Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/3137372e3132382e37322e302f32312d3234203d3e203532363433.roa
File:                     3137372e3132382e37322e302f32312d3234203d3e203532363433.roa (raw, json)
Hash identifier:          FScV7p6srFgMugLMzJD0nh1WFjbJ1Jvg6h5mrL3HZkY=
Subject key identifier:   54:34:29:53:8E:66:F4:1C:AD:CF:EE:9B:F3:71:BE:7B:23:B7:B4:F0
Certificate issuer:       /CN=E1470F370CA043FEC72078800782F80E03725DD0
Certificate serial:       29F7A6234D54BC1ECFE890AD0F13B157FE9D3068
Authority key identifier: E1:47:0F:37:0C:A0:43:FE:C7:20:78:80:07:82:F8:0E:03:72:5D:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1470F370CA043FEC72078800782F80E03725DD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/3137372e3132382e37322e302f32312d3234203d3e203532363433.roa
Signing time:             Thu 06 Mar 2025 04:01:05 +0000
ROA not before:           Thu 06 Mar 2025 03:56:05 +0000
ROA not after:            Thu 05 Mar 2026 04:01:05 +0000
asID:                     52643
IP address blocks:        177.128.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/E1470F370CA043FEC72078800782F80E03725DD0.crl
                          rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/E1470F370CA043FEC72078800782F80E03725DD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1470F370CA043FEC72078800782F80E03725DD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f7:a6:23:4d:54:bc:1e:cf:e8:90:ad:0f:13:b1:57:fe:9d:30:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1470F370CA043FEC72078800782F80E03725DD0
        Validity
            Not Before: Mar  6 03:56:05 2025 GMT
            Not After : Mar  5 04:01:05 2026 GMT
        Subject: CN=543429538E66F41CADCFEE9BF371BE7B23B7B4F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9b:e9:87:62:05:1d:75:95:4b:63:23:56:f3:
                    e0:a4:6a:99:02:36:ac:51:50:a0:8d:10:3b:8d:7f:
                    9b:f8:ea:d5:fe:33:ed:89:c3:ca:1f:4b:d9:80:b7:
                    78:d9:98:8b:5a:a2:81:45:ab:fb:e1:9b:e4:d0:15:
                    bc:71:03:c3:25:1d:c9:07:70:0a:d8:52:f3:1e:54:
                    8d:d6:cb:21:33:bd:2c:11:5a:fa:16:a1:8f:a2:19:
                    64:71:00:cf:25:ee:62:cc:21:48:c6:16:4f:4e:45:
                    90:f3:cd:d8:ab:73:d1:a4:f3:1b:e0:1d:f9:cb:6f:
                    a8:62:89:83:61:2c:1c:63:94:5c:3e:73:68:e7:2b:
                    b5:41:f7:7b:65:5a:8a:f7:5c:98:d4:29:98:b7:8d:
                    e7:9b:56:04:58:12:b8:52:2b:db:92:22:77:e5:2e:
                    b4:ed:99:2b:af:3d:d7:76:72:e8:87:3f:18:52:57:
                    a0:2c:c0:75:ac:3d:8e:af:54:a3:12:05:04:26:60:
                    95:16:3d:c2:4a:98:04:8b:f9:23:a0:d1:43:56:9b:
                    e7:29:cb:71:4d:4f:d1:18:d1:aa:30:c3:91:de:fc:
                    29:1c:16:9f:4d:99:ba:7b:2d:04:8d:99:b4:a4:e3:
                    91:4a:25:60:aa:52:3c:95:65:a1:52:53:d8:d2:4b:
                    aa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:34:29:53:8E:66:F4:1C:AD:CF:EE:9B:F3:71:BE:7B:23:B7:B4:F0
            X509v3 Authority Key Identifier:
                keyid:E1:47:0F:37:0C:A0:43:FE:C7:20:78:80:07:82:F8:0E:03:72:5D:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/E1470F370CA043FEC72078800782F80E03725DD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1470F370CA043FEC72078800782F80E03725DD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/3137372e3132382e37322e302f32312d3234203d3e203532363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9c:ab:d7:d6:79:62:79:22:86:d2:ba:6d:31:cb:03:d7:00:17:
         4b:80:10:ec:d6:d4:dc:45:ac:87:95:e6:4e:a6:75:e1:64:9b:
         d9:1b:d1:e3:9e:c4:9a:96:30:ff:1f:66:54:34:c2:05:f1:55:
         56:cf:aa:50:91:8b:4f:89:1f:5b:a4:34:39:c8:b6:77:0a:25:
         17:f2:dc:17:af:07:44:12:a8:de:8d:69:02:9a:f6:cb:d3:27:
         9b:82:a2:5d:41:cd:3f:16:ae:7a:ea:32:f5:f7:52:a3:d3:c0:
         33:39:3a:3c:c7:3f:e8:c5:aa:4d:ab:bf:35:f1:09:3e:93:2b:
         06:fd:a7:06:3e:40:64:9b:be:af:a0:83:eb:3a:90:ce:55:9a:
         e0:c8:0f:fa:34:89:71:8b:8d:b7:f2:18:4d:70:e0:09:ba:95:
         95:dc:17:f5:43:9e:8b:ad:ba:62:ba:59:7a:eb:bd:06:18:f7:
         cd:b5:ed:49:f6:90:2c:46:31:2a:89:e4:28:4a:44:1f:3b:e5:
         38:6a:f6:15:53:42:b6:d6:ee:17:11:6d:41:d8:55:59:d6:d9:
         d6:a0:5d:23:a8:0c:26:69:03:85:28:d1:1a:01:e0:88:83:7e:
         f8:8d:2b:71:09:36:7d:e1:ed:11:84:c6:83:b8:20:5c:5f:65:
         13:a8:7a:26
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKfemI01UvB7P6JCtDxOxV/6dMGgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTE0NzBGMzcwQ0EwNDNGRUM3MjA3ODgwMDc4MkY4MEUw
MzcyNUREMDAeFw0yNTAzMDYwMzU2MDVaFw0yNjAzMDUwNDAxMDVaMDMxMTAvBgNV
BAMTKDU0MzQyOTUzOEU2NkY0MUNBRENGRUU5QkYzNzFCRTdCMjNCN0I0RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbm+mHYgUddZVLYyNW8+CkapkC
NqxRUKCNEDuNf5v46tX+M+2Jw8ofS9mAt3jZmItaooFFq/vhm+TQFbxxA8MlHckH
cArYUvMeVI3WyyEzvSwRWvoWoY+iGWRxAM8l7mLMIUjGFk9ORZDzzdirc9Gk8xvg
HfnLb6hiiYNhLBxjlFw+c2jnK7VB93tlWor3XJjUKZi3jeebVgRYErhSK9uSInfl
LrTtmSuvPdd2cuiHPxhSV6AswHWsPY6vVKMSBQQmYJUWPcJKmASL+SOg0UNWm+cp
y3FNT9EY0aoww5He/CkcFp9Nmbp7LQSNmbSk45FKJWCqUjyVZaFSU9jSS6rPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUVDQpU45m9Bytz+6b83G+eyO3tPAwHwYDVR0j
BBgwFoAU4UcPNwygQ/7HIHiAB4L4DgNyXdAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmdTRzY2YjNOZEJkdzFSS3JLc1JrZ0hVVGtmb1hEMVY3RE5vOFdXc0Uy
d20vMS9FMTQ3MEYzNzBDQTA0M0ZFQzcyMDc4ODAwNzgyRjgwRTAzNzI1REQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxNDcwRjM3MENBMDQzRkVD
NzIwNzg4MDA3ODJGODBFMDM3MjVERDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZnU0c2NmIzTmRCZHcxUktyS3NSa2dIVVRrZm9YRDFWN0RObzhXV3NFMndtLzEv
MzEzNzM3MmUzMTMyMzgyZTM3MzIyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNTMy
MzYzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsYBIMA0GCSqGSIb3DQEBCwUAA4IBAQCcq9fWeWJ5
IobSum0xywPXABdLgBDs1tTcRayHleZOpnXhZJvZG9HjnsSaljD/H2ZUNMIF8VVW
z6pQkYtPiR9bpDQ5yLZ3CiUX8twXrwdEEqjejWkCmvbL0yebgqJdQc0/Fq566jL1
91Kj08AzOTo8xz/oxapNq7818Qk+kysG/acGPkBkm76voIPrOpDOVZrgyA/6NIlx
i4238hhNcOAJupWV3Bf1Q56Lrbpiull6670GGPfNte1J9pAsRjEqieQoSkQfO+U4
avYVU0K21u4XEW1B2FVZ1tnWoF0jqAwmaQOFKNEaAeCIg374jStxCTZ94e0RhMaD
uCBcX2UTqHom
-----END CERTIFICATE-----
Generated at Thu May 1 10:46:09 2025 by rpki-client