Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33312e302f32342d3234203d3e203532363331.roa
File:                     3137372e3132382e33312e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier:          4gQ6AJL6nHrSp3LcOc346h6Le2j4de9M594LRuE+J4c=
Subject key identifier:   14:81:65:B1:40:15:41:00:81:E6:2F:41:4F:04:BA:4F:09:38:CA:D8
Certificate issuer:       /CN=6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A
Certificate serial:       4B7FA0432FC722DF92074D6FBBE96F346E22EC2F
Authority key identifier: 6A:41:E5:59:8C:15:DD:30:85:A3:2C:5C:38:EB:D8:C2:FA:47:F2:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33312e302f32342d3234203d3e203532363331.roa
Signing time:             Thu 07 Nov 2024 17:44:57 +0000
ROA not before:           Thu 07 Nov 2024 17:39:57 +0000
ROA not after:            Thu 06 Nov 2025 17:44:57 +0000
asID:                     52631
IP address blocks:        177.128.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 19:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:7f:a0:43:2f:c7:22:df:92:07:4d:6f:bb:e9:6f:34:6e:22:ec:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A
        Validity
            Not Before: Nov  7 17:39:57 2024 GMT
            Not After : Nov  6 17:44:57 2025 GMT
        Subject: CN=148165B14015410081E62F414F04BA4F0938CAD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:34:8b:54:ac:7f:22:f6:e9:23:50:af:84:08:
                    ff:87:70:35:bb:4c:35:ac:ba:1d:25:35:62:91:fc:
                    fe:d8:c6:fd:0d:87:dd:fb:46:6e:62:fa:7b:ca:ee:
                    5f:09:8d:d7:0e:4a:7f:07:4b:eb:f2:a4:2c:d1:73:
                    21:ef:18:1b:6c:2a:8c:b9:33:bd:a4:ac:49:fe:f2:
                    8f:78:00:9e:5b:07:b7:f9:8d:d4:0a:e3:d4:72:3d:
                    49:2c:7f:21:fd:2d:cb:15:37:d9:96:00:a9:7b:84:
                    20:9b:47:b4:ea:e7:72:00:2e:84:37:9a:ab:44:0b:
                    e6:af:29:ab:8f:21:14:7c:cf:7c:50:7a:fe:52:34:
                    35:b7:fa:fc:62:c7:5a:33:2f:50:25:9b:5e:98:51:
                    33:01:bb:67:e8:53:72:89:aa:5f:7e:a2:6b:85:49:
                    69:17:5e:cb:91:39:a4:f9:64:cb:08:27:19:e1:59:
                    98:34:9d:cc:14:51:a5:45:8d:01:84:1d:49:5a:1a:
                    68:94:44:ae:bb:bc:4b:50:72:8c:32:10:b4:b8:78:
                    fb:8e:74:40:d8:72:b4:86:b8:33:9a:7b:5c:b7:63:
                    b1:53:bc:54:02:15:e6:53:87:53:0e:e1:e0:5e:a4:
                    60:01:6b:85:73:49:1d:1e:ae:1a:12:84:62:d2:6f:
                    30:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:81:65:B1:40:15:41:00:81:E6:2F:41:4F:04:BA:4F:09:38:CA:D8
            X509v3 Authority Key Identifier:
                keyid:6A:41:E5:59:8C:15:DD:30:85:A3:2C:5C:38:EB:D8:C2:FA:47:F2:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33312e302f32342d3234203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:f7:f0:d5:74:10:81:5b:c1:d9:e9:e2:ac:68:0f:32:c9:3f:
         37:07:a9:c8:62:45:b3:e8:c7:0b:4c:74:a4:ae:74:55:74:9c:
         bb:23:cf:6a:45:3b:bf:f9:5e:03:cf:65:5e:50:07:5d:e9:ff:
         eb:99:56:ca:46:2d:76:e7:55:05:28:10:79:87:e0:1d:76:7e:
         db:6a:0e:81:89:7e:15:c0:f5:26:4b:72:13:14:2f:9f:99:c8:
         82:dd:e3:ae:bd:9e:d6:c9:89:c0:32:88:1b:d2:12:64:49:e7:
         35:1d:f8:d0:b7:a8:10:dd:c3:31:ff:73:0b:dd:12:b9:1b:b2:
         aa:7b:cb:e0:ee:ba:86:30:3a:56:95:27:91:e4:e1:04:4f:c4:
         5e:0a:aa:4f:93:8c:59:62:4d:64:b2:7b:aa:f7:be:3f:ba:41:
         16:a6:e9:83:5f:cf:34:44:55:83:59:c8:5b:41:03:a0:72:52:
         40:5a:22:39:0a:ea:d8:7e:48:d6:5a:75:e0:41:54:55:20:5a:
         c5:ac:10:87:f4:ef:ed:0a:13:2b:0c:e1:bb:ee:14:7a:8a:a8:
         59:6e:ca:7a:21:5d:13:71:46:d6:37:af:21:3b:4a:ac:f6:42:
         a4:d6:81:bb:54:2b:65:1e:ee:90:1a:d1:25:14:cd:f5:81:1c:
         4c:ce:df:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 20:49:08 2024 by rpki-client on console-ams.rpki-client.org