Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/3138372e38342e3132372e302f32342d3234203d3e20323731303333.roa
File:                     3138372e38342e3132372e302f32342d3234203d3e20323731303333.roa (raw, json)
Hash identifier:          3bmEBpuiUnKim8NmMh/PgUVQqKur+c74VzBnlVaevm0=
Subject key identifier:   DF:6B:A4:28:5B:59:5D:17:B6:72:83:60:CB:CD:BC:38:10:67:54:44
Certificate issuer:       /CN=B91DF15E0342DBD1AB58797AF188E016532F7C4E
Certificate serial:       2F9714AFD00594525FDC8546F4F42180CD3344FD
Authority key identifier: B9:1D:F1:5E:03:42:DB:D1:AB:58:79:7A:F1:88:E0:16:53:2F:7C:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/3138372e38342e3132372e302f32342d3234203d3e20323731303333.roa
Signing time:             Wed 05 Mar 2025 19:33:10 +0000
ROA not before:           Wed 05 Mar 2025 19:28:10 +0000
ROA not after:            Wed 04 Mar 2026 19:33:10 +0000
asID:                     271033
IP address blocks:        187.84.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.crl
                          rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:97:14:af:d0:05:94:52:5f:dc:85:46:f4:f4:21:80:cd:33:44:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B91DF15E0342DBD1AB58797AF188E016532F7C4E
        Validity
            Not Before: Mar  5 19:28:10 2025 GMT
            Not After : Mar  4 19:33:10 2026 GMT
        Subject: CN=DF6BA4285B595D17B6728360CBCDBC3810675444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:45:6c:29:fd:9e:e1:7c:5c:a8:8e:91:46:2b:
                    55:5e:73:7e:7f:e4:72:11:6d:9a:ab:e6:c0:a9:28:
                    b1:0e:3d:67:0b:b1:ff:f0:62:25:3f:05:df:0b:51:
                    40:d4:1b:cc:a4:96:7f:e2:02:ff:d6:76:93:71:bf:
                    87:57:2d:89:0c:eb:d8:90:45:b6:09:89:19:0b:a1:
                    25:d1:99:2b:bc:bb:16:a2:6f:93:33:10:10:3d:19:
                    91:c7:f7:5e:e6:b3:9a:0e:fe:04:31:55:c3:aa:9f:
                    66:ab:9b:4e:78:09:08:d6:98:98:ab:02:e9:72:da:
                    f7:e4:65:bd:09:2b:85:e5:70:6b:d9:1d:8e:f3:2c:
                    93:58:79:bc:4d:72:c4:f9:d4:8f:d4:63:80:79:66:
                    5e:bd:ea:55:86:d4:65:95:79:54:1d:73:e5:70:30:
                    b6:e9:99:01:52:af:8b:95:2f:0c:0b:60:83:cf:aa:
                    89:11:af:c0:02:ce:02:52:40:b2:ce:2c:1f:8e:41:
                    dc:9b:c6:db:ce:c6:50:84:59:42:93:5b:27:01:80:
                    ad:90:b7:e9:a6:d8:d0:fb:cc:c4:eb:c9:b1:fa:2e:
                    29:aa:8b:6c:eb:ca:ba:5a:fb:6f:26:fd:02:a7:a1:
                    f0:80:38:fe:f2:24:6f:ba:c6:e7:59:83:47:53:35:
                    81:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6B:A4:28:5B:59:5D:17:B6:72:83:60:CB:CD:BC:38:10:67:54:44
            X509v3 Authority Key Identifier:
