Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32362e302f32332d3233203d3e203532363331.roa
File:                     3137372e3132382e32362e302f32332d3233203d3e203532363331.roa (raw, json)
Hash identifier:          AMRQ70Oq8ZcT8MCTbEUOTFdP6vPt/4YzBzUdRt4NksA=
Subject key identifier:   E6:84:CC:2B:36:55:89:09:68:22:C0:AD:F9:FF:22:9B:7B:A0:63:BB
Certificate issuer:       /CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
Certificate serial:       1886D55C04DA8F9ACD182D7693A661DB4EC9933A
Authority key identifier: C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32362e302f32332d3233203d3e203532363331.roa
Signing time:             Sat 03 May 2025 16:03:33 +0000
ROA not before:           Sat 03 May 2025 15:58:33 +0000
ROA not after:            Sat 02 May 2026 16:03:33 +0000
asID:                     52631
IP address blocks:        177.128.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 05 May 2025 11:59:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:86:d5:5c:04:da:8f:9a:cd:18:2d:76:93:a6:61:db:4e:c9:93:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
        Validity
            Not Before: May  3 15:58:33 2025 GMT
            Not After : May  2 16:03:33 2026 GMT
        Subject: CN=E684CC2B365589096822C0ADF9FF229B7BA063BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7b:93:ac:b1:69:48:05:d2:78:8d:2b:23:7c:
                    ab:ed:79:e3:97:f4:f8:76:5b:28:40:83:7b:90:94:
                    af:86:dd:1a:57:87:fb:f7:44:51:36:19:ce:39:d3:
                    70:ac:47:40:8b:29:6b:91:47:3d:cc:21:4b:dd:3f:
                    79:4c:fb:82:13:a8:4d:02:b1:e1:69:7f:dd:34:10:
                    a2:f5:0d:61:ca:60:7f:82:ec:55:be:22:4f:a3:04:
                    78:5a:83:c3:25:c4:b9:ee:8e:98:2f:4c:b1:de:d7:
                    85:3d:9f:51:ab:2d:a9:61:2c:bd:8f:f3:d7:44:be:
                    da:eb:58:ba:1e:ed:ca:5b:bb:b1:68:72:05:3e:04:
                    82:8c:a0:36:bb:41:94:cb:d2:0a:29:f1:87:26:67:
                    e2:b8:0f:d6:18:c7:70:72:f2:94:1d:10:db:e1:df:
                    6a:db:cf:4c:b8:f4:54:71:6f:06:ed:bd:74:8b:8a:
                    f4:55:c6:54:16:c5:49:0d:34:bd:8c:36:03:66:46:
                    bc:e4:f7:e9:fb:76:11:9c:11:a4:44:89:9f:dd:96:
                    df:48:b8:b6:28:00:77:dd:1a:e6:b5:3b:71:35:21:
                    18:5e:6c:b2:4d:15:20:2b:34:28:3c:99:ad:27:d3:
                    c2:47:67:58:38:75:bf:57:71:89:8c:5e:41:12:91:
                    b0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:84:CC:2B:36:55:89:09:68:22:C0:AD:F9:FF:22:9B:7B:A0:63:BB
            X509v3 Authority Key Identifier:
                keyid:C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32362e302f32332d3233203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:e8:46:e6:33:10:ef:7f:00:0d:1a:32:b9:78:bc:f1:5a:c0:
         62:27:67:bb:00:3e:ad:1c:68:60:dd:4a:4d:f2:c6:15:38:c0:
         c6:b2:24:a4:88:65:c5:9a:31:12:77:66:fb:71:3b:dc:72:4c:
         80:7b:92:e8:90:65:bc:33:6c:5e:a5:f1:a6:d5:75:cb:49:70:
         57:4e:f5:29:5f:79:36:6c:b6:36:9a:0a:84:97:f1:de:ba:2d:
         12:69:c4:0a:3a:0c:ad:1c:3f:c6:0a:7e:4c:c1:a0:7e:6a:87:
         53:56:4f:c6:e2:cf:9e:b1:17:38:94:63:0b:60:36:12:d0:c9:
         22:cd:ed:8d:ac:16:ab:ef:9e:80:f7:9a:36:f2:83:92:f2:8f:
         d2:34:17:1a:cf:44:ce:72:b9:68:cf:9b:af:4f:33:14:7d:8e:
         42:23:09:b2:3c:2a:90:e7:9b:4d:bf:e0:bc:c2:01:c9:6e:ac:
         2f:04:56:2f:2d:70:76:ec:95:56:9a:ff:d3:b4:e8:a1:2f:7a:
         54:d0:0b:7c:56:ab:8c:99:0b:c4:1a:f4:62:3b:64:55:57:6c:
         64:b0:7c:1f:27:a3:3c:e3:45:02:00:a7:8c:de:ff:71:6f:cd:
         bd:86:1c:af:b2:9c:00:39:e7:6e:45:9b:9b:d7:0e:75:f7:69:
         e5:e1:eb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 14:46:09 2025 by rpki-client