Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32382e302f32332d3233203d3e203532363331.roa
File:                     3137372e3132382e32382e302f32332d3233203d3e203532363331.roa (raw, json)
Hash identifier:          aCJp0ZCz2Gyv4GKA26VyjuiPpnRLCauL8ICfPELECUI=
Subject key identifier:   F5:6E:B2:30:BD:D2:63:90:E0:16:FC:B7:B9:23:A1:C7:65:94:A2:92
Certificate issuer:       /CN=6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A
Certificate serial:       2133C4B3D3B963B9EC35C53EEE7A4FCDF0DB6C55
Authority key identifier: 6A:41:E5:59:8C:15:DD:30:85:A3:2C:5C:38:EB:D8:C2:FA:47:F2:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32382e302f32332d3233203d3e203532363331.roa
Signing time:             Thu 07 Nov 2024 17:45:01 +0000
ROA not before:           Thu 07 Nov 2024 17:40:01 +0000
ROA not after:            Thu 06 Nov 2025 17:45:01 +0000
asID:                     52631
IP address blocks:        177.128.28.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:33:c4:b3:d3:b9:63:b9:ec:35:c5:3e:ee:7a:4f:cd:f0:db:6c:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A
        Validity
            Not Before: Nov  7 17:40:01 2024 GMT
            Not After : Nov  6 17:45:01 2025 GMT
        Subject: CN=F56EB230BDD26390E016FCB7B923A1C76594A292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:25:c6:57:c4:0e:68:ae:2c:e0:86:dc:8c:6c:
                    22:e9:15:cb:9c:a8:4c:59:b4:a1:88:c5:44:c3:90:
                    f2:74:f8:d8:ab:9e:4f:12:d9:78:c4:1f:13:bf:d3:
                    55:f6:5b:18:97:ca:36:f6:ee:69:c6:d7:8e:84:01:
                    7b:1e:1c:14:1c:5b:39:63:13:b4:39:96:d5:8e:e8:
                    98:d7:c6:42:d2:79:f5:e1:19:2c:19:53:c2:20:1b:
                    47:11:43:7d:1a:1b:af:9a:9d:a6:41:bd:5d:ff:91:
                    cb:00:37:4a:a3:d8:91:e9:85:60:9f:be:38:c5:59:
                    be:57:cf:2a:97:e4:3b:35:e7:19:78:68:d8:cd:54:
                    e8:c8:10:c3:1c:78:4f:f5:5d:2d:a7:aa:ef:66:39:
                    77:9c:da:7c:c0:31:3d:af:90:13:46:da:ad:3e:ad:
                    0b:85:bb:19:84:3b:a8:5d:73:b2:81:cb:4e:03:70:
                    51:70:9c:d4:dd:c7:34:e2:7e:86:07:e6:ea:ee:46:
                    ea:8c:28:2a:3c:5d:05:8a:f9:ee:94:b7:cf:14:4d:
                    26:14:0d:b1:00:d7:57:3b:ba:50:32:af:29:9e:37:
                    4d:72:21:0e:e9:05:33:d3:73:f2:a2:95:4d:fe:f0:
                    59:1f:65:15:92:04:cd:20:84:94:c2:88:c3:19:ea:
                    1f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6E:B2:30:BD:D2:63:90:E0:16:FC:B7:B9:23:A1:C7:65:94:A2:92
            X509v3 Authority Key Identifier:
                keyid:6A:41:E5:59:8C:15:DD:30:85:A3:2C:5C:38:EB:D8:C2:FA:47:F2:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32382e302f32332d3233203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:89:8e:3b:6b:20:90:d5:9c:ba:da:60:ee:a9:8b:ce:87:5b:
         f4:56:e3:7f:1d:c0:a7:2f:d8:ad:13:b4:25:ff:e4:ed:40:77:
         33:fc:e1:c3:5a:b1:9e:58:38:b3:8f:28:5f:9c:03:02:0b:54:
         57:ee:17:92:25:47:fa:62:ef:08:96:de:7e:1c:c1:00:fc:43:
         d5:cd:b7:17:3b:06:3c:4b:4f:4d:e0:9d:8a:86:00:6e:62:86:
         3a:99:16:18:9a:1d:6b:cc:45:ef:7b:e2:fc:57:e9:f6:49:c7:
         e8:3b:18:08:99:3a:b4:8c:91:b9:98:3a:92:8b:22:49:7c:b4:
         36:4a:3e:99:35:29:a4:ff:1b:29:4a:46:71:40:9a:ff:7b:14:
         df:e5:8a:2f:f2:16:40:9a:14:ac:36:bd:da:96:f3:62:c9:b1:
         01:c6:44:82:de:62:54:23:0a:43:e3:b8:2b:08:45:34:9e:d8:
         09:1b:e2:79:f1:9c:e9:ba:5a:08:af:d2:88:f4:74:83:c4:83:
         34:8f:c0:43:5f:4a:d6:8a:b7:fa:4e:d1:4b:37:a4:fd:a8:b8:
         90:a4:df:96:a3:69:2b:19:93:fb:0b:5a:36:23:e2:88:66:bc:
         b7:48:a1:2a:79:41:8d:2d:e8:d5:5f:2f:bb:56:29:42:c7:91:
         a9:a0:fe:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:15 2024 by rpki-client on console-fra.rpki-client.org