Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3133302e302f32332d3233203d3e20323731363234.roa
File:                     3137372e37332e3133302e302f32332d3233203d3e20323731363234.roa (raw, json)
Hash identifier:          KMfK0s630r6fe++qh4HHY9iZtQwOjAx4dGHB8DUadVE=
Subject key identifier:   6A:60:21:23:AE:A2:95:F8:81:C6:26:30:FD:71:77:A3:54:13:EB:2B
Certificate issuer:       /CN=1B53B172975323FAF6658D8A0A1F69E7CF3CA14D
Certificate serial:       707F474C002584B69009E4AE93AE67896662D278
Authority key identifier: 1B:53:B1:72:97:53:23:FA:F6:65:8D:8A:0A:1F:69:E7:CF:3C:A1:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3133302e302f32332d3233203d3e20323731363234.roa
Signing time:             Tue 17 Jun 2025 20:18:37 +0000
ROA not before:           Tue 17 Jun 2025 20:13:37 +0000
ROA not after:            Tue 16 Jun 2026 20:18:37 +0000
asID:                     271624
IP address blocks:        177.73.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.crl
                          rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 10:26:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:7f:47:4c:00:25:84:b6:90:09:e4:ae:93:ae:67:89:66:62:d2:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B53B172975323FAF6658D8A0A1F69E7CF3CA14D
        Validity
            Not Before: Jun 17 20:13:37 2025 GMT
            Not After : Jun 16 20:18:37 2026 GMT
        Subject: CN=6A602123AEA295F881C62630FD7177A35413EB2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8f:4f:e0:8d:6e:6b:73:32:57:4f:f6:7d:46:
                    d3:41:b8:47:73:53:00:4a:2c:7f:69:2e:06:90:d5:
                    bc:b7:bd:14:7f:0b:e3:61:3a:6e:8b:8b:3c:bb:0c:
                    ad:e0:6b:af:71:ef:ba:3d:57:2a:b0:e2:84:d4:71:
                    a4:6a:5a:ba:59:c8:f7:16:6a:59:92:50:2f:d4:7f:
                    0e:0d:bb:9b:0e:ba:c9:45:b3:81:ed:db:7c:83:d4:
                    f9:8c:a1:b7:f2:13:e3:45:a0:9b:17:0d:91:62:40:
                    10:03:6e:3b:88:29:1e:e4:bd:48:a7:4c:04:83:a8:
                    61:6f:72:7d:20:12:8a:46:14:54:e4:a6:eb:1b:03:
                    8d:21:a9:0b:b4:ff:5c:7c:cd:4c:3e:f3:b1:80:48:
                    e7:51:34:9f:d7:00:fb:f2:5a:2f:34:8d:83:35:72:
                    94:43:c2:cc:5a:76:2f:44:47:b2:d8:a9:93:c7:b6:
                    de:07:e3:5d:cb:45:7d:72:67:2c:b9:92:74:5c:0e:
                    3c:69:b9:73:ff:4f:08:e0:f0:4c:e9:b0:1e:59:33:
                    89:46:96:07:7e:a5:9a:ca:cf:a0:3b:4b:20:b0:aa:
                    69:6b:e8:ec:f0:5b:b4:e5:eb:13:7b:e5:5a:24:19:
                    84:16:07:7b:3b:6e:5c:55:fd:33:ed:18:1c:df:6f:
                    0c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:60:21:23:AE:A2:95:F8:81:C6:26:30:FD:71:77:A3:54:13:EB:2B
            X509v3 Authority Key Identifier:
                keyid:1B:53:B1:72:97:53:23:FA:F6:65:8D:8A:0A:1F:69:E7:CF:3C:A1:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3133302e302f32332d3233203d3e20323731363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:99:7e:09:7b:c0:fb:1b:92:76:b6:eb:2b:67:1c:b0:33:8b:
         f1:a7:e1:8c:b2:44:ab:03:8e:05:f6:0e:ea:aa:a2:ac:5f:9a:
         d4:88:9d:c5:3a:2e:71:53:fe:90:35:e8:af:c2:6c:6a:a7:f4:
         39:8e:18:1f:c1:f0:c2:a8:d8:0f:29:5d:b8:0a:ce:f0:97:d8:
         86:39:92:1d:03:08:48:c3:ad:b1:10:a9:73:4d:58:bf:ff:33:
         b9:ac:38:c6:72:52:dd:18:67:f0:28:5e:53:1a:10:87:7d:57:
         e2:d6:9f:80:5a:10:d0:bf:4d:b3:55:58:38:01:57:79:a5:68:
         9c:4c:82:fb:6e:63:43:b3:98:d0:ba:8f:37:39:5c:7c:23:e5:
         bc:e3:a3:8a:2f:f2:45:2d:2d:0b:4c:64:22:01:87:83:ff:ed:
         73:f0:fb:20:8e:20:56:c0:25:86:f8:e3:85:43:c8:0e:af:bd:
         0c:a5:9b:07:c3:00:db:e6:0d:0d:43:5f:80:53:29:c8:6c:75:
         6a:66:2c:d8:a3:c3:d9:28:7e:91:ba:94:f4:cb:7c:11:f4:a7:
         35:45:fe:8f:1d:10:45:df:a4:6f:2d:d7:14:4e:a2:c5:ea:c0:
         48:77:99:5e:a2:a8:63:87:40:11:3e:4e:71:97:61:ae:13:59:
         9c:e1:ec:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:33:03 2025 by rpki-client