Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32362e302f32342d3234203d3e203532363331.roa
File:                     3137372e3132382e32362e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier:          z5TNc9aG3eD0UIAst3p5wynV0F6ZFk3+hGlsMzdiAAU=
Subject key identifier:   9D:3F:17:0F:B9:79:A1:A8:FB:C8:71:D6:89:D6:12:1F:C0:83:A3:93
Certificate issuer:       /CN=6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A
Certificate serial:       0C80B03C862E3347F1B7FEBDD575F82B0DA62EBA
Authority key identifier: 6A:41:E5:59:8C:15:DD:30:85:A3:2C:5C:38:EB:D8:C2:FA:47:F2:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32362e302f32342d3234203d3e203532363331.roa
Signing time:             Thu 07 Nov 2024 17:44:58 +0000
ROA not before:           Thu 07 Nov 2024 17:39:58 +0000
ROA not after:            Thu 06 Nov 2025 17:44:58 +0000
asID:                     52631
IP address blocks:        177.128.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 19:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:80:b0:3c:86:2e:33:47:f1:b7:fe:bd:d5:75:f8:2b:0d:a6:2e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A
        Validity
            Not Before: Nov  7 17:39:58 2024 GMT
            Not After : Nov  6 17:44:58 2025 GMT
        Subject: CN=9D3F170FB979A1A8FBC871D689D6121FC083A393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cf:4e:1f:cb:eb:34:5e:aa:1c:5f:3b:9a:57:
                    2a:b6:07:84:a9:79:62:6b:cc:67:d1:3c:7e:a0:2a:
                    a9:50:e6:1b:72:36:d3:0b:c5:3d:90:d6:bc:39:5d:
                    4e:34:e5:94:c6:86:7f:4c:04:2c:c9:95:05:b7:c7:
                    91:97:df:9a:7d:92:50:05:d6:4d:6a:39:28:a3:6c:
                    18:de:ec:65:4f:42:bb:c5:15:00:63:26:8a:53:bd:
                    c7:6e:51:73:8a:bd:38:94:75:de:ab:ee:65:82:84:
                    36:b6:02:00:5c:9f:99:00:da:80:35:9d:9c:0d:bb:
                    96:ae:eb:e1:e6:b4:9c:73:16:39:dc:7b:71:89:21:
                    ac:f4:50:3d:6d:2d:24:21:47:26:c8:b5:ba:77:9c:
                    70:40:78:55:aa:5d:5e:0d:f2:39:ca:38:23:4f:1b:
                    d2:4b:3e:8c:37:99:2b:a5:d5:c2:2b:a8:e7:35:b7:
                    ad:ee:be:2d:a8:1d:f0:cb:c0:1b:8e:ca:45:cf:c0:
                    ce:a5:6d:ff:e4:e5:fe:61:9f:61:eb:db:8c:0f:07:
                    cc:10:94:da:1c:1c:ae:50:db:53:b9:fe:99:bd:97:
                    61:0d:d7:b4:42:95:2d:1b:d3:3f:84:10:e3:c9:4d:
                    21:ba:66:2a:ae:bd:42:49:ed:3c:68:02:48:63:c5:
                    43:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3F:17:0F:B9:79:A1:A8:FB:C8:71:D6:89:D6:12:1F:C0:83:A3:93
            X509v3 Authority Key Identifier:
                keyid:6A:41:E5:59:8C:15:DD:30:85:A3:2C:5C:38:EB:D8:C2:FA:47:F2:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32362e302f32342d3234203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:60:71:7f:f0:b8:4f:19:90:fc:cf:8a:3e:e1:99:87:a1:b8:
         53:57:ee:ed:f1:82:7e:6a:07:0f:8e:07:d4:8a:0e:c1:40:c0:
         39:a8:d1:9c:9a:78:ca:4b:44:ed:40:28:03:4d:a4:ae:9f:b3:
         c0:90:0c:bd:63:8f:01:48:21:28:ae:a2:2e:71:4f:e1:26:1c:
         5f:83:a1:a4:3b:64:32:dc:2c:5e:61:52:69:7f:33:4d:e2:01:
         d6:20:ea:07:95:da:c0:78:f5:1a:d7:ea:2f:76:5c:59:8f:79:
         f9:03:64:22:a4:5c:3f:ea:71:b3:c8:8a:6d:04:6d:7d:a4:e0:
         44:51:bd:44:f7:77:52:07:26:de:0e:63:fd:2e:a0:ea:f9:f1:
         94:03:28:f1:2b:7e:9a:c1:b7:0d:a4:82:60:9f:3f:9f:36:7b:
         b0:2d:8c:9c:ba:65:4c:ad:fe:ef:39:c1:c1:40:59:c8:7b:bd:
         27:26:73:02:0e:25:22:76:43:5f:c6:c9:61:74:43:0d:1e:34:
         10:a0:84:82:fc:18:55:95:91:c3:ac:d7:34:65:e3:b2:14:2d:
         6a:97:9b:6d:20:b8:8a:7b:e9:6c:e4:c7:88:7a:97:b3:fa:67:
         c1:72:99:d8:fa:4d:3c:ca:06:45:82:d6:51:e5:1a:42:e6:fe:
         d9:28:9d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 20:09:51 2024 by rpki-client on console-fra.rpki-client.org