Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32382e302f32332d3233203d3e203532363331.roa
File:                     3137372e3132382e32382e302f32332d3233203d3e203532363331.roa (raw, json)
Hash identifier:          +hui2PJnQQodxFhXDOcFZYdTcMc7vqIaGoeJBBFqaio=
Subject key identifier:   4E:BD:6E:61:20:5E:53:1F:1B:1A:DA:6A:B1:57:6D:0A:7D:50:25:C8
Certificate issuer:       /CN=4FDBAE28D54DD4272386040789F376018C19FE37
Certificate serial:       3E9B09E9A37772B81AD22E8556BEC53C7A478365
Authority key identifier: 4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32382e302f32332d3233203d3e203532363331.roa
Signing time:             Mon 10 Feb 2025 12:56:33 +0000
ROA not before:           Mon 10 Feb 2025 12:51:33 +0000
ROA not after:            Mon 09 Feb 2026 12:56:33 +0000
asID:                     52631
IP address blocks:        177.128.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 13:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:9b:09:e9:a3:77:72:b8:1a:d2:2e:85:56:be:c5:3c:7a:47:83:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FDBAE28D54DD4272386040789F376018C19FE37
        Validity
            Not Before: Feb 10 12:51:33 2025 GMT
            Not After : Feb  9 12:56:33 2026 GMT
        Subject: CN=4EBD6E61205E531F1B1ADA6AB1576D0A7D5025C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:db:fc:1b:3b:65:3e:32:f1:80:89:2f:40:e3:
                    fc:9b:3e:cb:82:68:95:e9:c5:fd:4d:82:81:5c:c3:
                    7e:06:9c:8b:77:e5:e6:1c:78:1a:0d:c0:f2:da:f0:
                    db:a3:ff:98:ba:f9:3d:05:fc:b2:fb:87:c4:72:04:
                    3b:f7:cd:97:d9:ca:1e:4f:f2:ba:2b:b8:e0:40:49:
                    26:83:11:49:12:6f:56:82:c1:8f:81:c6:21:44:fe:
                    72:51:fd:b7:83:18:2f:6b:8c:2e:49:70:90:10:ea:
                    b0:8c:c2:58:be:1a:b5:a9:f0:d0:77:42:61:ea:19:
                    09:d2:44:68:80:08:b3:bd:3c:4c:b0:68:e1:88:ba:
                    41:8e:83:3b:19:b5:b3:24:53:a4:88:19:bb:94:54:
                    5d:0e:5b:b6:62:b1:88:b7:2f:53:e7:72:38:66:92:
                    f4:c9:04:e2:a8:bc:f4:43:8e:1b:b3:86:40:1b:83:
                    a2:83:fa:54:03:06:ab:55:85:ea:fd:7c:c8:0b:c3:
                    17:76:e7:a0:97:39:e3:d7:13:68:1e:ae:b3:9c:a3:
                    e7:e5:ca:80:95:dc:07:f4:e8:42:9d:7c:b8:9c:3e:
                    fe:91:c6:a5:df:7f:a9:ca:72:3b:26:b1:ed:49:78:
                    3f:36:1f:ef:df:ac:e6:04:22:f5:d8:b4:1b:1a:9f:
                    87:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:BD:6E:61:20:5E:53:1F:1B:1A:DA:6A:B1:57:6D:0A:7D:50:25:C8
            X509v3 Authority Key Identifier:
                keyid:4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32382e302f32332d3233203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:2a:db:39:a9:8f:5f:cc:07:22:95:66:2d:46:c1:bb:a8:e7:
