Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32362e302f32342d3234203d3e203532363331.roa
File:                     3137372e3132382e32362e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier:          IbBXjtorDdQZvdCSOx3OiVigwYt0Sanog/LCpF5blNI=
Subject key identifier:   B3:36:A0:E5:7F:8C:CD:3E:5B:D8:BE:C5:27:02:C7:A4:84:BF:F0:99
Certificate issuer:       /CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
Certificate serial:       426C5DA9C2639468C92994E966D05B1E52499445
Authority key identifier: C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32362e302f32342d3234203d3e203532363331.roa
Signing time:             Sat 03 May 2025 16:03:33 +0000
ROA not before:           Sat 03 May 2025 15:58:33 +0000
ROA not after:            Sat 02 May 2026 16:03:33 +0000
asID:                     52631
IP address blocks:        177.128.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 23:11:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:6c:5d:a9:c2:63:94:68:c9:29:94:e9:66:d0:5b:1e:52:49:94:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
        Validity
            Not Before: May  3 15:58:33 2025 GMT
            Not After : May  2 16:03:33 2026 GMT
        Subject: CN=B336A0E57F8CCD3E5BD8BEC52702C7A484BFF099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4c:ac:99:c5:f8:40:ae:58:17:be:00:5e:96:
                    1d:2b:20:9b:f6:68:ad:4d:2f:70:6d:d7:ec:67:fb:
                    7c:a2:af:33:80:c5:0e:63:c9:32:0b:1a:f9:fc:02:
                    36:4e:6b:2b:06:c6:17:ad:c7:fd:b4:d3:56:c4:b7:
                    16:09:38:42:a6:fe:24:e2:d5:b6:d7:71:fc:17:13:
                    11:5a:a7:06:2c:ab:39:1a:4e:74:47:ab:c2:2e:ae:
                    5e:ab:06:4f:a1:57:e8:b9:34:dc:05:de:4f:71:00:
                    d5:45:d6:ac:9a:21:f5:c9:97:cd:05:f1:66:1c:99:
                    d7:38:4a:18:8f:52:40:2d:bb:8e:81:82:25:5a:ab:
                    f7:be:72:66:53:ab:19:18:1e:f5:29:33:38:43:b1:
                    4f:15:70:f1:6d:f1:19:d6:22:f9:55:24:68:dc:39:
                    7c:72:4d:e7:56:e7:1c:a9:cc:42:02:67:69:10:1a:
                    79:af:86:c3:b9:44:19:e6:23:3d:5f:8a:1a:f0:e9:
                    8f:23:e8:de:c2:94:47:73:c2:53:a5:a8:8a:f5:cd:
                    e6:c9:f8:3c:00:0b:10:1e:e4:eb:0d:88:a3:54:0c:
                    ec:af:87:ff:b9:89:62:65:ac:19:9c:52:7d:31:ad:
                    de:34:05:f6:5f:61:76:6e:db:a1:9e:e9:d0:69:56:
                    b0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:36:A0:E5:7F:8C:CD:3E:5B:D8:BE:C5:27:02:C7:A4:84:BF:F0:99
            X509v3 Authority Key Identifier:
                keyid:C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32362e302f32342d3234203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:f2:d8:85:79:52:f7:1f:43:b7:fc:9b:58:38:97:80:57:42:
         32:57:ca:65:c5:16:65:de:8f:63:b4:31:d8:b5:bc:d4:4a:32:
         fd:20:4f:f5:76:74:bd:79:54:ca:d7:06:e3:b7:f2:fb:90:63:
         cc:a8:17:8f:f3:9b:bf:dd:9b:d9:af:85:65:c2:b8:10:7e:da:
         d6:34:85:ec:e2:0a:15:1b:95:b7:f5:87:95:1b:d7:c8:0a:d7:
         a7:cf:3b:4b:ec:08:f6:23:c0:e2:52:70:e1:e5:5e:ac:ca:19:
         b9:31:63:42:01:c8:dc:a3:74:31:ee:42:50:96:6b:35:ab:e2:
         d4:b6:8e:5e:14:0b:c6:dc:20:f6:fe:3a:30:82:51:c5:3a:13:
         ba:c3:cd:21:ee:a8:41:c2:6d:e5:18:2f:63:ba:d8:e1:3a:6b:
         24:28:30:95:c4:60:6d:5f:93:9e:55:ce:0a:13:b4:6d:3f:c2:
         7d:0c:2e:3c:1c:09:91:d4:74:28:bb:f1:9e:e0:d0:f2:b1:3e:
         ef:8b:ac:af:65:c0:63:f0:00:d6:02:c4:bc:5c:6a:fe:4f:fe:
         43:f2:f9:d7:54:0d:aa:aa:17:84:b2:aa:8f:14:0f:69:a8:51:
         4f:28:3b:cc:f1:55:c8:23:4e:b3:cf:c7:85:bb:7e:03:a7:da:
         36:41:41:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 10:28:54 2025 by rpki-client