Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3133302e302f32342d3234203d3e20323731363234.roa
File:                     3137372e37332e3133302e302f32342d3234203d3e20323731363234.roa (raw, json)
Hash identifier:          3Gf+WxQ0B1eVL2D7cAyvpYGHYkoHi4D1CMxpK90ijgQ=
Subject key identifier:   77:26:69:C2:23:B5:38:7A:AA:CA:0D:C6:1A:8D:7E:AE:1A:6F:00:52
Certificate issuer:       /CN=1B53B172975323FAF6658D8A0A1F69E7CF3CA14D
Certificate serial:       35F2501E9D1B8A640BFA847DBB1A0731E0AAD082
Authority key identifier: 1B:53:B1:72:97:53:23:FA:F6:65:8D:8A:0A:1F:69:E7:CF:3C:A1:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3133302e302f32342d3234203d3e20323731363234.roa
Signing time:             Tue 17 Jun 2025 20:18:37 +0000
ROA not before:           Tue 17 Jun 2025 20:13:37 +0000
ROA not after:            Tue 16 Jun 2026 20:18:37 +0000
asID:                     271624
IP address blocks:        177.73.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.crl
                          rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 23:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f2:50:1e:9d:1b:8a:64:0b:fa:84:7d:bb:1a:07:31:e0:aa:d0:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B53B172975323FAF6658D8A0A1F69E7CF3CA14D
        Validity
            Not Before: Jun 17 20:13:37 2025 GMT
            Not After : Jun 16 20:18:37 2026 GMT
        Subject: CN=772669C223B5387AAACA0DC61A8D7EAE1A6F0052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:be:cf:ad:e8:8c:61:d0:1d:2f:67:20:18:d1:
                    c4:3b:59:45:f8:20:5e:f4:22:51:40:52:58:c4:72:
                    69:f0:55:34:91:21:6f:ca:01:43:26:5e:d0:f2:6c:
                    d5:7c:a7:66:44:73:40:e6:1f:56:e5:61:d0:de:a8:
                    67:d1:31:c1:10:a0:66:dd:79:58:33:98:63:70:ee:
                    dc:66:eb:70:23:68:8c:ac:33:5d:8d:fe:36:8c:b8:
                    e4:ae:fe:e7:76:7c:59:d5:b4:a5:22:d9:60:aa:9e:
                    50:f8:b9:e1:ad:81:12:25:8d:c7:65:d6:30:3f:98:
                    84:45:25:0d:95:ea:16:67:60:82:99:93:1d:58:21:
                    2b:ca:eb:53:80:bb:2e:a5:36:fb:71:5c:b8:14:d8:
                    a8:b8:14:61:71:86:e5:48:18:86:80:a1:8d:56:b4:
                    5c:a9:5a:d0:e8:8e:4b:8e:fd:8c:bc:c2:d5:05:d2:
                    16:f5:4e:0b:0f:9f:2d:0e:64:d1:af:8f:73:8c:12:
                    89:59:0a:61:59:7d:cf:0f:37:8f:82:d4:08:33:d6:
                    e7:5d:0d:54:69:53:ad:79:c5:26:ef:ee:81:6b:54:
                    45:62:a1:6c:1b:83:ca:85:04:2d:8d:01:d9:9d:27:
                    e7:fb:a8:b3:17:d9:f1:4b:c7:53:40:d1:68:ad:7a:
                    95:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:26:69:C2:23:B5:38:7A:AA:CA:0D:C6:1A:8D:7E:AE:1A:6F:00:52
            X509v3 Authority Key Identifier:
