Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33302e302f32332d3233203d3e203532363331.roa
File:                     3137372e3132382e33302e302f32332d3233203d3e203532363331.roa (raw, json)
Hash identifier:          LopvtbzyUI92lhSfNHs1QtJh49e8LPzKK+8xaXkzBrw=
Subject key identifier:   FE:64:D3:61:3B:49:6C:B8:9F:03:98:50:6C:51:22:04:A1:5D:A7:66
Certificate issuer:       /CN=4FDBAE28D54DD4272386040789F376018C19FE37
Certificate serial:       732E6269C14A248DC8C493F9C15C465AD39D72CA
Authority key identifier: 4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33302e302f32332d3233203d3e203532363331.roa
Signing time:             Mon 10 Feb 2025 12:56:33 +0000
ROA not before:           Mon 10 Feb 2025 12:51:33 +0000
ROA not after:            Mon 09 Feb 2026 12:56:33 +0000
asID:                     52631
IP address blocks:        177.128.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 23:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:2e:62:69:c1:4a:24:8d:c8:c4:93:f9:c1:5c:46:5a:d3:9d:72:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FDBAE28D54DD4272386040789F376018C19FE37
        Validity
            Not Before: Feb 10 12:51:33 2025 GMT
            Not After : Feb  9 12:56:33 2026 GMT
        Subject: CN=FE64D3613B496CB89F0398506C512204A15DA766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9e:3d:c9:f3:b4:d8:3b:1e:71:17:05:bc:30:
                    e7:85:af:2a:15:24:f4:f8:39:de:ad:35:76:0e:7e:
                    71:32:46:ad:4a:4f:03:3e:2b:11:1d:6a:21:04:7e:
                    fb:89:63:33:f2:5c:10:23:20:74:d6:ea:c0:92:a2:
                    7c:12:67:25:bc:6f:66:c7:eb:c0:83:34:7d:4c:4d:
                    ee:79:51:a9:f5:57:81:84:31:37:1c:70:99:08:31:
                    3d:7f:f9:cb:72:4f:58:35:ba:77:4d:25:7a:2e:25:
                    44:95:5b:c9:5f:99:9d:bc:0f:46:56:ef:73:45:9b:
                    1f:82:03:21:90:c7:70:ea:a6:49:aa:eb:86:1e:f2:
                    9f:85:96:11:e4:8b:11:f2:21:d9:66:69:f0:8b:f0:
                    ef:d2:04:e3:2d:f4:c1:f9:ca:30:4d:88:14:ff:01:
                    93:dc:ac:f5:35:06:ce:4c:0f:96:8b:0f:5a:2e:2c:
                    ec:bb:4f:60:2b:0d:78:66:2b:d4:08:2a:3b:92:2f:
                    0f:28:29:5c:c6:a1:25:a9:33:1a:43:36:a6:9a:48:
                    9c:b0:dd:9a:0a:b3:82:1b:17:79:48:f1:76:aa:57:
                    8e:30:ac:e1:db:6d:d3:b9:9d:79:ea:65:c6:57:80:
                    a4:da:03:9e:ce:9e:3c:b1:0b:ae:69:28:1e:62:c3:
                    46:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:64:D3:61:3B:49:6C:B8:9F:03:98:50:6C:51:22:04:A1:5D:A7:66
            X509v3 Authority Key Identifier:
                keyid:4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33302e302f32332d3233203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:38:96:eb:65:a2:ca:0e:99:41:f9:d2:08:52:06:c9:01:90:
