Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32362e302f32332d3233203d3e203532363331.roa
File:                     3137372e3132382e32362e302f32332d3233203d3e203532363331.roa (raw, json)
Hash identifier:          yoIWI9BAmlJEO4iMK8aPTMV/vdSxtGihi3mi1ksEaL0=
Subject key identifier:   FF:2C:03:7C:63:E6:E3:88:1D:A7:2B:05:00:1D:B0:69:B2:D4:8C:E8
Certificate issuer:       /CN=6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A
Certificate serial:       3FAEA7F1E4DF9D37316934034C9D764925B4FC7B
Authority key identifier: 6A:41:E5:59:8C:15:DD:30:85:A3:2C:5C:38:EB:D8:C2:FA:47:F2:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32362e302f32332d3233203d3e203532363331.roa
Signing time:             Thu 07 Nov 2024 17:45:05 +0000
ROA not before:           Thu 07 Nov 2024 17:40:05 +0000
ROA not after:            Thu 06 Nov 2025 17:45:05 +0000
asID:                     52631
IP address blocks:        177.128.26.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ae:a7:f1:e4:df:9d:37:31:69:34:03:4c:9d:76:49:25:b4:fc:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A
        Validity
            Not Before: Nov  7 17:40:05 2024 GMT
            Not After : Nov  6 17:45:05 2025 GMT
        Subject: CN=FF2C037C63E6E3881DA72B05001DB069B2D48CE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:43:61:0f:10:3f:83:00:db:ff:5b:24:c3:21:
                    f9:07:91:66:3a:da:cf:31:97:5e:4b:bc:9b:77:62:
                    09:5c:ed:53:74:0c:e6:8f:71:a8:4f:b8:b4:53:c5:
                    4b:92:65:ed:b5:35:47:32:3d:d1:ea:24:f7:9a:4f:
                    19:93:b0:65:58:84:34:b1:ff:74:90:b9:7e:b1:9b:
                    27:93:ce:b7:44:1e:2f:96:4e:f1:2e:62:c1:a4:26:
                    20:22:57:c7:03:c3:38:d8:0c:be:41:ab:c3:c8:6f:
                    78:30:69:a6:96:56:07:47:fd:d6:9e:22:f2:79:97:
                    5b:b4:8f:a9:30:26:fb:3e:43:08:ad:ba:e9:fa:11:
                    89:34:97:15:a0:f0:d1:ed:98:bb:8f:30:05:bd:41:
                    e3:55:d5:92:67:41:fd:91:a5:22:46:4e:1f:88:d8:
                    5d:d2:e9:92:c9:8a:31:de:82:88:29:27:63:9d:b3:
                    5d:33:09:6f:62:ea:a6:40:52:4b:41:5e:2a:c6:b0:
                    2f:5b:40:b8:4f:f3:27:4d:28:49:97:d8:c8:06:7d:
                    66:b6:98:99:c5:b3:0a:8e:aa:f2:e3:87:04:32:7d:
                    c5:f4:72:d0:d3:50:9a:74:2b:39:d7:7f:a6:0d:cd:
                    95:4c:2a:57:77:39:d9:87:eb:65:19:35:4c:b9:1e:
                    62:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:2C:03:7C:63:E6:E3:88:1D:A7:2B:05:00:1D:B0:69:B2:D4:8C:E8
            X509v3 Authority Key Identifier:
                keyid:6A:41:E5:59:8C:15:DD:30:85:A3:2C:5C:38:EB:D8:C2:FA:47:F2:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32362e302f32332d3233203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:b9:5e:ad:cd:b1:64:7f:4b:aa:af:17:6a:34:6c:78:68:ea:
