Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32312d3231203d3e203532363331.roa
File:                     3137372e3132382e32342e302f32312d3231203d3e203532363331.roa (raw, json)
Hash identifier:          m1asOxOucX+ot+YGUmuFFtZVShsU2Pxzpq01fi5DwYY=
Subject key identifier:   56:CC:2F:94:30:A4:35:F4:BC:5C:AF:E1:C1:E4:39:90:7C:56:1E:FC
Certificate issuer:       /CN=6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A
Certificate serial:       6A408FCD529BB6FCEB26829AFDDF36C4BFCD89BB
Authority key identifier: 6A:41:E5:59:8C:15:DD:30:85:A3:2C:5C:38:EB:D8:C2:FA:47:F2:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32312d3231203d3e203532363331.roa
Signing time:             Thu 07 Nov 2024 17:45:04 +0000
ROA not before:           Thu 07 Nov 2024 17:40:04 +0000
ROA not after:            Thu 06 Nov 2025 17:45:04 +0000
asID:                     52631
IP address blocks:        177.128.24.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:40:8f:cd:52:9b:b6:fc:eb:26:82:9a:fd:df:36:c4:bf:cd:89:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A
        Validity
            Not Before: Nov  7 17:40:04 2024 GMT
            Not After : Nov  6 17:45:04 2025 GMT
        Subject: CN=56CC2F9430A435F4BC5CAFE1C1E439907C561EFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:86:42:2b:e0:c9:b0:e4:04:f8:4f:5c:8b:b5:
                    22:22:95:e2:cb:d9:ea:fc:de:07:ed:a8:17:03:29:
                    69:de:81:d9:59:34:15:72:d5:c4:8f:5e:40:f2:d5:
                    ce:af:43:0d:3f:e1:3f:53:d1:81:59:01:45:6c:41:
                    74:b1:ab:41:4a:a0:0e:cf:1c:88:d6:3d:3e:b8:93:
                    9c:48:e0:af:e5:d7:77:c7:b9:e8:aa:12:c4:1c:65:
                    40:0b:2f:21:07:67:6d:45:b2:50:27:75:93:53:4e:
                    bf:ad:11:f9:3d:93:70:3f:aa:8c:52:a4:a1:12:bc:
                    44:37:5a:63:78:22:3f:e4:24:72:85:2d:ba:11:36:
                    0d:8f:f7:28:94:84:e7:ed:89:b2:4a:d4:8a:86:40:
                    0a:0d:8d:c8:e2:12:be:cc:51:05:39:d6:ab:1e:0d:
                    12:3e:3e:c7:11:c8:3b:14:5b:b2:7e:aa:cc:fb:a6:
                    b1:6b:cf:dc:dd:a7:56:e3:38:cf:55:25:02:8b:5a:
                    df:a1:f8:3c:d0:b9:e5:88:f2:f8:49:95:2b:5a:8c:
                    e4:61:e4:45:b9:ad:0f:c9:71:1c:3a:27:ed:99:b9:
                    bf:d9:44:a0:9d:5a:c8:09:01:24:cd:5f:1e:b2:97:
                    ad:9e:b9:af:91:6f:1d:d7:0b:5f:42:b8:cc:b9:4a:
                    7f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CC:2F:94:30:A4:35:F4:BC:5C:AF:E1:C1:E4:39:90:7C:56:1E:FC
            X509v3 Authority Key Identifier:
                keyid:6A:41:E5:59:8C:15:DD:30:85:A3:2C:5C:38:EB:D8:C2:FA:47:F2:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32312d3231203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5e:81:77:6d:83:d4:7c:cb:1b:6b:cb:2e:b8:dc:64:23:e3:c8:
