Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3133302e302f32342d3234203d3e20323731363234.roa
File:                     3137372e37332e3133302e302f32342d3234203d3e20323731363234.roa (raw, json)
Hash identifier:          uSAFWFDbFfZxSuNJSuUgO4IZVh1HX17Iak36HEXUjys=
Subject key identifier:   99:B1:E9:7E:D7:D0:94:19:C9:2F:DF:88:69:CB:CC:60:A4:1F:46:FB
Certificate issuer:       /CN=7D33CD8DF615911266433E77A191AE3004E30BD3
Certificate serial:       2D8E910C70D50BC5AF76F4C85EBCA678D834840F
Authority key identifier: 7D:33:CD:8D:F6:15:91:12:66:43:3E:77:A1:91:AE:30:04:E3:0B:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D33CD8DF615911266433E77A191AE3004E30BD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3133302e302f32342d3234203d3e20323731363234.roa
Signing time:             Wed 30 Apr 2025 18:59:59 +0000
ROA not before:           Wed 30 Apr 2025 18:54:59 +0000
ROA not after:            Wed 29 Apr 2026 18:59:59 +0000
asID:                     271624
IP address blocks:        177.73.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/7D33CD8DF615911266433E77A191AE3004E30BD3.crl
                          rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/7D33CD8DF615911266433E77A191AE3004E30BD3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D33CD8DF615911266433E77A191AE3004E30BD3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 08:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:8e:91:0c:70:d5:0b:c5:af:76:f4:c8:5e:bc:a6:78:d8:34:84:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D33CD8DF615911266433E77A191AE3004E30BD3
        Validity
            Not Before: Apr 30 18:54:59 2025 GMT
            Not After : Apr 29 18:59:59 2026 GMT
        Subject: CN=99B1E97ED7D09419C92FDF8869CBCC60A41F46FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4a:ed:e7:8a:20:b2:54:b5:3b:07:1f:83:23:
                    43:f3:97:14:73:b1:d3:e1:a7:ca:8d:98:56:b9:af:
                    4e:fb:16:a6:52:8d:a9:3e:8d:14:fd:13:ce:48:46:
                    bd:d0:64:6e:ff:8b:28:b7:2e:c1:57:b9:c1:28:f3:
                    08:80:f3:9c:d8:dc:8d:0c:74:01:b4:5a:0e:19:0d:
                    df:15:79:af:a5:01:15:ab:db:9f:cf:ef:5b:f2:7a:
                    15:bc:0b:c9:0d:8b:6a:0d:6a:eb:c3:b5:17:4c:2e:
                    34:fe:b7:8f:7e:dd:5e:a6:3f:e4:0b:71:2a:ee:ac:
                    09:59:81:e9:d5:c7:1f:80:84:b1:0f:aa:5c:99:32:
                    42:a5:89:60:3a:d6:27:f7:d5:61:17:81:e1:ea:66:
                    86:5d:34:22:1d:be:b0:21:43:f5:42:38:64:87:40:
                    9c:80:10:a2:29:8a:b8:5d:a9:1e:a2:f4:78:63:fc:
                    8a:bd:b7:50:d1:2a:e7:e5:7c:79:59:f3:7f:1a:57:
                    7a:e2:e1:00:3b:c8:6b:3a:3b:24:2d:91:7e:24:eb:
                    6b:fa:f8:99:24:74:61:40:27:82:86:1b:21:66:a2:
                    77:aa:58:f9:20:9b:85:2c:51:2f:d9:45:c4:87:03:
                    69:bf:a2:28:54:6d:74:5c:1f:40:25:68:9f:1e:e7:
                    c6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B1:E9:7E:D7:D0:94:19:C9:2F:DF:88:69:CB:CC:60:A4:1F:46:FB
            X509v3 Authority Key Identifier:
                keyid:7D:33:CD:8D:F6:15:91:12:66:43:3E:77:A1:91:AE:30:04:E3:0B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/7D33CD8DF615911266433E77A191AE3004E30BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D33CD8DF615911266433E77A191AE3004E30BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3133302e302f32342d3234203d3e20323731363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:8d:a2:7e:61:ef:38:8a:74:fb:66:9b:a8:a2:9b:5e:3e:78:
         44:dc:eb:e7:b6:14:96:a8:1b:64:06:e7:01:3e:a5:7c:95:31:
         05:4e:66:a8:78:89:0d:d1:6e:73:74:a0:5e:ef:07:e9:b7:3c:
         bb:8b:e6:69:cb:57:5d:fd:74:93:be:ed:46:62:57:97:42:ec:
         03:2b:6e:cc:a6:78:1f:7e:6d:b0:d8:af:4c:54:ff:d1:48:63:
         c3:e2:c3:cd:79:e1:54:80:3e:80:4f:6d:63:b1:ae:f3:bf:f6:
         1a:f6:b6:a1:f7:d6:3b:66:62:cc:11:ca:f7:2f:8e:32:e4:82:
         9c:db:ca:39:fc:ed:49:73:5e:f3:e0:cb:23:7c:dc:bb:8f:4e:
         29:0c:e3:0a:54:cb:0b:8b:48:7f:e2:83:43:e9:13:ab:f7:40:
         9a:ee:e7:4e:5c:3f:bf:cb:1f:62:13:42:40:61:05:de:35:3f:
         28:54:f1:31:44:6f:46:d0:0a:df:fb:24:d5:48:d2:4d:a5:cf:
         80:97:43:73:8e:cf:83:fd:72:45:4a:20:4a:8e:9b:49:71:7d:
         4b:f2:0a:b5:29:14:74:4b:32:2e:db:19:3c:9e:d4:4f:b6:71:
         78:3e:05:bd:f2:12:84:f4:7e:fb:9a:1d:d2:70:fc:3c:17:23:
         eb:29:2c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:57:27 2025 by rpki-client