         08:99:6d:a5:33:83:7e:ec:d6:bd:2d:02:d0:c1:ad:59:94:2a:
         5d:88:34:bd:0d:ef:51:78:34:39:ec:d2:55:18:c7:60:a5:14:
         aa:d6:e2:de:0a:8a:61:79:c0:ec:d1:8a:9e:82:a9:eb:07:bc:
         1b:49:d7:30:12:59:e0:d8:b7:65:42:66:31:45:09:11:19:5f:
         15:c4:9d:d5:11:67:08:97:51:e2:c1:84:55:9d:99:66:3f:6e:
         8a:4f:84:f6:95:30:ca:74:e2:c4:15:26:09:df:d4:11:cd:c2:
         b8:7b:58:fb:b0:db:a2:a4:2d:ee:9a:d6:69:67:3f:37:80:bd:
         a5:05:b1:4e:99:7a:03:22:6d:89:b8:8d:cc:b4:4c:b9:78:dc:
         20:81:57:43:94:60:64:8e:58:cb:77:db:68:1d:0a:8d:17:d1:
         e9:47:61:65:54:2a:f3:61:45:de:82:62:4c:4b:3c:13:e1:89:
         43:97:bc:20:98:3e:42:e2:fa:26:81:00:47:82:d5:3d:7c:a7:
         ac:cb:63:17:b2:33:67:f2:65:0c:05:86:17:b5:fb:0d:31:ee:
         f2:61:e2:55:e1:a8:48:c8:ea:5f:49:c5:ee:1c:7c:a9:00:f9:
         78:23:8a:96
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUP66n8eTfnTcxaTQDTJ12SSW0/HswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE0MUU1NTk4QzE1REQzMDg1QTMyQzVDMzhFQkQ4QzJG
QTQ3RjIxQTAeFw0yNDExMDcxNzQwMDVaFw0yNTExMDYxNzQ1MDVaMDMxMTAvBgNV
BAMTKEZGMkMwMzdDNjNFNkUzODgxREE3MkIwNTAwMURCMDY5QjJENDhDRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpQ2EPED+DANv/WyTDIfkHkWY6
2s8xl15LvJt3Yglc7VN0DOaPcahPuLRTxUuSZe21NUcyPdHqJPeaTxmTsGVYhDSx
/3SQuX6xmyeTzrdEHi+WTvEuYsGkJiAiV8cDwzjYDL5Bq8PIb3gwaaaWVgdH/dae
IvJ5l1u0j6kwJvs+Qwituun6EYk0lxWg8NHtmLuPMAW9QeNV1ZJnQf2RpSJGTh+I
2F3S6ZLJijHegogpJ2Ods10zCW9i6qZAUktBXirGsC9bQLhP8ydNKEmX2MgGfWa2
mJnFswqOqvLjhwQyfcX0ctDTUJp0KznXf6YNzZVMKld3OdmH62UZNUy5HmI/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU/ywDfGPm44gdpysFAB2wabLUjOgwHwYDVR0j
BBgwFoAUakHlWYwV3TCFoyxcOOvYwvpH8howDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEdueEgzaDhvWWg2cWlmMlRrcXh5NXpCOWFYMVBtQXlFUjJ4RTR1ZXht
dVcvMC82QTQxRTU1OThDMTVERDMwODVBMzJDNUMzOEVCRDhDMkZBNDdGMjFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZBNDFFNTU5OEMxNUREMzA4
NUEzMkM1QzM4RUJEOEMyRkE0N0YyMUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hHbnhIM2g4b1loNnFpZjJUa3F4eTV6QjlhWDFQbUF5RVIyeEU0dWV4bXVXLzAv
MzEzNzM3MmUzMTMyMzgyZTMyMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMy
MzYzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsYAaMA0GCSqGSIb3DQEBCwUAA4IBAQA3uV6tzbFk
f0uqrxdqNGx4aOoImW2lM4N+7Na9LQLQwa1ZlCpdiDS9De9ReDQ57NJVGMdgpRSq
1uLeCophecDs0YqegqnrB7wbSdcwElng2LdlQmYxRQkRGV8VxJ3VEWcIl1HiwYRV
nZlmP26KT4T2lTDKdOLEFSYJ39QRzcK4e1j7sNuipC3umtZpZz83gL2lBbFOmXoD
Im2JuI3MtEy5eNwggVdDlGBkjljLd9toHQqNF9HpR2FlVCrzYUXegmJMSzwT4YlD
l7wgmD5C4vomgQBHgtU9fKesy2MXsjNn8mUMBYYXtfsNMe7yYeJV4ahIyOpfScXu
HHypAPl4I4qW
-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:15 2024 by rpki-client on console-fra.rpki-client.org