Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e31372e302f32342d3332203d3e203533323235.roa
File:                     3137372e3133372e31372e302f32342d3332203d3e203533323235.roa (raw, json)
Hash identifier:          EAqj8arJB/ceLyh8zrxtu2qdA4Aaos2J80LB8qRcNGQ=
Subject key identifier:   0E:BF:BE:F4:0E:42:03:2E:BD:F8:21:46:75:CD:FE:7D:D1:CC:C1:4E
Certificate issuer:       /CN=72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1
Certificate serial:       27C9B7964B052940FC5AC26FF300626048E4A89D
Authority key identifier: 72:D2:15:65:C0:A5:08:FC:2B:DE:A7:76:8D:0F:4A:EF:D6:CD:19:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e31372e302f32342d3332203d3e203533323235.roa
Signing time:             Tue 06 May 2025 11:32:10 +0000
ROA not before:           Tue 06 May 2025 11:27:10 +0000
ROA not after:            Tue 05 May 2026 11:32:10 +0000
asID:                     53225
IP address blocks:        177.137.17.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 02:52:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c9:b7:96:4b:05:29:40:fc:5a:c2:6f:f3:00:62:60:48:e4:a8:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1
        Validity
            Not Before: May  6 11:27:10 2025 GMT
            Not After : May  5 11:32:10 2026 GMT
        Subject: CN=0EBFBEF40E42032EBDF8214675CDFE7DD1CCC14E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:23:26:40:53:fe:cd:af:dc:ad:de:3f:cd:90:
                    fb:fa:6c:45:e4:2a:56:32:cb:df:f0:29:20:e3:79:
                    57:ca:13:9b:24:9d:f4:b0:c4:2b:66:4e:a6:11:e3:
                    26:f5:7f:a2:e3:f1:d6:a7:d1:62:63:15:61:58:25:
                    61:b1:f2:1f:ad:91:6a:f7:e0:68:45:b0:57:23:0b:
                    80:fc:81:fc:d9:0c:3b:08:ff:6f:e0:17:d6:7b:4c:
                    6e:cf:95:31:35:6e:22:d8:c1:f4:3c:0d:fa:cd:ec:
                    36:7a:11:97:f3:e9:0d:56:7d:eb:f4:a3:3d:f4:20:
                    c1:c4:c6:d2:fa:51:d6:ac:26:bf:cd:c0:3f:0e:8a:
                    9e:81:56:94:d2:7e:2c:57:55:7e:3c:b2:7f:96:c4:
                    b7:e5:9d:cf:18:9e:37:dc:b6:24:05:0c:c2:c4:28:
                    b2:d0:3d:a0:e8:02:aa:2a:29:53:cc:d1:65:f9:25:
                    c3:cd:cf:12:8e:db:30:d1:08:b6:2c:3c:10:a5:f1:
                    4e:44:4e:cd:9d:27:fa:1c:3c:20:eb:26:c8:56:cd:
                    93:9d:ef:e5:5e:39:57:6e:87:5d:27:c0:39:b1:2f:
                    93:94:52:4c:c0:77:38:26:0e:34:df:27:9e:02:aa:
                    7d:8c:78:1f:da:1a:0d:0a:b4:09:4c:9c:ee:d6:d7:
                    d0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BF:BE:F4:0E:42:03:2E:BD:F8:21:46:75:CD:FE:7D:D1:CC:C1:4E
            X509v3 Authority Key Identifier:
                keyid:72:D2:15:65:C0:A5:08:FC:2B:DE:A7:76:8D:0F:4A:EF:D6:CD:19:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e31372e302f32342d3332203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:62:e1:86:47:7f:e6:7a:5e:91:cd:85:68:d3:b6:8c:05:c9:
         ad:9f:45:f5:ae:b2:d7:c5:dc:3e:62:39:3c:18:7f:31:98:e2:
         1d:73:35:c6:ab:f8:a6:7c:78:69:18:d8:29:09:aa:b0:69:91:
         4c:bc:e4:aa:57:f0:53:b3:25:23:0f:bd:43:57:fa:b2:ca:f0:
         9e:f5:ee:cc:19:7e:30:a6:8d:c2:a6:a2:d6:13:10:9d:b5:98:
         bd:e0:51:03:f6:76:aa:16:e2:45:ab:e0:db:a4:8c:a5:36:44:
         17:23:fb:ff:0c:5a:49:9d:0e:88:d3:c1:8d:74:b0:71:33:3c:
         31:f5:3a:ab:8a:39:ab:91:3a:34:d6:36:7b:b7:14:51:01:5f:
         63:87:9e:86:06:1c:6c:93:7c:88:2c:a1:7d:8c:40:67:f8:25:
         e5:cd:cd:df:37:f4:7b:4b:ed:b3:e0:ec:f1:54:c6:09:15:63:
         21:9a:b5:d0:f3:05:56:c6:fc:97:5b:47:ab:ef:0e:76:09:35:
         78:24:c3:b2:db:e3:80:90:95:51:d6:e6:2f:bf:fb:06:b4:e7:
         64:4d:5b:79:d7:fb:74:1a:c1:bd:e7:71:4c:46:65:61:f5:6a:
         a7:66:9b:b1:5b:af:ee:61:ec:cc:b9:7f:38:e6:fe:a7:82:c0:
         ae:44:6c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:43:19 2025 by rpki-client