Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32332d3233203d3e203532363331.roa
File:                     3137372e3132382e32342e302f32332d3233203d3e203532363331.roa (raw, json)
Hash identifier:          2VJTTYoBcl2WgbjbeOYumZO3d6qnhANjGaYdUL3nxvk=
Subject key identifier:   34:69:87:A9:ED:9D:4C:34:7B:2B:AB:BD:7B:37:AE:8F:EC:04:5E:C5
Certificate issuer:       /CN=4FDBAE28D54DD4272386040789F376018C19FE37
Certificate serial:       037ED60A329270DB87E10DD066246B6305496BBE
Authority key identifier: 4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32332d3233203d3e203532363331.roa
Signing time:             Mon 10 Feb 2025 12:56:37 +0000
ROA not before:           Mon 10 Feb 2025 12:51:37 +0000
ROA not after:            Mon 09 Feb 2026 12:56:37 +0000
asID:                     52631
IP address blocks:        177.128.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 13:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:7e:d6:0a:32:92:70:db:87:e1:0d:d0:66:24:6b:63:05:49:6b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FDBAE28D54DD4272386040789F376018C19FE37
        Validity
            Not Before: Feb 10 12:51:37 2025 GMT
            Not After : Feb  9 12:56:37 2026 GMT
        Subject: CN=346987A9ED9D4C347B2BABBD7B37AE8FEC045EC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ff:3a:2b:19:4b:ae:86:db:02:b8:8a:5b:f8:
                    1a:7f:f3:e1:96:e7:99:c5:4b:e0:65:aa:b5:8a:1c:
                    2e:a7:26:a9:88:db:11:51:fc:2b:c5:f0:b4:fa:b2:
                    08:6d:9f:68:b0:cc:61:13:fb:4c:ba:c0:c2:1b:3c:
                    39:f2:11:1a:b5:a7:99:13:bc:7c:d9:8b:6d:9c:83:
                    95:01:e3:ed:ab:81:43:2d:c0:47:32:93:c2:4b:12:
                    c9:41:82:b9:e1:5f:df:d0:b5:96:92:66:90:a9:6a:
                    cc:ad:12:62:90:24:35:2a:72:83:0c:12:88:71:4e:
                    08:7f:68:86:58:c7:ea:7a:b3:f0:3d:09:7d:3b:70:
                    7b:7f:fd:45:8b:ea:ee:e0:1d:34:d7:ef:3a:60:78:
                    79:4d:e1:db:d8:72:49:fa:66:b7:a2:00:83:0a:15:
                    e6:d1:0b:42:4f:ea:62:9b:55:72:70:87:b3:d5:a9:
                    c9:2c:1c:d0:ba:02:71:72:b0:bd:aa:7e:d1:be:0e:
                    46:2f:8e:5b:2c:20:74:ef:52:a4:13:4b:f6:5b:43:
                    cc:46:c4:66:b7:1e:f9:cd:58:08:75:8d:0f:44:81:
                    3d:41:6a:96:f0:86:a1:65:bb:b7:4e:be:64:6b:72:
                    ea:06:0b:67:6a:e4:ec:00:69:f2:4f:6e:1b:a4:7d:
                    c3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:69:87:A9:ED:9D:4C:34:7B:2B:AB:BD:7B:37:AE:8F:EC:04:5E:C5
            X509v3 Authority Key Identifier:
                keyid:4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32332d3233203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:bc:fd:fa:c7:53:04:db:12:0f:1d:3a:9f:c3:31:29:b1:35:
         cb:80:9c:88:a7:71:9e:89:72:c4:36:c7:91:94:bf:6e:8e:04:
         4c:51:15:53:00:a5:b7:01:c9:7a:02:86:f2:18:36:ce:95:85:
         9d:65:84:3b:7c:f2:d7:45:5e:31:bc:c8:3e:77:bb:8f:99:87:
         a0:b9:7b:77:a1:1f:c3:07:a7:97:f3:e5:73:85:87:c7:7a:13:
         7d:47:3d:95:b1:9d:03:46:37:1b:67:af:1b:d3:b3:ed:82:aa:
         a3:26:55:5a:ee:d8:e1:25:c1:3f:79:b9:e5:06:b9:fa:8c:f1:
         5d:13:8f:2f:8a:a6:05:7d:99:31:a0:97:21:62:19:a6:37:3c:
         72:1b:e0:d8:9d:31:50:13:17:e6:63:fe:52:a7:9a:67:ff:b5:
         fd:ca:d6:aa:f4:ef:82:d6:f3:a5:cd:16:56:a9:63:59:ac:d5:
         f2:0e:ab:9c:ce:00:c2:51:81:52:5f:00:b8:4f:d2:be:a5:46:
         45:68:88:a8:17:37:21:86:af:8d:10:d9:0c:16:ca:a5:44:39:
         1e:2b:74:cb:ba:28:2a:e3:54:ef:85:b4:4f:e5:c0:b7:6d:f9:
         ba:f9:6a:1f:4c:a4:03:4b:2f:7a:99:3c:43:13:ae:41:97:0d:
         71:9b:a7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:38:06 2025 by rpki-client