                keyid:B9:1D:F1:5E:03:42:DB:D1:AB:58:79:7A:F1:88:E0:16:53:2F:7C:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/3138372e38342e3132372e302f32342d3234203d3e20323731303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:97:f6:99:0d:8f:cf:d4:59:28:dc:b7:49:28:c8:36:9b:b7:
         48:1c:9a:91:2f:2a:28:eb:c1:67:1b:04:53:65:d5:de:80:b4:
         bb:5f:51:50:73:53:fb:0d:f3:c1:fe:34:69:19:c6:90:77:1f:
         de:94:70:48:c1:10:b5:91:1a:7f:8a:ab:17:c4:84:b9:37:6e:
         f1:b7:83:0b:34:65:77:73:53:ab:fa:35:17:6f:58:8f:3c:57:
         04:2e:d9:3e:10:03:e8:1f:59:7b:5e:d1:c1:fb:8b:34:b4:d9:
         9d:b1:69:bc:a0:9f:ed:7d:99:8d:54:a8:9d:1e:85:53:43:90:
         64:08:b1:0a:0f:9f:54:84:a5:36:94:2a:f3:67:4d:f7:03:42:
         78:eb:97:2f:2f:33:0a:21:bb:b9:cf:40:e6:ff:e6:b0:3c:b9:
         2e:23:fb:17:df:f0:18:f5:57:0d:c2:5e:4a:6b:9b:86:8c:8b:
         8a:84:11:0e:5a:ef:75:ca:72:ba:22:04:6b:30:bd:70:e1:1e:
         94:cd:4f:bd:05:03:ea:f4:29:a6:52:e2:da:48:70:0e:37:5e:
         d9:ad:a2:6b:4f:0e:4b:7a:7b:30:b5:16:04:f4:f0:bd:4c:b3:
         61:81:69:71:6d:5e:b0:20:bf:9d:03:c0:1e:ad:da:1c:23:64:
         7b:26:af:b0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUL5cUr9AFlFJf3IVG9PQhgM0zRP0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjkxREYxNUUwMzQyREJEMUFCNTg3OTdBRjE4OEUwMTY1
MzJGN0M0RTAeFw0yNTAzMDUxOTI4MTBaFw0yNjAzMDQxOTMzMTBaMDMxMTAvBgNV
BAMTKERGNkJBNDI4NUI1OTVEMTdCNjcyODM2MENCQ0RCQzM4MTA2NzU0NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClRWwp/Z7hfFyojpFGK1Vec35/
5HIRbZqr5sCpKLEOPWcLsf/wYiU/Bd8LUUDUG8ykln/iAv/WdpNxv4dXLYkM69iQ
RbYJiRkLoSXRmSu8uxaib5MzEBA9GZHH917ms5oO/gQxVcOqn2arm054CQjWmJir
Auly2vfkZb0JK4XlcGvZHY7zLJNYebxNcsT51I/UY4B5Zl696lWG1GWVeVQdc+Vw
MLbpmQFSr4uVLwwLYIPPqokRr8ACzgJSQLLOLB+OQdybxtvOxlCEWUKTWycBgK2Q
t+mm2ND7zMTrybH6Limqi2zryrpa+28m/QKnofCAOP7yJG+6xudZg0dTNYE7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU32ukKFtZXRe2coNgy828OBBnVEQwHwYDVR0j
BBgwFoAUuR3xXgNC29GrWHl68YjgFlMvfE4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFhMbUtHcWd0WnYzVEptcEJ0OHhuN01GOXRmRTRYTkRrcXZSNEcxYVly
Z3UvMS9COTFERjE1RTAzNDJEQkQxQUI1ODc5N0FGMTg4RTAxNjUzMkY3QzRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5MURGMTVFMDM0MkRCRDFB
QjU4Nzk3QUYxODhFMDE2NTMyRjdDNEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hYTG1LR3FndFp2M1RKbXBCdDh4bjdNRjl0ZkU0WE5Ea3F2UjRHMWFZcmd1LzEv
MzEzODM3MmUzODM0MmUzMTMyMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMDMzMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7VH8wDQYJKoZIhvcNAQELBQADggEBADqX9pkN
j8/UWSjct0koyDabt0gcmpEvKijrwWcbBFNl1d6AtLtfUVBzU/sN88H+NGkZxpB3
H96UcEjBELWRGn+KqxfEhLk3bvG3gws0ZXdzU6v6NRdvWI88VwQu2T4QA+gfWXte
0cH7izS02Z2xabygn+19mY1UqJ0ehVNDkGQIsQoPn1SEpTaUKvNnTfcDQnjrly8v
Mwohu7nPQOb/5rA8uS4j+xff8Bj1Vw3CXkprm4aMi4qEEQ5a73XKcroiBGswvXDh
HpTNT70FA+r0KaZS4tpIcA43XtmtomtPDkt6ezC1FgT08L1Ms2GBaXFtXrAgv50D
wB6t2hwjZHsmr7A=
-----END CERTIFICATE-----
Generated at Fri Apr 18 08:14:45 2025 by rpki-client