Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32352e302f32342d3234203d3e203532363331.roa
File:                     3137372e3132382e32352e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier:          Ip1U9qDEzwRYD9JdsFMNbQx8EHi2eBrKhe4aB0znRSo=
Subject key identifier:   8D:13:D4:F1:31:83:56:BC:17:16:BB:D7:CC:91:6B:02:A0:64:9C:CA
Certificate issuer:       /CN=4FDBAE28D54DD4272386040789F376018C19FE37
Certificate serial:       253DC47DD580FC59836EC291BB010B7C43BDF418
Authority key identifier: 4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32352e302f32342d3234203d3e203532363331.roa
Signing time:             Mon 10 Feb 2025 12:56:34 +0000
ROA not before:           Mon 10 Feb 2025 12:51:34 +0000
ROA not after:            Mon 09 Feb 2026 12:56:34 +0000
asID:                     52631
IP address blocks:        177.128.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 13:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:3d:c4:7d:d5:80:fc:59:83:6e:c2:91:bb:01:0b:7c:43:bd:f4:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FDBAE28D54DD4272386040789F376018C19FE37
        Validity
            Not Before: Feb 10 12:51:34 2025 GMT
            Not After : Feb  9 12:56:34 2026 GMT
        Subject: CN=8D13D4F1318356BC1716BBD7CC916B02A0649CCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:43:ab:f0:fe:6e:92:82:00:05:22:9f:96:4b:
                    be:3b:2a:80:b6:54:8c:e6:4e:f2:ee:a2:d6:e6:f1:
                    22:4f:d8:3c:35:e8:03:38:5f:ed:d9:11:4e:03:7e:
                    91:d7:a5:46:63:40:00:fd:ab:b3:9f:28:74:ec:00:
                    5c:b9:f2:f6:57:97:f6:c2:f5:80:7a:41:b8:89:2f:
                    07:32:f5:85:76:bd:73:d4:26:ca:c3:30:05:ca:e3:
                    f1:88:f2:d0:26:cb:08:2c:3f:2c:0a:79:f6:23:ca:
                    78:c8:6d:34:5b:e3:d1:51:fa:c8:3b:b5:95:08:5e:
                    12:77:7c:c7:f4:18:91:c5:3c:3b:42:20:bb:83:cc:
                    97:42:51:55:8a:c2:42:0e:b1:87:51:a2:c8:6d:cf:
                    ee:3e:60:e3:6c:1f:32:b4:7c:f1:a2:dc:69:46:21:
                    13:05:fe:80:d4:62:bc:5f:6d:14:0a:bc:d7:7d:76:
                    96:cd:6a:17:d9:49:ce:c0:8d:87:16:bb:a1:1f:08:
                    b4:1b:41:a1:fa:2e:70:87:e6:63:84:99:5d:4d:dd:
                    d1:2c:16:00:a4:90:65:44:cb:58:6f:76:2b:62:0f:
                    cf:c9:5d:cf:21:3b:5e:49:68:5b:91:69:20:1d:41:
                    91:2e:ee:8e:36:03:01:b9:75:7a:3a:26:cb:25:ca:
                    04:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:13:D4:F1:31:83:56:BC:17:16:BB:D7:CC:91:6B:02:A0:64:9C:CA
            X509v3 Authority Key Identifier:
                keyid:4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32352e302f32342d3234203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:0f:63:f4:7d:e2:b9:23:d9:57:08:3d:8f:10:6e:d5:fe:76:
