Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32362e302f32342d3234203d3e203532363331.roa
File:                     3137372e3132382e32362e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier:          ZmqaB/kKtPGoY4Tz4JL8KRYz+cB5K+Dv0C/RMKTq/PY=
Subject key identifier:   42:04:4E:02:98:28:2E:A4:01:46:73:94:BD:D6:92:CD:5E:61:49:A3
Certificate issuer:       /CN=4FDBAE28D54DD4272386040789F376018C19FE37
Certificate serial:       1F9CC1C0D70B1CF95D917BABE21BBB61DD3F6186
Authority key identifier: 4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32362e302f32342d3234203d3e203532363331.roa
Signing time:             Mon 10 Feb 2025 12:56:35 +0000
ROA not before:           Mon 10 Feb 2025 12:51:35 +0000
ROA not after:            Mon 09 Feb 2026 12:56:35 +0000
asID:                     52631
IP address blocks:        177.128.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 13:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:9c:c1:c0:d7:0b:1c:f9:5d:91:7b:ab:e2:1b:bb:61:dd:3f:61:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FDBAE28D54DD4272386040789F376018C19FE37
        Validity
            Not Before: Feb 10 12:51:35 2025 GMT
            Not After : Feb  9 12:56:35 2026 GMT
        Subject: CN=42044E0298282EA401467394BDD692CD5E6149A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d7:dd:e2:7b:fd:b3:11:a8:89:36:17:5b:25:
                    59:7f:65:56:c4:f8:ee:45:5d:e3:74:60:62:95:c8:
                    6b:9b:ca:ae:f0:60:2d:8e:3d:d0:44:4f:eb:55:c1:
                    0a:18:61:b9:6d:56:93:98:a5:09:73:e8:f9:6b:bf:
                    a2:fb:48:b5:c9:66:3a:59:4d:f2:59:15:a6:0e:a5:
                    4e:98:20:0c:d0:4b:7c:1a:27:55:32:55:fa:b0:3c:
                    f1:2e:60:13:01:76:fa:22:74:68:2c:25:f2:f5:4a:
                    74:ce:cf:c2:bf:61:35:1c:ef:2d:16:cc:67:e3:c8:
                    f8:e0:33:b0:46:f2:33:0c:92:f8:cf:67:fa:52:7d:
                    d5:ad:3b:de:92:11:77:3c:2a:08:52:f5:94:8c:d0:
                    64:40:9e:e4:5e:fe:61:88:83:17:10:01:3d:08:a9:
                    16:ee:39:e6:bd:af:09:a0:96:e4:05:73:2e:02:6f:
                    82:c1:be:22:36:80:8f:a2:85:db:f0:07:26:1b:f2:
                    30:85:2e:2b:5a:be:fd:81:fd:59:9e:48:1d:19:1f:
                    84:d7:a4:d5:5e:62:e6:d4:d2:21:f9:b9:38:d2:7e:
                    94:41:a9:c7:15:7e:57:15:51:ae:cb:10:92:f8:a6:
                    03:7d:14:a2:bd:af:6a:ba:05:21:ac:2b:9d:9f:18:
                    7a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:04:4E:02:98:28:2E:A4:01:46:73:94:BD:D6:92:CD:5E:61:49:A3
            X509v3 Authority Key Identifier:
                keyid:4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32362e302f32342d3234203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:b5:bf:ee:48:14:52:ef:8e:0c:76:a0:3d:d3:f2:77:0a:d1:
         89:dd:60:c7:32:fb:65:24:18:7a:82:f6:b2:78:e8:b7:8e:00:
         bc:2b:cd:18:ed:91:e0:57:4f:e8:22:21:6b:60:c5:67:5d:dd:
         2c:12:89:9f:68:46:5a:85:49:a4:34:2d:c5:d9:87:34:f4:08:
         b1:b3:1b:97:29:07:82:9a:f9:96:d8:95:91:2c:1b:39:dc:6c:
         be:cd:9d:fa:1f:ba:53:cd:d5:67:c9:ac:34:af:e5:8a:b8:ec:
         d8:d2:b2:99:01:d3:c8:47:3a:7b:ac:f7:8b:f2:b4:52:b4:48:
         11:fa:a1:17:3d:e9:8d:a4:46:f3:a1:80:cc:0a:18:54:9c:a7:
         c8:c6:f5:60:b0:10:30:9a:4e:d1:bb:9d:f5:6e:85:77:23:4b:
         2c:74:8e:18:89:b5:bd:df:4d:82:9e:34:eb:c3:bf:cc:72:80:
         be:95:7d:59:11:3b:5f:42:5a:02:70:6e:0e:38:13:42:a1:ce:
         92:89:97:6e:df:d7:ce:7a:2d:24:4c:b0:a4:ed:4d:e9:24:5e:
         1d:df:54:08:ba:3a:32:3d:59:ae:a3:2e:83:f2:aa:80:88:46:
         68:20:e8:88:5a:5d:b6:d2:79:34:f1:7c:d3:48:bc:f5:4e:58:
         df:3d:6b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:48:43 2025 by rpki-client