Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e33302e302f32342d3332203d3e203533323235.roa
File:                     3137372e3133372e33302e302f32342d3332203d3e203533323235.roa (raw, json)
Hash identifier:          cRrbPfdZKeSNxtxB0x4XTKtRJ6oKO70XaQU635MV49U=
Subject key identifier:   12:3E:5A:A5:E4:E8:9B:C1:79:1E:19:08:29:F4:03:BC:26:C5:F3:BB
Certificate issuer:       /CN=72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1
Certificate serial:       3EF7634445FDEB829C7B563968102D3A9212F30D
Authority key identifier: 72:D2:15:65:C0:A5:08:FC:2B:DE:A7:76:8D:0F:4A:EF:D6:CD:19:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e33302e302f32342d3332203d3e203533323235.roa
Signing time:             Thu 08 May 2025 12:53:37 +0000
ROA not before:           Thu 08 May 2025 12:48:37 +0000
ROA not after:            Thu 07 May 2026 12:53:37 +0000
asID:                     53225
IP address blocks:        177.137.30.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 13:20:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f7:63:44:45:fd:eb:82:9c:7b:56:39:68:10:2d:3a:92:12:f3:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1
        Validity
            Not Before: May  8 12:48:37 2025 GMT
            Not After : May  7 12:53:37 2026 GMT
        Subject: CN=123E5AA5E4E89BC1791E190829F403BC26C5F3BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e9:7c:7f:82:25:2d:d8:b8:c4:91:d3:9d:87:
                    7b:c1:d2:da:d0:19:56:39:27:26:df:9c:bd:df:a1:
                    54:d5:97:77:13:9d:59:55:50:7d:d3:9c:c9:e1:f8:
                    ec:09:93:65:2f:12:2f:1a:93:7b:7d:9d:36:58:19:
                    2e:03:71:12:b2:e7:25:e9:55:8a:2d:5f:f3:f3:4b:
                    c0:fc:1c:2a:89:43:ae:48:57:76:cb:de:c6:2c:96:
                    3f:27:f0:66:74:02:70:22:21:e9:e9:bd:1d:70:d7:
                    68:b2:05:c9:da:ef:a2:8d:6a:15:d1:eb:c5:b4:d4:
                    c6:fe:ab:b5:58:50:27:fd:f1:e7:86:26:bf:16:d4:
                    d2:d4:24:20:41:56:88:c9:ae:b9:bd:de:8d:4d:2f:
                    56:4e:b7:b7:5e:1d:fc:7d:3c:eb:47:b0:13:06:ad:
                    80:bb:75:25:e3:a5:95:79:d5:13:09:06:32:51:a6:
                    79:18:5c:e0:a8:e3:aa:fd:e2:29:42:9b:6c:6f:1a:
                    15:81:ec:c4:0d:cb:f4:5f:44:29:1a:53:bd:e6:ac:
                    d4:7d:e7:84:c8:8f:23:6b:92:d5:04:41:bf:08:6a:
                    28:3e:4d:82:13:99:ee:95:5e:f3:42:70:0d:d7:cd:
                    45:6d:cb:56:95:3d:61:fb:9d:e0:10:c3:7e:db:57:
                    83:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3E:5A:A5:E4:E8:9B:C1:79:1E:19:08:29:F4:03:BC:26:C5:F3:BB
            X509v3 Authority Key Identifier:
                keyid:72:D2:15:65:C0:A5:08:FC:2B:DE:A7:76:8D:0F:4A:EF:D6:CD:19:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e33302e302f32342d3332203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:7b:2b:19:59:9f:6b:84:d7:97:e2:61:80:8b:4e:51:08:20:
         35:e8:93:6a:be:61:a9:b4:34:3c:77:a0:be:1b:12:b7:fa:8d:
         d8:92:f4:ed:8d:4e:bf:03:8f:27:d4:3a:cf:c1:9d:d3:c3:34:
         31:f3:d7:a1:9a:d1:3e:a9:b6:66:37:cc:b6:ba:05:54:ff:b9:
         9b:32:fd:ba:f8:3f:76:dc:d7:85:ba:cc:31:6f:38:57:6c:bf:
         de:e7:32:4b:d7:88:7f:2a:88:16:ea:83:78:dc:ac:bd:d3:d7:
         b4:af:2c:27:bb:5c:2d:fc:a5:bb:ce:c8:ca:3e:ff:83:88:24:
         a4:83:58:6c:ba:e9:63:17:da:cf:13:29:4d:88:f8:11:a8:95:
         b2:7f:39:a6:3f:2b:56:8c:86:34:79:14:f2:a1:dd:84:3b:56:
         8c:c9:7c:56:de:9f:af:95:fc:bf:15:17:a3:f0:bb:1f:eb:c9:
         22:de:cb:e2:00:1f:24:35:04:3e:f9:eb:52:b2:09:91:45:5a:
         6f:93:e3:b6:5e:26:52:93:d3:ce:fb:5d:9c:d6:75:73:d6:3a:
         2f:c6:6c:12:ab:75:a7:1f:0e:5d:1b:b6:11:f3:b2:65:4d:53:
         d8:8f:62:6b:fc:12:0d:38:c5:fd:74:88:73:5f:e8:8e:5d:5f:
         97:2e:de:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:22:06 2025 by rpki-client