:ea:93:5d:4b:7b:2c:ba:
                    4a:e3:75:26:42:49:d6:72:b4:b1:ac:7d:a7:51:8f:
                    69:83:0e:73:7f:c3:f5:7e:b8:20:a1:78:1b:c1:52:
                    16:4f:7b:54:d1:51:ae:51:09:51:d2:4a:d3:b4:1a:
                    05:3c:3f:8d:04:b7:6a:f2:8c:c8:48:7a:8a:ed:c6:
                    28:7a:f6:63:a7:be:10:a1:4a:8a:62:b8:b0:c5:36:
                    77:7f:8b:35:c9:e3:77:d5:c4:81:ea:86:84:1f:5d:
                    08:d4:2d:2a:d8:37:a4:c2:6e:a8:d0:3c:2d:1b:f4:
                    2d:11:cc:7d:43:a5:03:5d:08:a1:e0:22:a6:da:70:
                    49:3c:db:f9:55:c7:f4:9c:01:77:20:f2:8b:e0:df:
                    a4:c8:fb:d3:24:41:37:0c:3c:60:f0:ad:68:6f:e1:
                    38:fa:97:e6:c3:92:a6:7c:33:43:16:da:4a:2f:97:
                    b9:5b:d3:55:56:74:db:00:f8:d4:59:0b:28:43:4b:
                    37:5c:75:2c:21:78:4c:b2:20:b7:21:a1:27:a9:16:
                    b8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:85:D7:35:CA:CF:C7:D9:78:6F:E3:D1:12:08:0B:B1:0E:2B:92:1C
            X509v3 Authority Key Identifier:
                keyid:7D:33:CD:8D:F6:15:91:12:66:43:3E:77:A1:91:AE:30:04:E3:0B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/7D33CD8DF615911266433E77A191AE3004E30BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D33CD8DF615911266433E77A191AE3004E30BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3133302e302f32332d3233203d3e20323731363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:ae:c8:6d:6e:a9:85:f4:3c:46:d6:bd:0e:27:88:db:c6:de:
         35:80:cb:36:8c:c6:71:81:c9:8e:8d:cb:97:a3:62:c0:db:a8:
         02:c7:d3:a0:0f:c8:5c:b9:e9:d9:d2:c5:33:ab:bd:99:f4:55:
         b7:87:e1:e4:32:c3:9c:90:4a:28:a1:01:8e:9c:5a:25:0c:7f:
         64:e1:89:c0:11:e9:9a:e4:22:1d:69:49:53:43:38:27:2e:12:
         4d:41:5c:59:07:86:80:4c:f0:c8:d0:04:46:2a:81:a1:e2:28:
         4c:2a:29:57:e9:b9:98:00:b4:37:cb:fe:82:8b:7f:bb:0c:ef:
         10:a0:93:ee:03:98:77:1c:1f:66:3e:0b:1e:b8:ea:5a:9f:9a:
         2b:e5:d3:89:28:bb:55:e0:3b:02:1b:57:5f:48:c1:67:e5:8a:
         0c:8d:28:0b:0f:e9:2d:21:1e:fb:b6:bc:83:1a:f0:7f:bc:c9:
         4d:ab:96:12:8b:57:a5:c9:1c:55:87:07:e8:23:bb:54:40:5c:
         1f:d2:56:4c:14:63:aa:8f:86:81:70:54:18:6b:be:ab:3a:e5:
         22:04:f3:54:d3:74:84:44:0c:92:76:32:d3:4f:ef:fe:cf:98:
         46:b3:80:3b:86:23:39:49:68:30:48:27:3e:18:e4:22:3e:d6:
         ae:2c:84:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:43:54 2025 by rpki-client