         7d:ba:58:94:6e:05:8b:49:16:fa:ec:5e:5e:a1:86:d7:c2:41:
         e2:ac:89:ca:c2:64:bc:7d:25:ff:0b:53:08:03:2a:6d:d1:50:
         56:35:90:50:33:12:aa:99:62:f1:63:af:a5:0d:7e:8c:02:ce:
         8f:e1:bb:af:d9:a6:9d:d7:67:e3:32:64:47:e7:64:65:15:3b:
         64:b9:1f:b4:0c:84:66:be:96:b7:6b:02:a0:0b:68:14:64:ce:
         2e:04:13:10:3e:9f:63:41:e0:3a:db:ab:6d:36:fb:fb:26:01:
         e8:75:11:ac:6e:50:84:30:cb:d3:61:09:05:d8:02:62:8a:ff:
         62:df:1c:85:a9:03:b2:40:2e:fd:5e:4f:08:e2:26:86:a1:9f:
         0b:c5:c8:cf:6b:2b:30:0b:40:aa:aa:a2:63:42:f1:33:dc:6a:
         08:d2:67:91:26:44:21:fe:42:fc:06:c5:e6:e9:53:a1:9b:3e:
         73:34:82:0c:35:50:44:e1:5f:92:3c:5a:7b:09:d0:de:63:74:
         cb:b1:ab:ca:da:c4:9e:c6:60:e3:52:19:08:cd:dd:6a:6b:61:
         56:a1:1f:55:32:dc:3e:b8:19:5a:d4:76:d6:33:ed:5f:80:9a:
         8e:5b:4a:97
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUakCPzVKbtvzrJoKa/d82xL/NibswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE0MUU1NTk4QzE1REQzMDg1QTMyQzVDMzhFQkQ4QzJG
QTQ3RjIxQTAeFw0yNDExMDcxNzQwMDRaFw0yNTExMDYxNzQ1MDRaMDMxMTAvBgNV
BAMTKDU2Q0MyRjk0MzBBNDM1RjRCQzVDQUZFMUMxRTQzOTkwN0M1NjFFRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZhkIr4Mmw5AT4T1yLtSIileLL
2er83gftqBcDKWnegdlZNBVy1cSPXkDy1c6vQw0/4T9T0YFZAUVsQXSxq0FKoA7P
HIjWPT64k5xI4K/l13fHueiqEsQcZUALLyEHZ21FslAndZNTTr+tEfk9k3A/qoxS
pKESvEQ3WmN4Ij/kJHKFLboRNg2P9yiUhOftibJK1IqGQAoNjcjiEr7MUQU51qse
DRI+PscRyDsUW7J+qsz7prFrz9zdp1bjOM9VJQKLWt+h+DzQueWI8vhJlStajORh
5EW5rQ/JcRw6J+2Zub/ZRKCdWsgJASTNXx6yl62eua+Rbx3XC19CuMy5Sn+TAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUVswvlDCkNfS8XK/hweQ5kHxWHvwwHwYDVR0j
BBgwFoAUakHlWYwV3TCFoyxcOOvYwvpH8howDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEdueEgzaDhvWWg2cWlmMlRrcXh5NXpCOWFYMVBtQXlFUjJ4RTR1ZXht
dVcvMC82QTQxRTU1OThDMTVERDMwODVBMzJDNUMzOEVCRDhDMkZBNDdGMjFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZBNDFFNTU5OEMxNUREMzA4
NUEzMkM1QzM4RUJEOEMyRkE0N0YyMUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hHbnhIM2g4b1loNnFpZjJUa3F4eTV6QjlhWDFQbUF5RVIyeEU0dWV4bXVXLzAv
MzEzNzM3MmUzMTMyMzgyZTMyMzQyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNTMy
MzYzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsYAYMA0GCSqGSIb3DQEBCwUAA4IBAQBegXdtg9R8
yxtryy643GQj48h9uliUbgWLSRb67F5eoYbXwkHirInKwmS8fSX/C1MIAypt0VBW
NZBQMxKqmWLxY6+lDX6MAs6P4buv2aad12fjMmRH52RlFTtkuR+0DIRmvpa3awKg
C2gUZM4uBBMQPp9jQeA626ttNvv7JgHodRGsblCEMMvTYQkF2AJiiv9i3xyFqQOy
QC79Xk8I4iaGoZ8LxcjPayswC0CqqqJjQvEz3GoI0meRJkQh/kL8BsXm6VOhmz5z
NIIMNVBE4V+SPFp7CdDeY3TLsavK2sSexmDjUhkIzd1qa2FWoR9VMtw+uBla1HbW
M+1fgJqOW0qX
-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:15 2024 by rpki-client on console-fra.rpki-client.org