Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32322d3232203d3e203532363331.roa
File:                     3137372e3132382e32342e302f32322d3232203d3e203532363331.roa (raw, json)
Hash identifier:          sWzrWtZ8j2L01DPYlXjg6FISqmW17AR195DHJEJDnFY=
Subject key identifier:   5F:E7:A5:69:52:92:C7:DD:EB:A9:EE:13:E9:EB:64:7B:39:0A:A0:9B
Certificate issuer:       /CN=4FDBAE28D54DD4272386040789F376018C19FE37
Certificate serial:       7A11C2C6DD5FE8E7B18AE68CD0630D8008608359
Authority key identifier: 4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32322d3232203d3e203532363331.roa
Signing time:             Mon 10 Feb 2025 12:56:37 +0000
ROA not before:           Mon 10 Feb 2025 12:51:37 +0000
ROA not after:            Mon 09 Feb 2026 12:56:37 +0000
asID:                     52631
IP address blocks:        177.128.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 23:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:11:c2:c6:dd:5f:e8:e7:b1:8a:e6:8c:d0:63:0d:80:08:60:83:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FDBAE28D54DD4272386040789F376018C19FE37
        Validity
            Not Before: Feb 10 12:51:37 2025 GMT
            Not After : Feb  9 12:56:37 2026 GMT
        Subject: CN=5FE7A5695292C7DDEBA9EE13E9EB647B390AA09B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d2:85:7d:bb:bf:e8:26:66:a0:30:00:39:77:
                    e7:37:de:99:85:1a:09:ad:78:92:99:ee:25:1d:13:
                    95:85:bd:3f:0a:ba:2d:c2:14:04:a0:1e:9f:8d:4b:
                    90:01:d4:6f:54:3a:ef:27:90:b4:47:c5:05:e3:0c:
                    91:58:b4:e7:be:6d:38:33:5c:4d:fd:90:b0:5f:2b:
                    5c:98:13:de:fc:97:33:88:47:74:ee:4a:5b:c2:af:
                    57:e7:9d:07:54:1e:ea:61:eb:a2:7b:64:e9:1a:65:
                    7d:83:23:36:e5:d4:bc:a6:5d:24:91:87:0c:b2:08:
                    ac:28:a6:fb:b8:5e:dc:d8:fb:41:63:43:23:7e:63:
                    3b:cf:57:ac:f2:6b:48:84:02:9b:0f:b8:7f:96:21:
                    90:46:07:f8:20:e8:48:57:32:67:ca:4c:84:08:61:
                    18:a5:8c:1c:6c:c0:29:a6:4d:c2:a8:19:30:7f:e8:
                    7e:2a:0f:a6:64:4d:5e:10:08:c6:1e:ea:c4:30:26:
                    06:a9:15:63:a2:f8:4a:38:ab:9c:6e:e6:64:09:d0:
                    b0:59:12:f1:d9:db:82:4a:56:b2:c5:7b:28:4d:81:
                    0e:67:53:f9:8b:d1:e0:66:e5:a2:81:6b:85:d1:c7:
                    ba:c5:58:c4:ab:bb:b1:da:43:9a:52:73:85:ec:34:
                    44:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E7:A5:69:52:92:C7:DD:EB:A9:EE:13:E9:EB:64:7B:39:0A:A0:9B
            X509v3 Authority Key Identifier:
                keyid:4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32322d3232203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:9d:73:56:42:12:32:63:14:0b:ba:ee:ed:6b:80:b0:ca:f3:
         3c:e1:6e:e9:91:33:d6:9a:67:5c:7b:70:68:5c:c6:66:e5:af:
         12:90:05:67:94:83:0b:1f:80:36:be:54:f4:cd:fe:c7:fe:6e:
         fe:d3:9c:fc:c5:bd:d9:68:2a:59:20:46:e4:f6:af:d0:ab:34:
         b9:2d:1e:90:23:0f:ab:59:7f:6b:66:93:42:dc:87:5c:ab:a8:
         aa:0c:d6:71:de:68:f3:42:c3:07:a9:ba:f8:74:70:ec:03:7c:
         4a:e8:9b:07:24:2c:d1:63:5b:ce:5a:e6:1c:c9:e5:ff:d3:0d:
         b5:f1:e0:5c:ec:b9:fa:ee:37:e9:62:9f:d4:1e:39:b3:41:dd:
         41:b6:03:fe:c8:51:c4:ec:7e:5f:23:75:dd:16:1e:3e:db:9c:
         93:6f:3b:a8:1d:2b:55:b8:a4:4d:32:6c:b3:0b:f4:71:d3:73:
         d6:2f:22:a6:3c:33:88:d6:ef:7e:ed:e0:63:c3:50:94:6b:a1:
         54:56:33:b2:6f:e8:07:1b:7c:74:5c:29:11:5b:2f:f4:72:6e:
         d4:8f:17:7b:85:e2:9e:ee:74:01:2a:fd:fb:9b:20:b4:4f:bc:
         1c:f6:83:38:5f:a7:92:ad:87:5a:a7:8a:6f:21:27:03:e1:a4:
         5f:a6:00:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:26:14 2025 by rpki-client