Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33302e302f32342d3234203d3e203532363331.roa
File:                     3137372e3132382e33302e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier:          Cd4GlJE68xPU9rqCD89mcd6NWsX2rV0XyPUciivMbnA=
Subject key identifier:   41:9B:95:2B:53:67:C0:4D:66:14:2C:50:F9:E8:80:4A:AC:24:2B:80
Certificate issuer:       /CN=6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A
Certificate serial:       12E277424132F9210AC98252892F61C4CCD00E
Authority key identifier: 6A:41:E5:59:8C:15:DD:30:85:A3:2C:5C:38:EB:D8:C2:FA:47:F2:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33302e302f32342d3234203d3e203532363331.roa
Signing time:             Thu 07 Nov 2024 17:45:01 +0000
ROA not before:           Thu 07 Nov 2024 17:40:01 +0000
ROA not after:            Thu 06 Nov 2025 17:45:01 +0000
asID:                     52631
IP address blocks:        177.128.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 19:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e2:77:42:41:32:f9:21:0a:c9:82:52:89:2f:61:c4:cc:d0:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A
        Validity
            Not Before: Nov  7 17:40:01 2024 GMT
            Not After : Nov  6 17:45:01 2025 GMT
        Subject: CN=419B952B5367C04D66142C50F9E8804AAC242B80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6c:5e:3e:56:13:d2:4c:b3:1a:aa:be:fa:60:
                    29:cf:e9:d2:2f:df:f0:82:86:10:bf:14:1f:76:62:
                    43:56:3b:d1:df:39:cb:ea:4f:dd:a7:36:2c:7e:ac:
                    a7:71:7b:ee:dd:7b:29:f0:d3:bd:df:59:8d:38:ed:
                    b8:b1:af:ce:28:e2:d6:39:e0:9b:92:a6:52:56:32:
                    79:5b:71:5d:27:bb:98:f4:29:fb:fa:ac:4d:c5:60:
                    d8:db:7f:1d:0a:14:9e:52:41:a5:38:12:43:bb:85:
                    52:2d:11:4e:1b:b1:b8:d1:39:f8:ca:31:16:3b:f8:
                    b0:fa:14:dc:15:a0:db:d9:c7:f2:ff:3f:07:77:f4:
                    33:1b:5b:f7:fe:09:8c:22:b0:43:b0:0e:48:d8:75:
                    45:f4:45:3f:94:1a:f7:db:fd:e1:c5:93:f8:9c:51:
                    84:fa:65:7c:28:28:31:a2:54:12:1d:82:74:3e:4d:
                    ad:df:65:13:ff:48:18:07:a8:20:e2:b9:e1:1c:50:
                    e0:e6:8e:d2:80:95:0a:66:88:a4:3a:56:e0:1f:f5:
                    6b:69:dc:be:4e:f6:3d:2d:27:c3:d5:85:d6:87:0f:
                    fd:33:a6:30:3e:8d:6f:77:31:1e:b0:e2:e2:34:1f:
                    27:98:d2:47:0f:28:49:f9:a2:21:f3:38:c5:c9:a4:
                    fe:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9B:95:2B:53:67:C0:4D:66:14:2C:50:F9:E8:80:4A:AC:24:2B:80
            X509v3 Authority Key Identifier:
                keyid:6A:41:E5:59:8C:15:DD:30:85:A3:2C:5C:38:EB:D8:C2:FA:47:F2:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33302e302f32342d3234203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:b4:ca:cc:8a:42:ed:81:89:76:4c:c7:fc:fa:bb:4c:71:62:
         ec:f8:12:fd:60:81:bd:9c:4c:a9:00:c6:c9:c2:3c:73:f8:f9:
         c7:8a:1e:5b:8d:e1:5d:95:2e:b8:a3:40:ac:08:d3:47:17:93:
         52:ec:56:b1:2e:ef:21:dc:bd:94:df:77:fd:52:1e:99:8f:3b:
         af:1e:a7:aa:9e:88:8a:a1:2e:19:b4:d2:f7:04:d0:76:e9:d0:
         d2:9c:8e:f2:eb:33:eb:0a:5c:ac:b2:3d:83:66:bb:88:5a:c8:
         e9:d9:7a:b9:20:2b:32:34:c9:72:ef:d3:38:6d:ad:2b:2d:01:
         a5:16:79:88:c3:a5:87:ee:f7:5c:90:80:90:9e:04:eb:b2:40:
         a1:48:71:4c:a7:5f:58:2b:93:29:b2:d6:03:83:0f:b9:ff:56:
         56:3e:63:85:c8:b7:98:e1:78:ac:dd:5e:cb:b2:92:af:27:86:
         b3:38:d3:70:4b:e6:34:72:26:58:29:c9:e2:4a:c2:e6:e4:3f:
         10:d2:33:20:75:23:9c:ba:be:49:fc:2c:f1:fc:00:d5:5c:ba:
         8f:9d:94:5c:8e:47:30:c4:15:2d:ec:fe:09:96:a3:2b:39:d1:
         49:ca:71:f6:e6:11:52:c6:ed:4d:aa:3e:b5:88:6a:5b:06:d5:
         4a:af:9d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 20:09:51 2024 by rpki-client on console-fra.rpki-client.org