Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33312e302f32342d3234203d3e203532363331.roa
File:                     3137372e3132382e33312e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier:          xt0vopZIQmg9r8Yk+4SkolM6kXX61LLvxyrX4nOBCEg=
Subject key identifier:   DA:19:80:AA:0D:94:18:7E:0E:CF:DE:2C:44:A5:DC:A2:13:7C:B6:12
Certificate issuer:       /CN=4FDBAE28D54DD4272386040789F376018C19FE37
Certificate serial:       154E79801BEBDFA616EF2F52817DEB8D84FB69DB
Authority key identifier: 4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33312e302f32342d3234203d3e203532363331.roa
Signing time:             Mon 10 Feb 2025 12:56:34 +0000
ROA not before:           Mon 10 Feb 2025 12:51:34 +0000
ROA not after:            Mon 09 Feb 2026 12:56:34 +0000
asID:                     52631
IP address blocks:        177.128.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 13:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:4e:79:80:1b:eb:df:a6:16:ef:2f:52:81:7d:eb:8d:84:fb:69:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FDBAE28D54DD4272386040789F376018C19FE37
        Validity
            Not Before: Feb 10 12:51:34 2025 GMT
            Not After : Feb  9 12:56:34 2026 GMT
        Subject: CN=DA1980AA0D94187E0ECFDE2C44A5DCA2137CB612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:16:e6:ed:c4:dd:74:c2:cd:67:bd:75:2e:1c:
                    f1:c9:f8:83:38:e5:08:ae:00:4e:4c:67:64:a9:87:
                    dc:98:e8:6d:f7:46:e3:f3:4f:89:3f:12:31:91:ee:
                    92:31:54:f4:01:a0:e7:27:27:b5:d2:01:3d:1d:b6:
                    c2:10:78:57:93:30:c8:c5:37:cb:a9:f8:ee:6a:83:
                    4f:6f:94:80:f5:66:ff:3e:08:b4:7f:56:35:ce:31:
                    6b:70:27:0b:f9:d8:d5:a3:81:a3:4c:c3:90:56:d4:
                    64:b5:c9:3a:df:c6:b1:18:f2:9b:c2:d6:0a:7d:66:
                    f1:08:93:a6:f0:b8:63:ac:0d:ca:97:87:57:f9:63:
                    97:1f:30:5f:09:be:bd:b1:97:c8:19:0c:59:8f:fc:
                    7a:19:d5:3e:53:94:e6:ba:08:3a:45:9c:c0:c3:1f:
                    cb:d9:d0:a3:a7:ed:75:ff:91:f7:0a:f9:dd:47:f2:
                    a0:e9:b0:fb:20:ab:1c:42:f4:57:e0:e0:81:d9:80:
                    f9:3c:c0:0a:2b:3b:5a:fd:4d:4e:dc:2b:90:4d:ef:
                    89:c3:34:27:39:a1:29:2f:d4:97:e2:4b:4f:0b:54:
                    f3:6c:15:e5:77:3c:52:50:8f:c6:e0:95:83:f8:d4:
                    35:c1:24:45:6e:a6:98:98:87:20:7f:a4:06:c6:7a:
                    59:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:19:80:AA:0D:94:18:7E:0E:CF:DE:2C:44:A5:DC:A2:13:7C:B6:12
            X509v3 Authority Key Identifier:
                keyid:4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33312e302f32342d3234203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:26:0c:cb:3d:c0:a6:64:0d:fe:55:d1:94:23:ae:23:08:5c:
         5d:db:12:85:dd:69:0b:67:d5:40:10:f2:e5:93:85:f8:f4:52:
         97:1c:e7:88:1c:81:6d:cc:d4:8f:8e:a8:5c:e7:20:e0:4a:7f:
         e9:16:81:53:5d:5a:c5:d0:56:91:65:ae:37:06:a7:3c:ba:c5:
         60:33:7d:ff:c2:91:ab:26:3c:a6:cf:df:8e:59:70:5f:f5:02:
         68:f5:a2:3b:ad:c3:be:ff:97:fe:c4:9b:b6:9a:76:89:79:82:
         2e:15:4d:d3:3c:7b:30:5c:9e:38:cd:bb:f6:2c:dd:61:aa:52:
         bc:c9:36:2c:87:8e:3d:e7:e1:ac:19:38:a9:68:c8:45:97:91:
         c1:c4:2e:49:d6:8d:e0:de:6f:38:2b:b6:e3:ce:7f:f8:aa:7a:
         70:9d:29:e6:1b:b9:5c:b1:c8:1f:38:33:9c:b5:92:4e:d5:68:
         29:44:a5:f9:e8:16:59:0f:14:93:58:74:8f:38:37:6c:8c:25:
         34:db:6c:dd:0b:e6:21:6b:8e:37:03:ec:48:1c:dd:14:2c:f1:
         e4:19:28:cb:27:91:4a:4e:f3:d6:54:77:8f:91:c0:d6:d8:45:
         0b:54:6f:a5:58:9e:30:79:98:0b:d8:1d:a6:5a:e9:79:46:78:
         28:91:39:db
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFU55gBvr36YW7y9SgX3rjYT7adswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEZEQkFFMjhENTRERDQyNzIzODYwNDA3ODlGMzc2MDE4
QzE5RkUzNzAeFw0yNTAyMTAxMjUxMzRaFw0yNjAyMDkxMjU2MzRaMDMxMTAvBgNV
BAMTKERBMTk4MEFBMEQ5NDE4N0UwRUNGREUyQzQ0QTVEQ0EyMTM3Q0I2MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbFubtxN10ws1nvXUuHPHJ+IM4
5QiuAE5MZ2Sph9yY6G33RuPzT4k/EjGR7pIxVPQBoOcnJ7XSAT0dtsIQeFeTMMjF
N8up+O5qg09vlID1Zv8+CLR/VjXOMWtwJwv52NWjgaNMw5BW1GS1yTrfxrEY8pvC
1gp9ZvEIk6bwuGOsDcqXh1f5Y5cfMF8Jvr2xl8gZDFmP/HoZ1T5TlOa6CDpFnMDD
H8vZ0KOn7XX/kfcK+d1H8qDpsPsgqxxC9Ffg4IHZgPk8wAorO1r9TU7cK5BN74nD
NCc5oSkv1JfiS08LVPNsFeV3PFJQj8bglYP41DXBJEVuppiYhyB/pAbGelmfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU2hmAqg2UGH4Oz94sRKXcohN8thIwHwYDVR0j
BBgwFoAUT9uuKNVN1CcjhgQHifN2AYwZ/jcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEdueEgzaDhvWWg2cWlmMlRrcXh5NXpCOWFYMVBtQXlFUjJ4RTR1ZXht
dVcvMC80RkRCQUUyOEQ1NERENDI3MjM4NjA0MDc4OUYzNzYwMThDMTlGRTM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGREJBRTI4RDU0REQ0Mjcy
Mzg2MDQwNzg5RjM3NjAxOEMxOUZFMzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hHbnhIM2g4b1loNnFpZjJUa3F4eTV6QjlhWDFQbUF5RVIyeEU0dWV4bXVXLzAv
MzEzNzM3MmUzMTMyMzgyZTMzMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzYzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsYAfMA0GCSqGSIb3DQEBCwUAA4IBAQB9JgzLPcCm
ZA3+VdGUI64jCFxd2xKF3WkLZ9VAEPLlk4X49FKXHOeIHIFtzNSPjqhc5yDgSn/p
FoFTXVrF0FaRZa43Bqc8usVgM33/wpGrJjymz9+OWXBf9QJo9aI7rcO+/5f+xJu2
mnaJeYIuFU3TPHswXJ44zbv2LN1hqlK8yTYsh4495+GsGTipaMhFl5HBxC5J1o3g
3m84K7bjzn/4qnpwnSnmG7lcscgfODOctZJO1WgpRKX56BZZDxSTWHSPODdsjCU0
22zdC+Yha443A+xIHN0ULPHkGSjLJ5FKTvPWVHePkcDW2EULVG+lWJ4weZgL2B2m
Wul5RngokTnb
-----END CERTIFICATE-----
Generated at Tue Apr 8 22:40:46 2025 by rpki-client