Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/3137372e3132392e3138342e302f32312d3231203d3e20323632353636.roa
File:                     3137372e3132392e3138342e302f32312d3231203d3e20323632353636.roa (raw, json)
Hash identifier:          GbDffagYs00MWWMDpBe+Y55qROzfvqImbS8RGzdLSFU=
Subject key identifier:   B5:5E:B1:29:F4:C0:C2:C9:91:6E:6A:BF:FD:5C:B3:A5:F2:9A:D5:CC
Certificate issuer:       /CN=C8232E7ADA2149C400868144F5DA83930BC26309
Certificate serial:       5D3CCC0CC76F5F7FC05C3419D367C249A9389E34
Authority key identifier: C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/3137372e3132392e3138342e302f32312d3231203d3e20323632353636.roa
Signing time:             Thu 27 Mar 2025 18:15:54 +0000
ROA not before:           Thu 27 Mar 2025 18:10:54 +0000
ROA not after:            Thu 26 Mar 2026 18:15:54 +0000
asID:                     262566
IP address blocks:        177.129.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.crl
                          rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 02:50:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:3c:cc:0c:c7:6f:5f:7f:c0:5c:34:19:d3:67:c2:49:a9:38:9e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8232E7ADA2149C400868144F5DA83930BC26309
        Validity
            Not Before: Mar 27 18:10:54 2025 GMT
            Not After : Mar 26 18:15:54 2026 GMT
        Subject: CN=B55EB129F4C0C2C9916E6ABFFD5CB3A5F29AD5CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3a:47:7e:c1:5b:fb:7b:46:f2:d5:fa:7a:f4:
                    ea:74:cc:d2:b3:3b:ef:d0:87:67:f4:0d:5c:5f:96:
                    a5:cd:61:65:b5:09:82:32:e3:76:1d:f6:f9:91:2f:
                    ef:34:a3:1a:66:d2:b2:33:f0:8f:09:e7:86:34:a5:
                    7f:5b:d9:15:9e:90:d4:20:7c:33:84:88:ea:a1:1d:
                    90:a9:0c:0a:2d:4d:91:a7:2f:60:30:a8:9f:55:73:
                    c6:02:4f:05:a6:9d:99:df:dc:7e:80:f9:c8:c1:bb:
                    fd:26:fc:5b:59:fa:a7:e3:fe:0f:58:19:12:32:2f:
                    fa:70:4c:f9:e9:0f:e9:ec:c6:d4:0b:26:1d:f5:77:
                    c0:a7:26:0c:e8:11:c4:dc:68:10:67:13:03:dd:7b:
                    25:1b:fe:c7:80:1b:e8:e4:94:71:79:17:5d:70:38:
                    54:9b:5e:06:f6:07:2d:ba:45:dd:e8:8b:8c:c3:d3:
                    e5:2b:b1:d8:b2:48:56:d8:3c:77:98:08:e9:76:a5:
                    f1:90:ca:f5:4c:42:91:0c:28:ba:65:94:69:ce:03:
                    33:23:aa:80:2d:58:9f:06:51:81:d9:d8:f2:d5:89:
                    56:f6:9d:32:d7:b4:0f:2b:2e:78:91:b6:e0:ef:99:
                    1c:89:9d:09:d0:3c:d6:49:d0:fa:25:ce:c9:52:db:
                    70:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5E:B1:29:F4:C0:C2:C9:91:6E:6A:BF:FD:5C:B3:A5:F2:9A:D5:CC
            X509v3 Authority Key Identifier:
                keyid:C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/3137372e3132392e3138342e302f32312d3231203d3e20323632353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a4:88:fb:cf:dc:c5:f9:a5:3b:42:ad:4a:f0:ec:0a:78:63:0a:
         a3:a6:3c:28:fa:13:fd:2a:fc:4b:53:79:f5:9b:cc:6c:d0:c5:
         4b:9b:17:a0:6b:9e:68:82:ed:e0:e2:aa:a8:01:72:37:85:88:
         4d:6f:c6:50:99:9e:7a:87:56:59:02:53:68:76:c9:48:0c:bb:
         04:a3:55:05:7e:e4:fc:cd:7e:2c:7c:6a:64:22:b0:0d:06:01:
         f9:86:af:a9:bb:91:8b:2d:f9:1d:01:d4:38:33:98:07:f6:32:
         6e:a1:6a:0c:54:d0:3d:4a:05:51:9b:8f:8b:b2:02:8d:ff:eb:
         b4:ad:f4:1f:58:ae:41:b9:37:47:1d:bb:71:f1:66:a6:c2:a6:
         c1:f7:a1:d0:7b:bb:ec:82:14:61:b8:90:b3:80:43:a1:69:b1:
         b0:2f:fb:12:e5:55:2a:29:fd:c1:a5:bf:ab:85:e7:8c:d1:fe:
         9a:c5:7a:8c:18:f8:7c:6d:f4:ea:40:73:bd:d2:36:9e:33:cd:
         88:8b:9a:a9:66:15:28:79:9e:25:90:5d:c7:f2:94:ba:df:fd:
         c0:99:cb:9b:c9:34:80:db:e5:46:66:d1:60:2d:de:80:e3:9b:
         90:4a:fe:50:8b:41:fd:b7:50:ea:da:c6:01:35:46:0c:8f:2f:
         8b:a5:64:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:15:05 2025 by rpki-client