Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133362e302f32312d3231203d3e203533303138.roa
File:                     3137372e37322e3133362e302f32312d3231203d3e203533303138.roa (raw, json)
Hash identifier:          8MEmAVSxVe/Q9IIqIfMkvbWCxZfRfI33NT02VwbtNdc=
Subject key identifier:   5E:D3:34:E3:D4:BB:4E:67:16:BA:CC:E9:AE:ED:D1:11:C7:8A:B3:14
Certificate issuer:       /CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
Certificate serial:       2C28EEEE00148599B14D1C94D2B13020ED0E7E15
Authority key identifier: A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133362e302f32312d3231203d3e203533303138.roa
Signing time:             Thu 06 Mar 2025 14:33:19 +0000
ROA not before:           Thu 06 Mar 2025 14:28:19 +0000
ROA not after:            Thu 05 Mar 2026 14:33:19 +0000
asID:                     53018
IP address blocks:        177.72.136.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 22:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:28:ee:ee:00:14:85:99:b1:4d:1c:94:d2:b1:30:20:ed:0e:7e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
        Validity
            Not Before: Mar  6 14:28:19 2025 GMT
            Not After : Mar  5 14:33:19 2026 GMT
        Subject: CN=5ED334E3D4BB4E6716BACCE9AEEDD111C78AB314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d1:0e:15:d5:30:b1:ae:d4:83:1d:01:8a:86:
                    6f:66:3a:91:88:77:e3:e7:04:10:d7:d8:af:ca:dc:
                    5b:ec:c2:22:3c:78:ed:39:cd:19:80:e7:90:a9:0c:
                    6d:c6:a7:7a:70:f9:60:dc:09:ed:33:98:e3:32:eb:
                    21:6b:27:7f:38:54:c8:bc:49:49:6c:6b:da:4a:03:
                    a1:bc:88:52:34:dd:83:3b:7e:5f:5d:dc:eb:0f:85:
                    7b:9d:a7:cc:e3:56:2f:df:5c:cb:fd:49:38:38:d3:
                    02:71:88:31:50:51:6c:ed:59:6a:21:b9:a2:93:67:
                    cd:7f:a5:39:80:c1:7a:89:3c:d3:86:a1:30:f9:a4:
                    9a:05:0b:11:79:88:69:e0:8b:6b:5b:d3:d2:8e:3a:
                    ac:2f:11:86:3c:ed:1a:54:25:d0:16:40:2e:44:0d:
                    f5:ec:a8:64:0c:c1:f3:8d:ae:dd:8c:85:7c:24:eb:
                    c0:80:fe:68:62:4c:68:fb:68:44:88:2c:be:66:ec:
                    50:ea:9f:1f:e9:bc:b1:fb:86:97:a0:57:be:c7:fa:
                    01:fa:8b:54:b3:db:4c:b6:9e:63:39:87:5d:dc:df:
                    5c:dc:3d:6e:b0:ff:79:df:66:a9:05:2f:1f:df:10:
                    7b:69:d1:33:6d:1c:33:e1:6b:ec:54:58:96:41:39:
                    83:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D3:34:E3:D4:BB:4E:67:16:BA:CC:E9:AE:ED:D1:11:C7:8A:B3:14
            X509v3 Authority Key Identifier:
                keyid:A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133362e302f32312d3231203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         42:cd:ac:e1:f7:62:26:94:21:51:fd:e5:aa:54:85:65:2e:23:
         78:6f:9b:c6:9f:d2:f2:4a:22:fa:8c:12:ee:58:30:24:a9:4e:
         71:8c:c0:74:7a:bb:f8:d8:4b:54:48:bc:14:db:74:b9:78:04:
         a4:2c:52:f0:a0:64:00:c5:f3:36:a6:6d:d7:7a:33:ab:ea:cc:
         d0:85:71:32:6c:3e:49:c6:bc:b2:57:4f:79:42:57:4d:fc:3c:
         2c:a4:90:57:ea:56:32:a0:da:73:4a:87:4d:42:3e:8f:41:34:
         d4:9c:5f:f1:8c:48:a3:fe:6d:aa:2c:eb:f1:04:4c:4e:33:a8:
         1d:43:41:0c:08:73:a3:f9:24:30:a8:17:c7:43:d3:dc:87:7f:
         ae:e2:3e:09:44:de:01:65:51:bc:62:cb:b6:9b:17:ca:2a:92:
         d7:cd:6e:bf:be:d2:ca:3f:0b:70:93:40:fd:30:2e:3e:ae:de:
         82:a2:93:ce:a5:75:8e:95:e9:ac:b8:d5:ad:30:1f:41:21:18:
         05:8a:7f:67:09:a9:73:68:e5:41:24:4c:d3:44:7f:e8:86:5f:
         cc:29:fa:be:d5:b1:46:2a:ef:40:75:2c:27:66:91:25:57:5b:
         0c:6d:6b:8d:d2:e1:94:9e:8e:fe:3c:ae:a9:42:13:a8:19:ff:
         1b:68:51:61
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULCju7gAUhZmxTRyU0rEwIO0OfhUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU0NEREMkFBNTIwOThCRkI4N0JBNTc5MTRBQjk0MDBF
QUVFNEZDMDAeFw0yNTAzMDYxNDI4MTlaFw0yNjAzMDUxNDMzMTlaMDMxMTAvBgNV
BAMTKDVFRDMzNEUzRDRCQjRFNjcxNkJBQ0NFOUFFRUREMTExQzc4QUIzMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG0Q4V1TCxrtSDHQGKhm9mOpGI
d+PnBBDX2K/K3FvswiI8eO05zRmA55CpDG3Gp3pw+WDcCe0zmOMy6yFrJ384VMi8
SUlsa9pKA6G8iFI03YM7fl9d3OsPhXudp8zjVi/fXMv9STg40wJxiDFQUWztWWoh
uaKTZ81/pTmAwXqJPNOGoTD5pJoFCxF5iGngi2tb09KOOqwvEYY87RpUJdAWQC5E
DfXsqGQMwfONrt2MhXwk68CA/mhiTGj7aESILL5m7FDqnx/pvLH7hpegV77H+gH6
i1Sz20y2nmM5h13c31zcPW6w/3nfZqkFLx/fEHtp0TNtHDPha+xUWJZBOYMhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUXtM049S7TmcWuszpru3REceKsxQwHwYDVR0j
BBgwFoAUpUTdKqUgmL+4e6V5FKuUAOruT8AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0U3Tk1BUnBnM2NQYzN0VVprRk1yS3pSdEdiNVJIdHlCR3B6dEZWV011
SmYvMS9BNTQ0REQyQUE1MjA5OEJGQjg3QkE1NzkxNEFCOTQwMEVBRUU0RkMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NDRERDJBQTUyMDk4QkZC
ODdCQTU3OTE0QUI5NDAwRUFFRTRGQzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdFN05NQVJwZzNjUGMzdFVaa0ZNckt6UnRHYjVSSHR5QkdwenRGVldNdUpmLzEv
MzEzNzM3MmUzNzMyMmUzMTMzMzYyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNTMz
MzAzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsUiIMA0GCSqGSIb3DQEBCwUAA4IBAQBCzazh92Im
lCFR/eWqVIVlLiN4b5vGn9LySiL6jBLuWDAkqU5xjMB0erv42EtUSLwU23S5eASk
LFLwoGQAxfM2pm3XejOr6szQhXEybD5JxryyV095QldN/DwspJBX6lYyoNpzSodN
Qj6PQTTUnF/xjEij/m2qLOvxBExOM6gdQ0EMCHOj+SQwqBfHQ9Pch3+u4j4JRN4B
ZVG8Ysu2mxfKKpLXzW6/vtLKPwtwk0D9MC4+rt6CopPOpXWOlemsuNWtMB9BIRgF
in9nCalzaOVBJEzTRH/ohl/MKfq+1bFGKu9AdSwnZpElV1sMbWuN0uGUno7+PK6p
QhOoGf8baFFh
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:14 2025 by rpki-client on console.sobornost.net