         62:66:0c:e2:99:d9:02:f8:a5:06:ac:4a:d5:8b:fa:31:7f:b6:
         89:e8:80:22:76:26:78:57:a9:3e:fd:a9:a2:6d:e1:77:16:f4:
         5c:44:2a:94:2d:08:5b:a6:48:3c:1a:11:3f:fb:c5:35:89:cf:
         cc:55:57:3f:77:ce:10:d6:6f:4a:0a:a9:85:62:35:5b:9f:81:
         94:94:b6:b7:9f:20:7c:73:76:d0:1f:64:1c:3b:b3:8d:e4:83:
         25:26:7f:0b:60:89:df:61:99:bc:24:ad:ae:0f:7b:b2:02:f1:
         36:de:a1:d4:fd:9c:a4:be:f1:b1:4d:bb:fb:33:c2:75:c4:8a:
         f0:c7:64:b0:e4:13:37:c6:ef:b6:ca:60:c3:ac:26:a8:40:61:
         dc:74:d9:fb:d9:ca:a3:c2:ac:67:47:88:c5:93:bb:ad:81:51:
         62:26:a6:39:dd:e2:fc:7d:a7:2a:9d:81:17:9d:02:60:b3:60:
         1b:5b:80:bb:27:b9:63:68:dd:03:da:5a:01:62:65:81:68:f2:
         97:ab:70:16:3c:ae:2c:b8:65:18:09:dd:8b:06:6b:1c:e9:37:
         4f:58:60:0b:d5:83:b0:90:d9:5e:5c:06:9a:53:f1:ae:17:52:
         b5:05:0a:ee
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcy5iacFKJI3IxJP5wVxGWtOdcsowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEZEQkFFMjhENTRERDQyNzIzODYwNDA3ODlGMzc2MDE4
QzE5RkUzNzAeFw0yNTAyMTAxMjUxMzNaFw0yNjAyMDkxMjU2MzNaMDMxMTAvBgNV
BAMTKEZFNjREMzYxM0I0OTZDQjg5RjAzOTg1MDZDNTEyMjA0QTE1REE3NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfnj3J87TYOx5xFwW8MOeFryoV
JPT4Od6tNXYOfnEyRq1KTwM+KxEdaiEEfvuJYzPyXBAjIHTW6sCSonwSZyW8b2bH
68CDNH1MTe55Uan1V4GEMTcccJkIMT1/+ctyT1g1undNJXouJUSVW8lfmZ28D0ZW
73NFmx+CAyGQx3Dqpkmq64Ye8p+FlhHkixHyIdlmafCL8O/SBOMt9MH5yjBNiBT/
AZPcrPU1Bs5MD5aLD1ouLOy7T2ArDXhmK9QIKjuSLw8oKVzGoSWpMxpDNqaaSJyw
3ZoKs4IbF3lI8XaqV44wrOHbbdO5nXnqZcZXgKTaA57OnjyxC65pKB5iw0bZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU/mTTYTtJbLifA5hQbFEiBKFdp2YwHwYDVR0j
BBgwFoAUT9uuKNVN1CcjhgQHifN2AYwZ/jcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEdueEgzaDhvWWg2cWlmMlRrcXh5NXpCOWFYMVBtQXlFUjJ4RTR1ZXht
dVcvMC80RkRCQUUyOEQ1NERENDI3MjM4NjA0MDc4OUYzNzYwMThDMTlGRTM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGREJBRTI4RDU0REQ0Mjcy
Mzg2MDQwNzg5RjM3NjAxOEMxOUZFMzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hHbnhIM2g4b1loNnFpZjJUa3F4eTV6QjlhWDFQbUF5RVIyeEU0dWV4bXVXLzAv
MzEzNzM3MmUzMTMyMzgyZTMzMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMy
MzYzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsYAeMA0GCSqGSIb3DQEBCwUAA4IBAQALOJbrZaLK
DplB+dIIUgbJAZBiZgzimdkC+KUGrErVi/oxf7aJ6IAidiZ4V6k+/amibeF3FvRc
RCqULQhbpkg8GhE/+8U1ic/MVVc/d84Q1m9KCqmFYjVbn4GUlLa3nyB8c3bQH2Qc
O7ON5IMlJn8LYInfYZm8JK2uD3uyAvE23qHU/ZykvvGxTbv7M8J1xIrwx2Sw5BM3
xu+2ymDDrCaoQGHcdNn72cqjwqxnR4jFk7utgVFiJqY53eL8facqnYEXnQJgs2Ab
W4C7J7ljaN0D2loBYmWBaPKXq3AWPK4suGUYCd2LBmsc6TdPWGAL1YOwkNleXAaa
U/GuF1K1BQru
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:11 2025 by rpki-client