Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38302e302f32342d3332203d3e203532353237.roa
File:                     3137372e3135322e38302e302f32342d3332203d3e203532353237.roa (raw, json)
Hash identifier:          DUCDaHQON74vAH0t2tgHECN8DoEF2tgVQTZZwdI0gLE=
Subject key identifier:   23:58:06:EE:F2:6C:4E:93:D1:CC:5B:2B:85:CB:0C:2C:6C:07:D0:7B
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       16BC1268AC5BA1B47C8D708C7A1E9132929E701D
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38302e302f32342d3332203d3e203532353237.roa
Signing time:             Fri 07 Feb 2025 16:59:05 +0000
ROA not before:           Fri 07 Feb 2025 16:54:05 +0000
ROA not after:            Fri 06 Feb 2026 16:59:05 +0000
asID:                     52527
IP address blocks:        177.152.80.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl
                          rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 02:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:bc:12:68:ac:5b:a1:b4:7c:8d:70:8c:7a:1e:91:32:92:9e:70:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Feb  7 16:54:05 2025 GMT
            Not After : Feb  6 16:59:05 2026 GMT
        Subject: CN=235806EEF26C4E93D1CC5B2B85CB0C2C6C07D07B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c0:03:c0:19:b3:ed:29:54:98:e3:18:0b:c3:
                    08:9f:98:5f:1b:5e:c9:a1:80:54:cc:86:c0:b4:52:
                    52:a3:07:34:c8:9a:48:7c:91:ca:5e:e8:d6:61:df:
                    6b:de:4e:9e:2d:08:43:7c:2d:4c:ef:2c:32:f8:84:
                    30:b2:51:ce:5c:1e:f5:9f:88:ea:59:fe:c5:d7:86:
                    fe:76:21:74:ab:0e:ce:96:b2:dd:80:8d:e0:48:07:
                    be:8b:7e:5d:be:65:28:26:65:c0:06:dd:4d:d8:3a:
                    d6:89:6c:53:ff:5b:c8:cf:50:41:d8:56:e3:1d:80:
                    e4:50:51:14:f9:c6:16:7e:ca:79:71:39:1c:9a:19:
                    81:37:ba:ab:2e:82:d7:cb:1d:58:6a:a5:35:09:54:
                    ae:45:e9:1b:27:a8:28:76:9a:1b:02:58:3c:3e:1c:
                    68:db:17:0f:5b:fb:16:aa:10:d5:14:0d:df:0c:66:
                    7e:b1:9f:26:f0:37:bf:e7:24:c9:e6:c2:1c:31:81:
                    f5:6a:26:69:3a:c9:56:b4:10:0e:0c:0e:57:9e:fc:
                    ad:04:c9:e9:44:a4:10:78:24:84:bd:8f:4d:ea:49:
                    0a:25:7b:9a:f8:cd:8e:89:4d:88:02:f3:68:ab:8b:
                    e9:01:f9:1a:df:d6:92:30:19:d3:b5:31:9a:23:07:
                    24:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:58:06:EE:F2:6C:4E:93:D1:CC:5B:2B:85:CB:0C:2C:6C:07:D0:7B
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38302e302f32342d3332203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:7d:6c:1e:f3:0e:4c:05:27:ac:a6:88:5f:5c:bf:48:5c:fe:
         c2:ba:17:6e:c4:66:81:fa:4a:36:14:7b:f7:c7:a4:6a:b8:78:
         9a:6d:64:67:8f:b2:2b:23:41:c6:48:14:d5:bd:e3:e5:42:96:
         3a:a9:fd:cd:fc:7b:35:30:18:30:4e:61:f7:f3:ea:f7:52:7f:
         6e:0f:2b:e2:67:d8:bb:af:43:1b:cf:fc:0f:ff:1f:b9:40:7a:
         d0:13:19:72:ac:c4:bc:62:c5:1a:33:a7:1b:7e:83:37:9a:a7:
         5b:cf:57:b1:aa:fe:0d:3b:18:d2:76:84:f8:de:90:09:e4:b0:
         fb:33:7b:66:ed:00:a2:9d:0a:dc:4b:4b:3d:2e:46:d9:c9:81:
         6b:eb:f2:8a:55:fd:9a:0a:2c:2c:82:4b:86:ce:74:7e:64:cf:
         32:b5:4d:07:b7:9e:6f:51:f2:3e:f3:01:69:f2:49:22:60:c8:
         cb:62:b4:ba:ed:bf:51:cd:90:fe:22:55:32:05:15:c1:9b:4e:
         a4:1d:5d:c0:2c:8c:2b:2c:ce:ae:84:4d:1a:da:2c:72:5e:09:
         45:86:9a:3e:14:b4:de:4b:20:95:f3:bd:82:ba:1e:31:0a:74:
         3e:20:45:8d:a2:43:27:cc:0b:db:52:45:ee:7a:d7:a9:3f:0e:
         73:aa:7c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:56:48 2025 by rpki-client