Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e32342e302f32342d3332203d3e203533323235.roa
File:                     3137372e3133372e32342e302f32342d3332203d3e203533323235.roa (raw, json)
Hash identifier:          QeesE5YZtbHPXOyGngQZd8iRQaFZnhHjls6JyhnXodg=
Subject key identifier:   A4:7E:F8:0E:F1:2B:EC:01:EE:01:4F:C6:3B:7D:F6:2E:AD:C2:AE:67
Certificate issuer:       /CN=72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1
Certificate serial:       4987257AFBCD372F3098C0818F705B0550B529E0
Authority key identifier: 72:D2:15:65:C0:A5:08:FC:2B:DE:A7:76:8D:0F:4A:EF:D6:CD:19:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e32342e302f32342d3332203d3e203533323235.roa
Signing time:             Thu 08 May 2025 11:43:56 +0000
ROA not before:           Thu 08 May 2025 11:38:56 +0000
ROA not after:            Thu 07 May 2026 11:43:56 +0000
asID:                     53225
IP address blocks:        177.137.24.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 13:20:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:87:25:7a:fb:cd:37:2f:30:98:c0:81:8f:70:5b:05:50:b5:29:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1
        Validity
            Not Before: May  8 11:38:56 2025 GMT
            Not After : May  7 11:43:56 2026 GMT
        Subject: CN=A47EF80EF12BEC01EE014FC63B7DF62EADC2AE67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cc:56:85:ac:2b:64:08:a6:69:dc:36:66:22:
                    e9:b5:02:00:14:d6:3f:3d:dd:e1:fc:d6:4a:f3:f4:
                    25:e9:06:9f:cb:b4:64:20:f9:14:80:51:b1:b9:36:
                    fe:a1:a5:aa:42:73:6e:0b:0f:50:cd:ea:23:77:34:
                    35:c8:1d:53:78:e8:fe:48:89:84:f3:15:d6:19:85:
                    85:35:d1:39:e8:8f:dd:f0:55:87:de:8e:83:99:94:
                    45:61:ca:47:61:da:fc:72:f6:8c:33:ac:c6:b8:36:
                    cf:74:11:f5:c6:a6:65:d4:47:3f:c5:11:e2:60:bf:
                    0d:93:eb:59:7e:da:d1:0d:09:87:82:0b:df:f6:53:
                    d6:0c:b1:2d:6b:82:f9:73:0f:20:65:09:4b:03:63:
                    2b:ba:bf:50:d6:ef:b0:7e:69:cf:cc:c9:5b:da:e3:
                    02:f1:f0:93:67:5e:dc:da:fa:f6:59:cd:a3:d3:8d:
                    15:55:9d:e5:79:8e:a4:3d:ca:80:82:77:71:ea:a8:
                    a5:fb:cf:0f:ed:5d:1d:0f:3f:4f:17:4c:dc:26:8d:
                    4c:20:24:80:d5:fe:25:01:39:ab:ef:14:c0:47:53:
                    8b:89:6a:18:0b:a6:6d:8c:61:9e:37:c0:08:6c:1b:
                    ac:48:90:69:59:64:ec:b5:85:ca:42:38:e1:cc:1a:
                    58:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7E:F8:0E:F1:2B:EC:01:EE:01:4F:C6:3B:7D:F6:2E:AD:C2:AE:67
            X509v3 Authority Key Identifier:
                keyid:72:D2:15:65:C0:A5:08:FC:2B:DE:A7:76:8D:0F:4A:EF:D6:CD:19:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e32342e302f32342d3332203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:06:48:2e:1c:f6:0d:88:d1:53:9c:5d:bd:eb:b8:bc:a3:1a:
         33:af:33:ea:d0:ae:51:86:dc:35:37:97:15:a7:a0:ee:2a:72:
         ba:d4:74:73:0a:c5:af:9f:f0:cb:3d:d4:bd:f6:87:7d:6b:58:
         4d:67:24:37:0b:19:0c:4b:31:c5:8d:3f:9d:6b:9c:3c:70:da:
         24:6d:86:76:31:7b:5b:67:77:e5:fa:4d:71:11:84:94:3e:81:
         89:47:60:6f:30:d5:f2:54:b2:99:26:2a:db:1d:60:d2:62:10:
         57:9a:fd:81:b5:01:87:95:b9:4c:14:ed:8b:8e:52:77:8b:e1:
         3d:57:f0:0b:b6:d4:17:b6:ce:aa:ab:89:8f:bd:73:7e:96:28:
         0b:58:88:d9:9c:45:d3:53:f4:08:4b:5c:4a:25:25:9f:11:ea:
         90:4d:b9:62:be:6e:38:f5:e4:76:0d:d1:00:91:71:39:9a:4c:
         c0:5a:70:5d:14:5c:a6:02:8e:00:2f:4a:28:54:f0:26:c6:95:
         42:66:0d:b8:85:42:48:42:8c:3d:23:c5:b2:5a:36:8f:c1:30:
         c4:73:ac:f8:8d:ac:f2:20:ce:b2:f9:01:ec:a5:1f:3c:8a:6a:
         bc:cf:85:ee:4e:bf:0a:00:c3:f0:e6:94:e0:8b:a8:41:b5:27:
         9f:58:b0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:20:46 2025 by rpki-client