Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/3137372e31302e32342e302f32322d3234203d3e20323632383431.roa
File:                     3137372e31302e32342e302f32322d3234203d3e20323632383431.roa (raw, json)
Hash identifier:          U+A01WCuvZZPHwlM0t2T4L3RVjEHPKcBpkgoSeAHY4M=
Subject key identifier:   79:94:55:85:31:9D:09:6B:DA:10:1F:92:64:04:8B:45:E5:CB:3D:AA
Certificate issuer:       /CN=9E1D7C478D880E093C83DCBE1DE40DE88EF8546F
Certificate serial:       514FA8B0F92932D3D93147F62DDD15D0570925BF
Authority key identifier: 9E:1D:7C:47:8D:88:0E:09:3C:83:DC:BE:1D:E4:0D:E8:8E:F8:54:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/3137372e31302e32342e302f32322d3234203d3e20323632383431.roa
Signing time:             Thu 06 Mar 2025 15:31:19 +0000
ROA not before:           Thu 06 Mar 2025 15:26:19 +0000
ROA not after:            Thu 05 Mar 2026 15:31:19 +0000
asID:                     262841
IP address blocks:        177.10.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.crl
                          rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 03:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:4f:a8:b0:f9:29:32:d3:d9:31:47:f6:2d:dd:15:d0:57:09:25:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E1D7C478D880E093C83DCBE1DE40DE88EF8546F
        Validity
            Not Before: Mar  6 15:26:19 2025 GMT
            Not After : Mar  5 15:31:19 2026 GMT
        Subject: CN=79945585319D096BDA101F9264048B45E5CB3DAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:28:7f:18:8c:e4:97:d9:36:5f:0c:bc:e0:0d:
                    81:e3:c9:e5:25:0f:90:99:56:8b:f7:e1:1e:5c:70:
                    37:3c:f6:f7:a0:25:a8:70:af:0c:d7:e3:2e:54:82:
                    d8:d8:a3:61:32:d8:19:de:50:da:36:26:b0:6a:8d:
                    bd:05:cd:0b:de:52:c4:a4:69:33:19:1d:4c:3f:26:
                    a5:58:40:61:20:da:9b:d1:6d:23:00:25:99:1d:4e:
                    83:e5:23:9b:dc:0f:06:b3:b4:94:c4:0e:2e:f1:8c:
                    29:01:7b:93:e2:5c:30:5c:ab:e0:c1:74:f6:bb:e9:
                    30:c2:44:dc:cf:6c:2c:ca:58:11:40:54:1c:73:1b:
                    c9:d8:54:1f:41:b3:58:57:50:30:54:a1:84:2e:cb:
                    da:60:20:34:f2:6c:37:c3:c0:27:54:70:55:72:38:
                    88:51:39:1b:20:22:1d:f6:ba:f6:ba:7b:ed:fe:d4:
                    84:8d:78:d4:78:4d:d0:1b:4d:3f:e3:c9:fa:65:37:
                    11:bb:88:13:02:cc:0d:5e:84:34:bd:2e:f3:4b:02:
                    2e:07:7f:3f:32:26:ef:ce:03:ba:1f:59:3b:a4:57:
                    23:36:1b:f0:85:14:08:c9:90:48:7c:a2:03:56:78:
                    41:19:90:63:b3:d5:74:9a:5d:89:35:cd:13:5d:33:
                    d9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:94:55:85:31:9D:09:6B:DA:10:1F:92:64:04:8B:45:E5:CB:3D:AA
            X509v3 Authority Key Identifier:
                keyid:9E:1D:7C:47:8D:88:0E:09:3C:83:DC:BE:1D:E4:0D:E8:8E:F8:54:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/3137372e31302e32342e302f32322d3234203d3e20323632383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:42:f1:a0:03:ad:22:08:f8:66:ab:f0:5a:a9:23:70:c9:b4:
         40:71:ef:45:6e:ea:4a:6b:bd:6f:43:f4:15:61:f8:fe:60:1e:
         41:6f:22:2b:4f:7d:4d:3e:4d:c7:b4:1d:08:d1:16:d7:d0:33:
         1f:9f:6e:86:63:17:b2:ff:0f:ec:98:26:c4:71:34:f5:9d:4f:
         10:62:da:19:7a:55:57:f9:78:7a:98:3b:99:c1:06:56:3e:ff:
         35:2f:f9:2e:19:6c:76:47:e4:9b:7a:b3:5f:64:76:98:76:c3:
         c0:08:93:f7:10:3c:aa:f7:00:c9:fe:14:8e:43:48:aa:02:df:
         06:1f:07:5a:6c:97:8c:74:e6:a7:dc:6b:bb:b9:48:d7:6f:df:
         10:1f:fa:67:05:e3:d3:9a:49:7c:ad:b7:96:6e:42:0a:c8:e1:
         70:73:b5:5c:e3:af:2b:01:31:89:e4:32:f8:cd:69:3b:cd:b1:
         c5:61:44:55:ce:b1:ab:66:a8:74:0b:db:c5:c3:8a:76:6b:c1:
         c8:71:46:24:cb:19:bf:05:8f:22:8e:b1:ca:3f:70:84:56:3d:
         18:ac:db:a7:72:a3:df:da:32:ec:a1:88:fa:51:e8:ae:d1:3e:
         67:26:4f:47:f5:cf:07:9e:42:61:85:25:f1:46:ea:6a:44:0a:
         76:5d:50:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:30:45 2025 by rpki-client