Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32392e302f32342d3234203d3e203532363331.roa
File:                     3137372e3132382e32392e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier:          pzj+DB6CsF19+BmSZ82XamuwuAxRezjnCx+Mb8UPf4U=
Subject key identifier:   5F:1E:C9:02:A1:D6:81:62:2D:AE:0E:52:9A:F6:50:41:1F:D3:8E:F6
Certificate issuer:       /CN=4FDBAE28D54DD4272386040789F376018C19FE37
Certificate serial:       77130A2CED236DAD3545BCD18AD3451E6B2B576E
Authority key identifier: 4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32392e302f32342d3234203d3e203532363331.roa
Signing time:             Mon 10 Feb 2025 12:56:34 +0000
ROA not before:           Mon 10 Feb 2025 12:51:34 +0000
ROA not after:            Mon 09 Feb 2026 12:56:34 +0000
asID:                     52631
IP address blocks:        177.128.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 13:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:13:0a:2c:ed:23:6d:ad:35:45:bc:d1:8a:d3:45:1e:6b:2b:57:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FDBAE28D54DD4272386040789F376018C19FE37
        Validity
            Not Before: Feb 10 12:51:34 2025 GMT
            Not After : Feb  9 12:56:34 2026 GMT
        Subject: CN=5F1EC902A1D681622DAE0E529AF650411FD38EF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9c:78:75:da:72:5a:ce:c2:e9:15:4c:1f:44:
                    06:e1:d5:6d:b6:1b:9c:dd:48:e2:05:ce:30:21:9a:
                    ad:25:24:07:7b:43:07:fb:12:7c:b6:ea:93:7c:ba:
                    7d:a5:bf:f8:54:5b:f7:80:4e:9a:21:78:63:f3:92:
                    30:56:94:31:6b:84:bc:dc:d2:70:62:19:44:d9:2c:
                    11:48:c0:dd:66:6e:02:cc:68:99:5f:f2:42:7d:b0:
                    63:9d:87:b4:3c:41:fe:b9:2e:c8:5d:2a:59:7a:b4:
                    3c:cb:5f:2c:5e:0b:5d:1e:60:fe:20:10:80:ce:da:
                    73:bf:be:f7:e5:0b:76:2b:42:85:61:65:8c:4c:23:
                    0f:23:90:dc:cb:8e:87:45:a1:20:67:c4:ef:a7:5f:
                    9e:f8:5d:84:3d:31:a7:74:b4:d1:3a:18:5c:40:b5:
                    35:8f:f1:eb:42:ca:55:96:db:86:a3:e3:0a:3e:96:
                    f0:b4:eb:22:11:26:73:5d:07:96:ce:ad:73:57:af:
                    60:b1:6a:61:e7:86:79:12:90:9a:ce:97:ad:bc:90:
                    38:b6:78:8f:b7:52:67:92:87:ea:3d:7e:f3:fc:ea:
                    1c:1c:90:cf:d7:78:3b:6d:76:17:d3:86:55:49:cd:
                    c5:ab:06:ca:6e:91:f8:2f:f2:98:05:0c:95:0b:74:
                    6d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1E:C9:02:A1:D6:81:62:2D:AE:0E:52:9A:F6:50:41:1F:D3:8E:F6
            X509v3 Authority Key Identifier:
                keyid:4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32392e302f32342d3234203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:2f:38:c3:40:ba:60:99:bf:c7:c1:91:18:aa:a1:cb:23:ed:
         1d:08:f6:35:01:f6:a4:3f:4c:9a:ee:9b:25:c6:0b:87:63:7a:
         38:6e:4b:bc:7e:78:43:87:d0:12:16:71:5a:0d:c5:7f:15:7f:
         42:3f:a6:f2:a3:96:a7:67:7f:0b:af:d4:41:fc:f3:3e:09:1a:
         4a:a9:e9:ab:e6:1a:c0:ab:b0:a0:db:7c:98:51:41:63:a1:c4:
         8c:be:7c:da:88:94:3b:14:70:9c:c9:6b:1f:b3:c4:65:ad:52:
         79:73:9a:60:5b:a2:de:b4:b2:97:ab:b4:c1:55:51:04:2c:b5:
         a9:e4:71:c1:73:38:9d:17:b2:de:95:7e:de:1d:3e:35:0f:ea:
         f7:31:7e:c4:86:15:ba:84:69:90:db:b6:b7:28:29:7d:6e:32:
         c3:4c:41:2e:cc:91:60:93:88:c1:29:95:15:9f:4b:99:87:e4:
         e6:55:9d:b9:65:d2:20:1c:4b:e2:fd:ac:0a:2f:2f:85:a6:6b:
         85:5a:e8:a9:54:9a:de:c6:1e:49:a4:d4:3b:67:8a:0d:dc:c2:
         60:03:fc:ed:93:99:5c:98:04:62:42:d3:5a:af:4f:75:68:6f:
         d3:5d:10:d7:05:09:c7:24:d9:51:76:dc:e1:dd:25:0c:e7:89:
         28:d6:2f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:46:08 2025 by rpki-client