Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32332d3233203d3e203532363331.roa
File:                     3137372e3132382e32342e302f32332d3233203d3e203532363331.roa (raw, json)
Hash identifier:          8E01LtSLyt/w7H0kkMFiDeqMAnEX0hRd3wzKVgisZgc=
Subject key identifier:   9C:DB:36:2A:C5:17:68:C2:7E:8D:99:E9:A1:F7:D1:3E:FF:C5:C1:C3
Certificate issuer:       /CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
Certificate serial:       4E93BCEB86860C86D9047ED4A533B94E6118A909
Authority key identifier: C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32332d3233203d3e203532363331.roa
Signing time:             Sat 03 May 2025 16:03:33 +0000
ROA not before:           Sat 03 May 2025 15:58:33 +0000
ROA not after:            Sat 02 May 2026 16:03:33 +0000
asID:                     52631
IP address blocks:        177.128.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 16:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:93:bc:eb:86:86:0c:86:d9:04:7e:d4:a5:33:b9:4e:61:18:a9:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
        Validity
            Not Before: May  3 15:58:33 2025 GMT
            Not After : May  2 16:03:33 2026 GMT
        Subject: CN=9CDB362AC51768C27E8D99E9A1F7D13EFFC5C1C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:aa:b9:35:44:c9:59:ee:cc:2e:78:55:19:81:
                    4e:eb:6f:bd:26:e1:a7:7a:2d:0e:87:61:47:b0:ba:
                    0d:5d:ca:8d:84:8d:a6:48:06:c5:50:5f:f8:24:2b:
                    f4:35:a9:d8:58:f4:6e:7f:c0:eb:c3:de:a1:47:4b:
                    36:34:ae:c1:f2:6f:f1:85:4b:55:14:62:83:f6:9d:
                    3c:48:b6:a7:37:b7:a1:6e:d9:e5:36:63:b2:6b:f0:
                    f7:a9:46:09:bd:97:93:59:15:9c:cc:76:fd:02:93:
                    ff:87:98:e3:e1:cf:02:98:e9:32:44:96:cd:31:1d:
                    a4:9a:d6:b2:6e:c3:ff:46:c7:48:80:73:f3:87:34:
                    0b:3d:23:54:c4:07:e9:43:66:c0:fc:fc:f1:e9:13:
                    f6:ae:a3:b6:22:d8:b6:8e:de:14:3c:1e:89:32:9e:
                    f4:6a:42:ec:5c:55:80:16:d7:df:64:07:93:56:f2:
                    ba:6c:89:d2:e5:0c:e3:39:fc:7d:9e:4d:06:1d:24:
                    24:26:69:8e:89:0b:4c:05:35:25:f8:8e:3d:f2:ee:
                    bc:a9:43:74:55:3a:84:de:af:45:d2:7f:b2:b6:a9:
                    c5:33:31:60:40:b3:3e:61:dc:c5:de:13:ca:6d:da:
                    65:97:d0:5b:9e:ec:83:33:11:b2:8d:06:73:37:4f:
                    18:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:DB:36:2A:C5:17:68:C2:7E:8D:99:E9:A1:F7:D1:3E:FF:C5:C1:C3
            X509v3 Authority Key Identifier:
                keyid:C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32332d3233203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:7b:28:61:5f:4d:00:aa:cc:05:57:29:96:f9:4a:80:27:63:
         bb:a7:51:51:da:b5:0e:f7:77:61:6d:97:25:90:44:fa:7e:ca:
         39:9f:30:01:16:1f:3e:a4:2e:fe:0c:17:91:3b:6a:37:78:e6:
         ce:22:4c:69:ba:eb:bd:7a:8e:d8:88:3d:f4:f2:a0:8b:85:87:
         c7:c1:b4:83:b9:4a:43:05:9e:56:c0:99:d9:db:19:f6:0e:9c:
         89:3a:39:20:06:17:d9:0d:d8:bc:cb:f0:ec:0b:49:ca:ee:8c:
         c9:43:00:be:13:f9:6b:29:2d:76:0b:fc:dd:54:01:d9:54:34:
         29:6e:cb:d1:5a:dd:60:ec:26:c4:7e:4b:65:cf:95:29:05:97:
         da:a2:9b:66:7e:42:8c:a3:13:42:fa:51:bb:d9:88:7e:be:2c:
         f2:0a:7a:c6:a5:cb:fe:b5:f4:fa:c2:c1:da:50:0f:c0:27:44:
         fe:4a:f8:dc:9b:dd:57:46:e7:e5:63:e9:57:5e:87:d9:34:81:
         d9:ef:fb:d8:ab:15:fa:30:1e:96:8d:fb:73:9c:6c:1a:01:47:
         4e:ce:93:e0:c4:a1:b6:57:29:96:ff:0e:03:a7:d6:9a:3c:81:
         05:36:c7:13:36:3a:a8:e6:81:49:1b:8b:39:24:d5:43:96:2b:
         f9:28:99:c6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTpO864aGDIbZBH7UpTO5TmEYqQkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY3RjgwREE4QTkwRTkyQzg5NUNDNDIyREU1QTdDOTU1
OEVDNjRFQzAeFw0yNTA1MDMxNTU4MzNaFw0yNjA1MDIxNjAzMzNaMDMxMTAvBgNV
BAMTKDlDREIzNjJBQzUxNzY4QzI3RThEOTlFOUExRjdEMTNFRkZDNUMxQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcqrk1RMlZ7swueFUZgU7rb70m
4ad6LQ6HYUewug1dyo2EjaZIBsVQX/gkK/Q1qdhY9G5/wOvD3qFHSzY0rsHyb/GF
S1UUYoP2nTxItqc3t6Fu2eU2Y7Jr8PepRgm9l5NZFZzMdv0Ck/+HmOPhzwKY6TJE
ls0xHaSa1rJuw/9Gx0iAc/OHNAs9I1TEB+lDZsD8/PHpE/auo7Yi2LaO3hQ8Hoky
nvRqQuxcVYAW199kB5NW8rpsidLlDOM5/H2eTQYdJCQmaY6JC0wFNSX4jj3y7ryp
Q3RVOoTer0XSf7K2qcUzMWBAsz5h3MXeE8pt2mWX0Fue7IMzEbKNBnM3TxivAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUnNs2KsUXaMJ+jZnpoffRPv/FwcMwHwYDVR0j
BBgwFoAUxn+A2oqQ6SyJXMQi3lp8lVjsZOwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEdueEgzaDhvWWg2cWlmMlRrcXh5NXpCOWFYMVBtQXlFUjJ4RTR1ZXht
dVcvMC9DNjdGODBEQThBOTBFOTJDODk1Q0M0MjJERTVBN0M5NTU4RUM2NEVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M2N0Y4MERBOEE5MEU5MkM4
OTVDQzQyMkRFNUE3Qzk1NThFQzY0RUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hHbnhIM2g4b1loNnFpZjJUa3F4eTV6QjlhWDFQbUF5RVIyeEU0dWV4bXVXLzAv
MzEzNzM3MmUzMTMyMzgyZTMyMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMy
MzYzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsYAYMA0GCSqGSIb3DQEBCwUAA4IBAQAOeyhhX00A
qswFVymW+UqAJ2O7p1FR2rUO93dhbZclkET6fso5nzABFh8+pC7+DBeRO2o3eObO
Ikxpuuu9eo7YiD308qCLhYfHwbSDuUpDBZ5WwJnZ2xn2DpyJOjkgBhfZDdi8y/Ds
C0nK7ozJQwC+E/lrKS12C/zdVAHZVDQpbsvRWt1g7CbEfktlz5UpBZfaoptmfkKM
oxNC+lG72Yh+vizyCnrGpcv+tfT6wsHaUA/AJ0T+Svjcm91XRuflY+lXXofZNIHZ
7/vYqxX6MB6WjftznGwaAUdOzpPgxKG2VymW/w4Dp9aaPIEFNscTNjqo5oFJG4s5
JNVDliv5KJnG
-----END CERTIFICATE-----
Generated at Sun May 4 07:48:34 2025 by rpki-client