                keyid:1B:53:B1:72:97:53:23:FA:F6:65:8D:8A:0A:1F:69:E7:CF:3C:A1:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3133302e302f32342d3234203d3e20323731363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:37:6e:cd:60:67:15:1d:ef:a7:d9:77:11:45:2f:c2:ab:76:
         9b:29:7e:b2:26:c2:4d:42:81:b7:02:13:2e:f2:0d:5f:f5:53:
         02:5a:bc:2d:7e:67:1c:2f:ba:fb:de:d5:3d:82:42:6e:60:97:
         84:70:11:85:00:e3:b4:08:05:cd:40:3f:0d:c0:4e:3a:ce:ba:
         29:09:0c:a1:fc:88:fe:ef:68:36:56:8b:a2:7e:9e:82:e8:5d:
         18:6f:bd:e8:2d:19:cc:f7:be:3e:51:d1:e8:9f:47:06:d4:2d:
         1f:9c:19:c2:63:a6:bc:b7:0c:45:64:be:26:f3:32:43:65:0c:
         5c:d1:0f:ba:f3:38:fa:e8:d7:81:52:a4:f9:eb:41:df:bf:d4:
         28:64:32:8f:d4:2e:63:27:23:c5:4c:c6:cf:ce:3c:85:fe:0b:
         5b:32:b1:be:09:77:2f:aa:2f:a8:cb:b1:8c:5e:9e:7d:bb:36:
         7d:fc:ba:50:90:7a:54:fe:c7:d6:bd:2a:fa:45:6c:4e:b2:05:
         70:79:27:e6:a5:e0:87:87:5d:88:2a:76:bd:eb:af:fe:a7:6b:
         f5:8e:35:80:51:ef:01:42:4e:44:9b:a6:ba:d0:4c:fc:2d:07:
         41:e1:aa:ea:a4:74:db:a7:73:56:55:a7:88:f0:0b:e6:72:22:
         c9:03:0c:66
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNfJQHp0bimQL+oR9uxoHMeCq0IIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI1M0IxNzI5NzUzMjNGQUY2NjU4RDhBMEExRjY5RTdD
RjNDQTE0RDAeFw0yNTA2MTcyMDEzMzdaFw0yNjA2MTYyMDE4MzdaMDMxMTAvBgNV
BAMTKDc3MjY2OUMyMjNCNTM4N0FBQUNBMERDNjFBOEQ3RUFFMUE2RjAwNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAvs+t6Ixh0B0vZyAY0cQ7WUX4
IF70IlFAUljEcmnwVTSRIW/KAUMmXtDybNV8p2ZEc0DmH1blYdDeqGfRMcEQoGbd
eVgzmGNw7txm63AjaIysM12N/jaMuOSu/ud2fFnVtKUi2WCqnlD4ueGtgRIljcdl
1jA/mIRFJQ2V6hZnYIKZkx1YISvK61OAuy6lNvtxXLgU2Ki4FGFxhuVIGIaAoY1W
tFypWtDojkuO/Yy8wtUF0hb1TgsPny0OZNGvj3OMEolZCmFZfc8PN4+C1Agz1udd
DVRpU615xSbv7oFrVEVioWwbg8qFBC2NAdmdJ+f7qLMX2fFLx1NA0WitepX5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUdyZpwiO1OHqqyg3GGo1+rhpvAFIwHwYDVR0j
BBgwFoAUG1OxcpdTI/r2ZY2KCh9p5888oU0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXJuSlJXZ2MyY3E1QTdxcndMTFBXSlVxSlBmVTI5bUJKektqMjVxWHJp
N3IvMC8xQjUzQjE3Mjk3NTMyM0ZBRjY2NThEOEEwQTFGNjlFN0NGM0NBMTRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCNTNCMTcyOTc1MzIzRkFG
NjY1OEQ4QTBBMUY2OUU3Q0YzQ0ExNEQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VybkpSV2djMmNxNUE3cXJ3TExQV0pVcUpQZlUyOW1CSnpLajI1cVhyaTdyLzAv
MzEzNzM3MmUzNzMzMmUzMTMzMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzNjMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxSYIwDQYJKoZIhvcNAQELBQADggEBAK43bs1g
ZxUd76fZdxFFL8KrdpspfrImwk1CgbcCEy7yDV/1UwJavC1+Zxwvuvve1T2CQm5g
l4RwEYUA47QIBc1APw3ATjrOuikJDKH8iP7vaDZWi6J+noLoXRhvvegtGcz3vj5R
0eifRwbULR+cGcJjpry3DEVkvibzMkNlDFzRD7rzOPro14FSpPnrQd+/1ChkMo/U
LmMnI8VMxs/OPIX+C1sysb4Jdy+qL6jLsYxenn27Nn38ulCQelT+x9a9KvpFbE6y
BXB5J+al4IeHXYgqdr3rr/6na/WONYBR7wFCTkSbprrQTPwtB0HhquqkdNunc1ZV
p4jwC+ZyIskDDGY=
-----END CERTIFICATE-----
Generated at Sat Jun 21 01:15:04 2025 by rpki-client