Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/3137372e3132392e3138382e302f32342d3234203d3e20323632353636.roa
File:                     3137372e3132392e3138382e302f32342d3234203d3e20323632353636.roa (raw, json)
Hash identifier:          4aX2Ev3aA8xG1TQFF7ZNa8sn8qOYGfrY5eN/RUMjwnc=
Subject key identifier:   1E:7D:C7:3B:09:53:81:47:FF:12:DB:54:95:33:58:32:A1:69:ED:6D
Certificate issuer:       /CN=C8232E7ADA2149C400868144F5DA83930BC26309
Certificate serial:       3D562923B924A68D6FABF0368DBFA44E42F0E1D1
Authority key identifier: C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/3137372e3132392e3138382e302f32342d3234203d3e20323632353636.roa
Signing time:             Thu 27 Mar 2025 18:15:56 +0000
ROA not before:           Thu 27 Mar 2025 18:10:56 +0000
ROA not after:            Thu 26 Mar 2026 18:15:56 +0000
asID:                     262566
IP address blocks:        177.129.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.crl
                          rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 02:50:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:56:29:23:b9:24:a6:8d:6f:ab:f0:36:8d:bf:a4:4e:42:f0:e1:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8232E7ADA2149C400868144F5DA83930BC26309
        Validity
            Not Before: Mar 27 18:10:56 2025 GMT
            Not After : Mar 26 18:15:56 2026 GMT
        Subject: CN=1E7DC73B09538147FF12DB5495335832A169ED6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:99:67:0c:89:b8:6a:2b:91:df:6c:0e:4b:5d:
                    a6:9a:d2:2e:68:71:c6:7e:58:da:fd:0e:c8:cc:0e:
                    8f:ca:d6:9f:78:0a:e1:ad:75:9b:94:c9:f5:71:f5:
                    bc:a0:2f:22:72:0a:07:cd:92:aa:95:09:15:6a:0d:
                    eb:71:80:28:26:db:f6:4a:b5:a0:3f:7d:e7:68:86:
                    5c:a4:e8:e1:05:5e:12:7a:d3:3a:50:46:80:bf:19:
                    a0:33:d6:3e:c6:8a:f6:27:06:c3:0d:31:e6:7d:66:
                    d1:bc:83:01:10:be:8f:97:9c:c3:2a:e7:97:7d:e9:
                    31:25:9b:14:03:c8:cf:cf:15:bb:2d:07:99:83:1e:
                    4c:6a:17:bd:d0:ac:d4:32:84:8d:b7:b5:4a:ef:42:
                    c4:ac:fb:3a:9f:dc:fe:0f:66:41:1a:93:79:e6:57:
                    29:d1:8e:e4:d5:71:58:17:c3:2d:ac:3c:75:e5:29:
                    bb:f6:32:fa:7c:9f:71:db:3a:47:13:63:61:67:4b:
                    ac:4b:34:b0:e6:73:22:fb:82:40:74:ec:af:b1:0c:
                    0f:ba:c3:90:6d:27:7c:03:26:d1:50:ca:a2:7b:10:
                    fe:42:e4:3d:bc:c0:3e:bf:18:a7:ca:77:2f:6d:41:
                    d4:0f:94:f7:5a:a2:7d:ed:77:1e:5b:69:81:c1:58:
                    fb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7D:C7:3B:09:53:81:47:FF:12:DB:54:95:33:58:32:A1:69:ED:6D
            X509v3 Authority Key Identifier:
                keyid:C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/3137372e3132392e3138382e302f32342d3234203d3e20323632353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:76:9a:4d:80:85:6e:81:5b:35:c3:af:5a:83:42:91:62:a8:
         6c:36:3a:34:ee:fc:bb:be:eb:b3:2b:f7:98:e6:a5:40:11:2a:
         04:0d:3d:ec:72:4c:ba:3b:7d:76:71:4f:c6:9d:05:c4:4c:c9:
         de:fe:51:a7:53:49:e8:a4:b3:d9:dc:ad:fe:23:91:18:a6:a5:
         ad:50:ec:ec:f6:ef:ae:72:b2:5c:2a:7b:68:4a:ff:e3:43:6e:
         c7:c3:0b:c3:84:09:a6:ad:e4:c6:1c:77:f5:e8:73:44:18:45:
         84:7f:b4:02:00:b1:e9:70:8c:56:b8:82:db:2f:d0:fc:5a:4c:
         a3:6d:18:86:f5:d6:da:53:cb:30:0f:03:b6:cc:46:97:2a:3f:
         db:f7:46:78:49:47:37:5b:c5:be:1f:bd:73:b4:a5:e9:1b:66:
         a7:12:00:f2:06:67:d0:bd:8f:e3:6f:e2:a5:be:c3:be:8f:aa:
         95:ca:ac:d5:52:49:71:f8:3d:e5:31:57:bb:9f:9a:47:31:84:
         16:2e:87:70:5a:11:1f:cd:5c:b7:45:0c:8a:62:68:3c:4b:23:
         22:44:c6:3a:8d:e3:62:f7:d4:84:6e:f2:8d:c9:1b:52:2f:ea:
         69:d8:a8:ef:6c:35:4c:55:99:f4:75:2f:e8:72:8b:48:9e:d7:
         13:93:68:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:20:55 2025 by rpki-client