Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32312d3231203d3e203532363331.roa
File:                     3137372e3132382e32342e302f32312d3231203d3e203532363331.roa (raw, json)
Hash identifier:          L7FrrqDs15f7XgA+xYjYHDOl8Aw16pkPrabpm3TDfVw=
Subject key identifier:   56:DA:9A:0D:F4:6B:51:F7:72:28:6C:3C:01:4C:94:9D:43:67:17:E3
Certificate issuer:       /CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
Certificate serial:       4A6778BA7D05FE0DE178F91AC79B08D2B27BD43A
Authority key identifier: C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32312d3231203d3e203532363331.roa
Signing time:             Sat 03 May 2025 16:03:34 +0000
ROA not before:           Sat 03 May 2025 15:58:34 +0000
ROA not after:            Sat 02 May 2026 16:03:34 +0000
asID:                     52631
IP address blocks:        177.128.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 05 May 2025 11:59:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:67:78:ba:7d:05:fe:0d:e1:78:f9:1a:c7:9b:08:d2:b2:7b:d4:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
        Validity
            Not Before: May  3 15:58:34 2025 GMT
            Not After : May  2 16:03:34 2026 GMT
        Subject: CN=56DA9A0DF46B51F772286C3C014C949D436717E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:46:1d:e1:30:ea:03:d4:00:c8:10:ce:8d:7b:
                    f9:3f:55:90:a6:b5:92:f4:df:b8:70:c3:81:12:d5:
                    22:b4:f8:9e:fd:ba:33:14:69:b7:52:90:ad:f9:bd:
                    32:d9:87:12:91:d1:90:c5:27:a1:78:c9:ac:0f:45:
                    27:dd:a2:7b:e4:83:32:e2:d4:d4:8d:51:e1:9f:9c:
                    fe:05:3b:6f:dc:97:cd:c9:79:8a:41:45:92:b2:45:
                    eb:7f:95:0d:e0:54:85:32:67:97:79:2f:a5:66:39:
                    2f:b7:51:f6:ca:d2:90:a2:78:95:7e:34:2b:28:90:
                    f0:28:30:2f:94:d2:69:f5:7d:6e:ba:54:c5:00:10:
                    20:a6:5d:7e:53:6a:2f:35:b3:db:fd:47:f9:ce:e0:
                    55:70:75:0e:9f:22:51:5b:93:be:de:3c:d1:e5:dd:
                    9a:26:9f:24:7d:b2:70:67:c0:72:b3:af:40:bb:13:
                    fe:e1:af:9f:ee:65:02:86:d4:63:33:0e:22:ea:a7:
                    0d:c5:fe:e6:9b:ac:cc:4b:03:b6:94:6c:8d:b1:94:
                    38:ba:44:0f:c0:ec:b8:b2:3f:fe:86:f5:fe:7c:c3:
                    1c:07:5d:d4:ae:09:4d:49:6b:48:26:47:6b:e5:53:
                    25:71:e1:ef:19:50:4d:47:97:34:dc:3a:1c:52:5e:
                    ad:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:DA:9A:0D:F4:6B:51:F7:72:28:6C:3C:01:4C:94:9D:43:67:17:E3
            X509v3 Authority Key Identifier:
                keyid:C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32312d3231203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1a:a4:52:18:33:f1:19:95:30:ed:d3:93:f1:4f:6e:74:93:79:
         b7:ac:ef:ce:68:ef:43:46:8d:35:ef:69:a8:e0:9e:1c:db:a8:
         1c:a4:82:76:28:c1:8f:f5:1d:de:8f:7a:02:5d:d6:d7:ae:9a:
         ab:30:2c:54:a3:8d:85:e8:74:02:a6:a9:c9:56:03:97:d7:16:
         2b:67:fd:8a:0e:e9:f5:91:54:5b:fd:c8:c7:56:4b:03:4f:db:
         09:f7:45:8c:ab:44:de:b6:00:c5:6f:ea:78:07:c5:5b:06:6e:
         22:57:48:26:21:c5:d3:18:7e:8c:12:03:2b:f0:63:9b:cb:88:
         a5:45:99:13:36:d4:3e:9f:5c:5b:93:a7:f9:31:10:14:0f:71:
         de:17:82:99:0e:95:43:23:ef:77:5b:50:61:c7:e2:3a:15:79:
         61:8b:91:f8:f1:85:17:c7:db:c1:cf:7a:61:e1:51:3c:92:ae:
         5b:b2:d6:22:12:ae:0b:9a:46:c4:a4:2a:38:cd:a8:e1:ea:04:
         bf:85:60:43:7d:bc:8c:7e:25:9e:85:03:40:01:53:49:eb:f8:
         2c:ae:58:90:9f:be:c2:7c:cc:83:d2:ba:d3:ed:98:35:19:d8:
         44:3e:25:6d:21:c3:32:f1:00:df:34:ce:47:00:ce:73:95:06:
         49:9f:11:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 14:46:25 2025 by rpki-client