         57:fa:3c:8b:02:19:d1:21:fd:95:16:7f:a2:07:7f:98:d8:d2:
         ca:28:3c:6e:1b:b7:b3:b6:d3:48:e1:9b:7d:74:63:10:b7:b1:
         08:7e:d2:0e:27:cd:c6:26:09:ba:16:3f:af:d2:a7:28:f2:fa:
         38:90:34:12:86:b8:5a:67:c0:8b:39:61:1a:53:af:ed:ff:68:
         97:d4:28:34:f8:5d:d5:32:b7:13:be:9f:c1:8b:f6:68:58:9c:
         be:6e:cd:3f:8f:e2:7b:8a:3d:ca:17:5a:b2:1e:62:2e:6c:52:
         58:b5:cf:e1:e2:33:53:3d:6f:c5:8e:3b:9a:3a:9f:bf:e2:af:
         50:88:8e:fd:9c:90:fc:8c:43:bf:43:fd:dc:03:5b:7a:af:7e:
         59:b3:08:0d:11:27:68:cc:a9:4f:ce:49:48:83:5b:ef:fa:45:
         68:cb:4a:fc:7b:a7:15:46:db:5c:f5:85:9f:4a:eb:3f:c8:92:
         93:1a:09:6c:ad:60:19:04:23:a2:b6:8c:e5:85:76:5c:15:71:
         4e:b5:3b:77:7c:e5:0a:a7:4a:5b:19:2a:4c:ef:8c:bb:57:23:
         9a:a0:3d:62:3d:f5:36:3a:be:48:4c:73:52:1c:1f:05:b9:bf:
         32:d4:62:89
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJT3EfdWA/FmDbsKRuwELfEO99BgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEZEQkFFMjhENTRERDQyNzIzODYwNDA3ODlGMzc2MDE4
QzE5RkUzNzAeFw0yNTAyMTAxMjUxMzRaFw0yNjAyMDkxMjU2MzRaMDMxMTAvBgNV
BAMTKDhEMTNENEYxMzE4MzU2QkMxNzE2QkJEN0NDOTE2QjAyQTA2NDlDQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQQ6vw/m6SggAFIp+WS747KoC2
VIzmTvLuotbm8SJP2Dw16AM4X+3ZEU4DfpHXpUZjQAD9q7OfKHTsAFy58vZXl/bC
9YB6QbiJLwcy9YV2vXPUJsrDMAXK4/GI8tAmywgsPywKefYjynjIbTRb49FR+sg7
tZUIXhJ3fMf0GJHFPDtCILuDzJdCUVWKwkIOsYdRoshtz+4+YONsHzK0fPGi3GlG
IRMF/oDUYrxfbRQKvNd9dpbNahfZSc7AjYcWu6EfCLQbQaH6LnCH5mOEmV1N3dEs
FgCkkGVEy1hvditiD8/JXc8hO15JaFuRaSAdQZEu7o42AwG5dXo6JsslygTrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUjRPU8TGDVrwXFrvXzJFrAqBknMowHwYDVR0j
BBgwFoAUT9uuKNVN1CcjhgQHifN2AYwZ/jcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEdueEgzaDhvWWg2cWlmMlRrcXh5NXpCOWFYMVBtQXlFUjJ4RTR1ZXht
dVcvMC80RkRCQUUyOEQ1NERENDI3MjM4NjA0MDc4OUYzNzYwMThDMTlGRTM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGREJBRTI4RDU0REQ0Mjcy
Mzg2MDQwNzg5RjM3NjAxOEMxOUZFMzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hHbnhIM2g4b1loNnFpZjJUa3F4eTV6QjlhWDFQbUF5RVIyeEU0dWV4bXVXLzAv
MzEzNzM3MmUzMTMyMzgyZTMyMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzYzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsYAZMA0GCSqGSIb3DQEBCwUAA4IBAQBZD2P0feK5
I9lXCD2PEG7V/nZX+jyLAhnRIf2VFn+iB3+Y2NLKKDxuG7ezttNI4Zt9dGMQt7EI
ftIOJ83GJgm6Fj+v0qco8vo4kDQShrhaZ8CLOWEaU6/t/2iX1Cg0+F3VMrcTvp/B
i/ZoWJy+bs0/j+J7ij3KF1qyHmIubFJYtc/h4jNTPW/FjjuaOp+/4q9QiI79nJD8
jEO/Q/3cA1t6r35ZswgNESdozKlPzklIg1vv+kVoy0r8e6cVRttc9YWfSus/yJKT
GglsrWAZBCOitozlhXZcFXFOtTt3fOUKp0pbGSpM74y7VyOaoD1iPfU2Or5ITHNS
HB8Fub8y1GKJ
-----END CERTIFICATE-----
Generated at Tue Apr 8 22:48:41 2025 by rpki-client