Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3132392e302f32342d3234203d3e20323731363234.roa
File:                     3137372e37332e3132392e302f32342d3234203d3e20323731363234.roa (raw, json)
Hash identifier:          8gq4D9pCKE6OOhMFdTcf3FN/y2mrU4QJ4ayjkGV01Vw=
Subject key identifier:   A9:08:D9:9B:AE:56:23:76:DD:92:A1:C5:02:14:4C:24:C2:1B:28:E4
Certificate issuer:       /CN=306F285229CADF2A417F8D22C75886C83340CA85
Certificate serial:       30D0DA63732D0C56F6902B3AD56BA176E283E749
Authority key identifier: 30:6F:28:52:29:CA:DF:2A:41:7F:8D:22:C7:58:86:C8:33:40:CA:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/306F285229CADF2A417F8D22C75886C83340CA85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3132392e302f32342d3234203d3e20323731363234.roa
Signing time:             Thu 25 Sep 2025 13:22:18 +0000
ROA not before:           Thu 25 Sep 2025 13:17:18 +0000
ROA not after:            Thu 24 Sep 2026 13:22:18 +0000
asID:                     271624
IP address blocks:        177.73.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/306F285229CADF2A417F8D22C75886C83340CA85.crl
                          rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/306F285229CADF2A417F8D22C75886C83340CA85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/306F285229CADF2A417F8D22C75886C83340CA85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 21:46:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d0:da:63:73:2d:0c:56:f6:90:2b:3a:d5:6b:a1:76:e2:83:e7:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=306F285229CADF2A417F8D22C75886C83340CA85
        Validity
            Not Before: Sep 25 13:17:18 2025 GMT
            Not After : Sep 24 13:22:18 2026 GMT
        Subject: CN=A908D99BAE562376DD92A1C502144C24C21B28E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:94:77:97:bb:46:25:aa:2f:d5:8f:00:aa:40:
                    d6:ca:bb:34:b9:ad:ef:67:4c:ca:01:8d:b3:cf:56:
                    13:40:0e:f6:8f:b8:57:3b:1a:26:69:2a:e5:47:11:
                    6c:15:54:c0:63:5f:60:cb:cd:b4:45:2a:3c:f0:32:
                    4f:bb:fe:6f:06:c2:9d:98:7e:28:c8:93:59:bc:d5:
                    e3:c4:bb:94:3f:42:df:d0:e3:6d:47:fb:c2:68:40:
                    d1:ed:d2:19:4d:d5:fa:31:e8:de:e2:4e:f5:c2:d7:
                    d5:e0:a1:ed:06:51:ba:f3:4c:6c:5e:d3:a2:a1:44:
                    61:d8:b7:cc:ad:f9:82:b0:fb:a1:72:6a:c3:74:12:
                    1f:57:86:12:03:0e:d0:7a:00:35:e4:43:68:dc:34:
                    45:50:ea:7a:bc:f3:2b:ee:cc:11:ff:3b:91:3e:0a:
                    53:63:f0:6d:4b:ee:83:c8:a7:b8:1f:ba:66:14:4b:
                    70:40:67:b7:37:83:1a:fd:ed:74:56:d7:75:bd:e5:
                    ea:e4:11:e2:aa:1e:eb:4c:47:55:5f:38:68:15:0a:
                    f9:3b:98:4a:5b:c3:47:22:47:4f:ae:c7:7b:0f:cc:
                    a9:76:27:a0:b8:70:31:71:4d:66:5a:9e:b5:90:58:
                    04:bb:78:58:5f:00:a4:4a:0e:4f:5f:5d:0e:75:ed:
                    cc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:08:D9:9B:AE:56:23:76:DD:92:A1:C5:02:14:4C:24:C2:1B:28:E4
            X509v3 Authority Key Identifier:
