Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32342d3234203d3e203532363331.roa
File:                     3137372e3132382e32342e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier:          1oDZI/zVRc75JrVx8kdBrU5XC3HRAJJi4OCcg5IMUls=
Subject key identifier:   48:5D:DD:DC:32:EA:D0:EB:A8:BA:B5:5B:15:4D:A8:3B:35:14:47:5E
Certificate issuer:       /CN=6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A
Certificate serial:       3D9F2C0123557B71E2D751E4C11D47199BA45EA0
Authority key identifier: 6A:41:E5:59:8C:15:DD:30:85:A3:2C:5C:38:EB:D8:C2:FA:47:F2:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32342d3234203d3e203532363331.roa
Signing time:             Thu 07 Nov 2024 17:44:57 +0000
ROA not before:           Thu 07 Nov 2024 17:39:57 +0000
ROA not after:            Thu 06 Nov 2025 17:44:57 +0000
asID:                     52631
IP address blocks:        177.128.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:9f:2c:01:23:55:7b:71:e2:d7:51:e4:c1:1d:47:19:9b:a4:5e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A
        Validity
            Not Before: Nov  7 17:39:57 2024 GMT
            Not After : Nov  6 17:44:57 2025 GMT
        Subject: CN=485DDDDC32EAD0EBA8BAB55B154DA83B3514475E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1f:73:48:18:a3:e8:3b:27:f6:d4:7f:2c:e4:
                    94:e6:78:6a:af:3c:3a:e0:37:3a:90:1a:7b:3a:f4:
                    3f:83:7c:5b:93:22:84:0b:06:b6:ac:93:78:25:05:
                    0b:0e:df:63:d0:fa:c9:2a:6f:da:22:a3:45:ab:64:
                    86:e7:6c:68:e9:3f:7c:7d:8a:dc:1e:df:4b:c9:fd:
                    c0:c4:4e:2a:fd:96:c5:ac:a6:22:1f:a9:c8:b7:d8:
                    9e:ae:91:3c:61:fc:99:58:75:68:77:37:3d:17:9c:
                    cf:1c:ae:a2:9e:02:90:51:66:09:21:a7:a9:f2:e4:
                    7a:e8:ae:5d:ab:8a:0a:38:f2:8d:77:22:5d:ca:2c:
                    ce:86:39:f6:89:68:8a:18:da:a6:dd:9d:95:3a:a6:
                    12:9c:8c:cd:5c:b3:ce:0b:6c:e7:d3:02:15:27:83:
                    de:e3:15:1b:95:67:59:d0:08:ee:4c:94:af:1c:82:
                    05:3f:2a:d2:6f:a3:c8:bd:f0:65:ae:70:25:4b:b1:
                    ec:20:78:7d:9d:71:3b:b3:ab:1b:ce:59:03:f1:2d:
                    a3:f9:0e:50:4a:a2:34:da:cb:de:0b:21:0e:8d:ed:
                    22:02:52:8b:41:76:0a:72:cd:5f:16:41:5b:cc:16:
                    fb:12:5c:c3:b6:76:b7:a6:4e:4e:19:60:db:b6:fb:
                    f3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5D:DD:DC:32:EA:D0:EB:A8:BA:B5:5B:15:4D:A8:3B:35:14:47:5E
            X509v3 Authority Key Identifier:
                keyid:6A:41:E5:59:8C:15:DD:30:85:A3:2C:5C:38:EB:D8:C2:FA:47:F2:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32342d3234203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:69:06:06:59:af:2c:23:a3:5c:26:5a:84:67:eb:e6:7a:4b:
         d7:32:96:e2:2d:0b:be:4b:b8:00:01:f2:a7:e9:d9:d4:bb:20:
         af:5c:c5:d0:2d:a0:f6:b8:10:14:92:16:a4:53:8c:69:2d:4d:
         02:a9:2b:08:0b:56:9e:eb:73:9d:8c:d2:5a:9b:ea:8a:73:ba:
         07:d4:0a:c9:a6:87:35:d5:23:7b:bc:87:ed:ed:24:fe:86:55:
         f8:34:1e:25:65:e9:e3:08:bc:ee:a0:69:c2:a2:17:21:d4:db:
         83:96:df:83:51:13:68:89:42:5e:e6:10:21:09:f8:4d:0a:ad:
         52:e0:1f:b1:8a:60:f5:7a:3b:0c:82:80:11:66:e9:8c:e6:e9:
         b1:12:45:5f:54:4c:a1:7f:ac:fe:60:8d:ae:1e:6f:bb:5d:9c:
         9b:4b:a8:5e:ac:93:54:2d:82:72:df:58:8e:2d:d3:6a:78:6f:
         72:6c:77:6f:31:aa:66:e8:7c:e5:39:ca:79:1d:81:a2:15:54:
         7c:fe:4b:43:23:aa:f4:29:6a:df:ff:72:dc:39:27:5e:ed:a8:
         06:be:cf:5b:56:4f:7f:0f:b9:35:7c:e5:b4:bf:ca:95:10:ba:
         f9:84:e3:18:a4:6e:41:ea:8f:81:7e:a4:f3:e3:46:db:76:d4:
         2b:e2:f3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:15 2024 by rpki-client on console-fra.rpki-client.org