         1b:e6:d1:9c:f0:b6:61:c9:9d:3f:49:81:36:65:9a:09:59:44:
         1f:b0:e6:40:6a:4d:05:5d:2e:88:e0:be:44:3b:a8:47:d7:c5:
         ea:dc:f0:3f:07:2a:38:83:0c:1b:f7:44:33:c6:e8:d7:0a:86:
         43:6b:fb:a3:dd:17:bc:7d:5f:45:d0:b8:ff:f9:7d:43:83:95:
         8c:ba:76:0f:09:2c:f1:06:9a:f2:39:0b:ae:96:9a:ea:7c:6e:
         73:f2:02:e4:eb:5b:49:f7:29:de:5e:83:7f:16:17:de:93:b5:
         bd:d2:7f:90:d6:0d:15:36:b1:e0:bf:c2:d6:fb:e9:76:04:06:
         84:ac:21:e4:f6:a4:e1:1b:01:cd:06:3e:d7:70:42:c0:b3:f9:
         e6:79:d9:3b:5b:a4:98:0d:7b:d1:a5:dc:21:09:90:fc:8e:13:
         78:f7:47:ba:95:e4:0f:32:e4:bf:aa:bf:13:f1:ed:7f:e4:f0:
         68:c4:cd:4e:17:ee:69:10:23:fa:5a:52:a3:2b:5c:e9:48:b8:
         3e:ea:52:23:47:74:49:52:22:f9:f2:1f:e4:88:24:bf:99:c4:
         aa:0c:ec:38:cf:ca:e0:67:ae:48:56:16:e5:5c:49:52:b5:91:
         4b:13:a6:60
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPpsJ6aN3crga0i6FVr7FPHpHg2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEZEQkFFMjhENTRERDQyNzIzODYwNDA3ODlGMzc2MDE4
QzE5RkUzNzAeFw0yNTAyMTAxMjUxMzNaFw0yNjAyMDkxMjU2MzNaMDMxMTAvBgNV
BAMTKDRFQkQ2RTYxMjA1RTUzMUYxQjFBREE2QUIxNTc2RDBBN0Q1MDI1QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg2/wbO2U+MvGAiS9A4/ybPsuC
aJXpxf1NgoFcw34GnIt35eYceBoNwPLa8Nuj/5i6+T0F/LL7h8RyBDv3zZfZyh5P
8roruOBASSaDEUkSb1aCwY+BxiFE/nJR/beDGC9rjC5JcJAQ6rCMwli+GrWp8NB3
QmHqGQnSRGiACLO9PEywaOGIukGOgzsZtbMkU6SIGbuUVF0OW7ZisYi3L1Pncjhm
kvTJBOKovPRDjhuzhkAbg6KD+lQDBqtVher9fMgLwxd256CXOePXE2gerrOco+fl
yoCV3Af06EKdfLicPv6RxqXff6nKcjsmse1JeD82H+/frOYEIvXYtBsan4dNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUTr1uYSBeUx8bGtpqsVdtCn1QJcgwHwYDVR0j
BBgwFoAUT9uuKNVN1CcjhgQHifN2AYwZ/jcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEdueEgzaDhvWWg2cWlmMlRrcXh5NXpCOWFYMVBtQXlFUjJ4RTR1ZXht
dVcvMC80RkRCQUUyOEQ1NERENDI3MjM4NjA0MDc4OUYzNzYwMThDMTlGRTM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGREJBRTI4RDU0REQ0Mjcy
Mzg2MDQwNzg5RjM3NjAxOEMxOUZFMzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hHbnhIM2g4b1loNnFpZjJUa3F4eTV6QjlhWDFQbUF5RVIyeEU0dWV4bXVXLzAv
MzEzNzM3MmUzMTMyMzgyZTMyMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMy
MzYzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsYAcMA0GCSqGSIb3DQEBCwUAA4IBAQBqKts5qY9f
zAcilWYtRsG7qOcb5tGc8LZhyZ0/SYE2ZZoJWUQfsOZAak0FXS6I4L5EO6hH18Xq
3PA/Byo4gwwb90QzxujXCoZDa/uj3Re8fV9F0Lj/+X1Dg5WMunYPCSzxBpryOQuu
lprqfG5z8gLk61tJ9yneXoN/Fhfek7W90n+Q1g0VNrHgv8LW++l2BAaErCHk9qTh
GwHNBj7XcELAs/nmedk7W6SYDXvRpdwhCZD8jhN490e6leQPMuS/qr8T8e1/5PBo
xM1OF+5pECP6WlKjK1zpSLg+6lIjR3RJUiL58h/kiCS/mcSqDOw4z8rgZ65IVhbl
XElStZFLE6Zg
-----END CERTIFICATE-----
Generated at Tue Apr 8 22:37:56 2025 by rpki-client