                keyid:30:6F:28:52:29:CA:DF:2A:41:7F:8D:22:C7:58:86:C8:33:40:CA:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/306F285229CADF2A417F8D22C75886C83340CA85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/306F285229CADF2A417F8D22C75886C83340CA85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3132392e302f32342d3234203d3e20323731363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:3e:19:22:2a:bc:ec:56:93:17:32:c0:65:3a:c0:cd:f1:70:
         7e:ba:1d:c3:06:f2:a2:96:d1:c7:6b:aa:bb:e4:c4:81:f7:bf:
         f1:c8:70:69:32:0a:b7:93:af:f2:9a:1d:77:2e:81:7d:a3:d5:
         97:d9:4e:8a:a2:d1:ad:e5:0a:37:56:c5:c0:92:ed:49:87:6c:
         f8:4d:a3:00:a1:28:20:77:98:d9:9f:80:be:b2:84:3b:4a:d7:
         cb:1b:30:d8:ed:91:b3:0f:93:c1:36:17:54:81:c7:d2:99:d0:
         a5:f1:08:05:41:03:53:31:7b:39:f5:5e:c8:93:c4:c7:10:d1:
         15:43:0b:93:c3:88:d7:12:07:32:ad:f3:06:7d:34:6b:c0:fd:
         43:aa:51:2f:ba:3c:cf:ea:bb:93:15:95:1d:92:bb:44:6b:69:
         06:c1:c6:fd:88:e4:14:bd:01:57:b1:07:96:0c:d9:4a:02:14:
         26:37:7b:20:27:7e:4b:fb:21:05:47:78:73:3b:3c:ce:d2:b1:
         ea:54:09:c3:4d:17:4b:52:b6:4a:2e:6d:fc:b6:e3:0c:fd:1c:
         90:17:32:85:4a:f1:9a:f2:46:7e:ab:18:ac:91:f5:82:a4:00:
         0e:e8:d8:78:ba:45:d6:8b:2d:b8:79:0e:74:9f:c5:9e:16:d9:
         83:c2:23:53
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMNDaY3MtDFb2kCs61WuhduKD50kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA2RjI4NTIyOUNBREYyQTQxN0Y4RDIyQzc1ODg2Qzgz
MzQwQ0E4NTAeFw0yNTA5MjUxMzE3MThaFw0yNjA5MjQxMzIyMThaMDMxMTAvBgNV
BAMTKEE5MDhEOTlCQUU1NjIzNzZERDkyQTFDNTAyMTQ0QzI0QzIxQjI4RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOlHeXu0Ylqi/VjwCqQNbKuzS5
re9nTMoBjbPPVhNADvaPuFc7GiZpKuVHEWwVVMBjX2DLzbRFKjzwMk+7/m8Gwp2Y
fijIk1m81ePEu5Q/Qt/Q421H+8JoQNHt0hlN1fox6N7iTvXC19Xgoe0GUbrzTGxe
06KhRGHYt8yt+YKw+6FyasN0Eh9XhhIDDtB6ADXkQ2jcNEVQ6nq88yvuzBH/O5E+
ClNj8G1L7oPIp7gfumYUS3BAZ7c3gxr97XRW13W95erkEeKqHutMR1VfOGgVCvk7
mEpbw0ciR0+ux3sPzKl2J6C4cDFxTWZanrWQWAS7eFhfAKRKDk9fXQ517cz7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUqQjZm65WI3bdkqHFAhRMJMIbKOQwHwYDVR0j
BBgwFoAUMG8oUinK3ypBf40ix1iGyDNAyoUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXJuSlJXZ2MyY3E1QTdxcndMTFBXSlVxSlBmVTI5bUJKektqMjVxWHJp
N3IvMC8zMDZGMjg1MjI5Q0FERjJBNDE3RjhEMjJDNzU4ODZDODMzNDBDQTg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwNkYyODUyMjlDQURGMkE0
MTdGOEQyMkM3NTg4NkM4MzM0MENBODUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VybkpSV2djMmNxNUE3cXJ3TExQV0pVcUpQZlUyOW1CSnpLajI1cVhyaTdyLzAv
MzEzNzM3MmUzNzMzMmUzMTMyMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzNjMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxSYEwDQYJKoZIhvcNAQELBQADggEBAFg+GSIq
vOxWkxcywGU6wM3xcH66HcMG8qKW0cdrqrvkxIH3v/HIcGkyCreTr/KaHXcugX2j
1ZfZToqi0a3lCjdWxcCS7UmHbPhNowChKCB3mNmfgL6yhDtK18sbMNjtkbMPk8E2
F1SBx9KZ0KXxCAVBA1Mxezn1XsiTxMcQ0RVDC5PDiNcSBzKt8wZ9NGvA/UOqUS+6
PM/qu5MVlR2Su0RraQbBxv2I5BS9AVexB5YM2UoCFCY3eyAnfkv7IQVHeHM7PM7S
sepUCcNNF0tStkoubfy24wz9HJAXMoVK8ZryRn6rGKyR9YKkAA7o2Hi6RdaLLbh5
DnSfxZ4W2YPCI1M=
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:31:36 2025 by rpki-client