Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3133312e302f32342d3234203d3e20323731363234.roa
File:                     3137372e37332e3133312e302f32342d3234203d3e20323731363234.roa (raw, json)
Hash identifier:          UOrfus8swO7roy2FjJfpMLdTqQni4rNbkQ71giasRnI=
Subject key identifier:   BF:BB:E5:BD:79:20:F1:AA:F3:9B:B0:37:77:A8:AE:4E:31:0C:D8:97
Certificate issuer:       /CN=7D33CD8DF615911266433E77A191AE3004E30BD3
Certificate serial:       5995780D5633C4080C1E2E8AFD9E19D628651790
Authority key identifier: 7D:33:CD:8D:F6:15:91:12:66:43:3E:77:A1:91:AE:30:04:E3:0B:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D33CD8DF615911266433E77A191AE3004E30BD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3133312e302f32342d3234203d3e20323731363234.roa
Signing time:             Wed 30 Apr 2025 18:59:59 +0000
ROA not before:           Wed 30 Apr 2025 18:54:59 +0000
ROA not after:            Wed 29 Apr 2026 18:59:59 +0000
asID:                     271624
IP address blocks:        177.73.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/7D33CD8DF615911266433E77A191AE3004E30BD3.crl
                          rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/7D33CD8DF615911266433E77A191AE3004E30BD3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D33CD8DF615911266433E77A191AE3004E30BD3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 16:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:95:78:0d:56:33:c4:08:0c:1e:2e:8a:fd:9e:19:d6:28:65:17:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D33CD8DF615911266433E77A191AE3004E30BD3
        Validity
            Not Before: Apr 30 18:54:59 2025 GMT
            Not After : Apr 29 18:59:59 2026 GMT
        Subject: CN=BFBBE5BD7920F1AAF39BB03777A8AE4E310CD897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:72:24:9e:4f:9d:fe:5b:56:34:f7:38:65:5b:
                    d0:c0:4f:31:1e:41:a9:05:44:11:28:10:93:54:3b:
                    db:dd:98:b6:19:9d:9f:8d:b6:85:f0:73:67:ec:c4:
                    3c:32:92:1c:e0:9e:d6:43:0b:26:c7:8e:33:9f:03:
                    6c:ce:34:6d:6b:ff:1b:67:c2:f3:1d:03:a1:6a:7e:
                    aa:f4:2d:2b:f2:89:4c:a6:5b:c6:36:5d:f7:37:41:
                    82:99:7a:fd:72:fc:25:f1:6b:f4:8c:c7:e7:fc:a7:
                    89:ce:03:f9:b0:0c:d8:50:e1:60:55:f6:f9:84:d7:
                    cb:20:7a:78:bb:8b:b7:d7:bb:06:2c:4f:32:12:d3:
                    4c:89:4f:30:ed:53:6d:00:8f:46:ff:eb:9f:95:f0:
                    02:ab:e9:4c:c2:f0:40:ec:c7:a7:b3:d7:23:d9:57:
                    1c:08:56:34:56:f1:fa:8f:cb:68:74:44:c2:2a:cd:
                    fd:dd:88:77:c8:27:0c:63:db:4e:51:ed:fd:34:c4:
                    e9:e9:73:88:1c:95:ad:a0:77:90:89:18:b4:aa:5c:
                    73:f3:11:6b:e4:78:dc:42:7e:13:bf:3e:86:db:4b:
                    71:51:be:c8:b7:80:32:16:59:e8:b5:57:1f:30:dd:
                    87:54:72:23:ea:94:47:a0:1b:b5:43:dd:d3:56:86:
                    cf:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BB:E5:BD:79:20:F1:AA:F3:9B:B0:37:77:A8:AE:4E:31:0C:D8:97
            X509v3 Authority Key Identifier:
                keyid:7D:33:CD:8D:F6:15:91:12:66:43:3E:77:A1:91:AE:30:04:E3:0B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/7D33CD8DF615911266433E77A191AE3004E30BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D33CD8DF615911266433E77A191AE3004E30BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3133312e302f32342d3234203d3e20323731363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:44:16:0c:d9:6e:39:33:57:c0:5f:1a:d4:4a:75:1a:42:c5:
         94:23:7a:7b:f1:a6:32:3d:13:9f:be:d3:75:f6:26:15:3b:06:
         82:65:ae:1f:7f:5b:41:b6:b0:e7:ba:cc:59:00:2c:41:5e:63:
         63:5a:45:4f:40:41:5b:b3:69:20:8d:f8:7a:9b:94:4e:15:c8:
         ff:7f:57:cd:0e:08:04:41:9e:98:5e:d6:5f:4f:a8:b7:4b:54:
         d2:71:d7:90:46:40:07:31:8c:95:3a:4e:c7:cd:42:65:b2:f8:
         b6:14:44:b8:69:5b:c2:e4:0d:09:66:0a:0d:b3:18:f7:9a:64:
         8b:36:67:93:7d:89:4d:64:ba:ba:c9:bd:e5:ce:5d:3b:34:38:
         d9:1a:29:f6:9b:c9:ae:f9:b4:ea:e6:64:53:c8:45:2c:dd:87:
         71:d9:2b:d5:b4:58:89:99:1d:27:da:8b:a8:b7:47:66:97:5a:
         f5:da:3f:21:53:b1:90:2d:68:52:b3:04:9e:3f:21:9a:cf:c9:
         17:e9:eb:a8:f4:0a:b8:1c:52:3c:76:4f:6d:1e:70:d6:39:4d:
         6e:05:40:94:ab:e6:ff:0e:80:dc:78:bc:3d:7d:26:fc:b4:32:
         2f:70:20:a1:fa:a0:14:ca:33:52:7a:89:36:58:3e:df:20:e6:
         fd:ef:12:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:27:44 2025 by rpki-client