Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32332d3233203d3e203532363331.roa
File:                     3137372e3132382e32342e302f32332d3233203d3e203532363331.roa (raw, json)
Hash identifier:          VM7J+N1RFcCNjHyxKJzYimHccd4UbKzA66t/EOX0AC4=
Subject key identifier:   87:38:39:DA:EC:95:54:41:FC:36:D5:95:F7:4E:62:E3:E5:18:1D:CC
Certificate issuer:       /CN=6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A
Certificate serial:       7CBFDC2FA2B24D22D97561F194FC23B4773DF9B0
Authority key identifier: 6A:41:E5:59:8C:15:DD:30:85:A3:2C:5C:38:EB:D8:C2:FA:47:F2:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32332d3233203d3e203532363331.roa
Signing time:             Thu 07 Nov 2024 17:45:08 +0000
ROA not before:           Thu 07 Nov 2024 17:40:08 +0000
ROA not after:            Thu 06 Nov 2025 17:45:08 +0000
asID:                     52631
IP address blocks:        177.128.24.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:bf:dc:2f:a2:b2:4d:22:d9:75:61:f1:94:fc:23:b4:77:3d:f9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A
        Validity
            Not Before: Nov  7 17:40:08 2024 GMT
            Not After : Nov  6 17:45:08 2025 GMT
        Subject: CN=873839DAEC955441FC36D595F74E62E3E5181DCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:77:de:15:e2:f9:f3:cb:2c:96:64:a7:69:27:
                    ed:e2:96:29:7e:ab:d3:76:d7:79:5f:6d:62:1b:6f:
                    29:1c:df:20:f8:b7:e3:31:ef:ca:c2:af:ae:e9:0a:
                    d1:76:56:c8:6f:d2:5f:9f:82:36:df:45:82:21:b0:
                    ac:44:c2:62:6d:88:2a:db:64:a3:ee:95:03:43:54:
                    ae:54:6d:d8:d1:3d:13:31:d2:55:85:bc:64:86:cb:
                    68:1e:39:dc:c0:d9:18:d5:93:ca:20:83:4f:83:2e:
                    07:b9:fa:44:68:5f:50:44:79:25:c4:66:17:8b:91:
                    06:4c:d1:46:47:97:88:e8:86:a7:ae:56:fa:c9:72:
                    02:40:09:f3:5b:8b:82:e6:c7:40:05:ba:d9:5a:b1:
                    af:96:8d:bc:98:83:2c:1c:12:43:c2:cc:91:2f:2d:
                    b4:e6:53:fe:f1:2d:6e:77:52:df:98:ec:2a:1f:e2:
                    54:05:d8:aa:d5:40:7b:1b:f0:d3:14:fa:f6:79:27:
                    2b:e4:54:4b:b7:0b:84:11:72:f5:0e:8e:d0:71:6e:
                    be:3b:c8:d3:72:d6:51:ce:75:39:f8:a6:ce:ca:f7:
                    df:53:d2:e6:46:c7:6d:18:e3:a4:74:95:4d:c5:3d:
                    b9:a1:2f:7a:88:e9:9f:0e:76:4a:cd:1b:aa:cc:1d:
                    ac:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:38:39:DA:EC:95:54:41:FC:36:D5:95:F7:4E:62:E3:E5:18:1D:CC
            X509v3 Authority Key Identifier:
                keyid:6A:41:E5:59:8C:15:DD:30:85:A3:2C:5C:38:EB:D8:C2:FA:47:F2:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32332d3233203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:39:c8:48:1a:f1:16:36:9f:1b:09:5b:36:08:b7:39:e5:38:
         f0:38:6b:18:a8:2a:52:f6:d3:f0:aa:4a:04:33:27:a4:89:48:
         a9:9d:66:bc:e4:ab:20:e2:5d:d4:0f:85:6e:7c:02:b3:65:56:
         d5:b7:14:2a:12:a7:50:37:24:34:0e:0c:b4:c6:3e:0c:ed:51:
         fd:63:d7:8d:dd:bf:35:43:3e:96:d9:89:55:06:f1:c6:1a:10:
         1a:2f:dc:a2:75:d5:6b:3e:ec:d0:a2:fc:6f:69:58:1d:61:0a:
         93:2a:37:32:dc:d2:3b:d6:45:5f:b3:3c:67:90:9a:db:9d:b2:
         df:da:9a:89:6c:45:bd:8c:79:14:a3:85:4a:4a:97:b9:68:0e:
         94:ad:4f:36:23:dc:82:01:a4:2a:93:9e:db:a2:48:18:d8:df:
         6c:cc:53:7f:a8:f0:49:e5:eb:75:93:c7:14:4c:bc:b6:38:88:
         f1:07:67:2e:68:4a:3f:46:9f:88:37:70:cc:7b:2e:89:6b:2d:
         03:3d:ee:4f:ae:bc:20:0d:63:a4:68:73:99:f1:bb:d1:77:08:
         fc:88:b9:46:07:2a:b0:1d:9c:fe:5b:fa:de:3f:d3:36:82:79:
         73:bf:30:54:64:76:74:e3:3c:62:00:87:cd:77:e2:5d:5f:46:
         fd:a3:86:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:43 2024 by rpki-client on console-ams.rpki-client.org