Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32372e302f32342d3234203d3e203532363331.roa
File:                     3137372e3132382e32372e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier:          bcL7lM4nYiwNktjE6R5MJa2e0rxh8B7bbr/WstWuUwg=
Subject key identifier:   80:5E:E5:2B:48:26:8A:C5:9A:AA:71:C4:64:FE:7A:0D:AB:BE:5F:52
Certificate issuer:       /CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
Certificate serial:       155A78E627B001DDB957EB11D7DAD2121530FFB6
Authority key identifier: C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32372e302f32342d3234203d3e203532363331.roa
Signing time:             Sat 03 May 2025 16:03:33 +0000
ROA not before:           Sat 03 May 2025 15:58:33 +0000
ROA not after:            Sat 02 May 2026 16:03:33 +0000
asID:                     52631
IP address blocks:        177.128.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 06 May 2025 23:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:5a:78:e6:27:b0:01:dd:b9:57:eb:11:d7:da:d2:12:15:30:ff:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
        Validity
            Not Before: May  3 15:58:33 2025 GMT
            Not After : May  2 16:03:33 2026 GMT
        Subject: CN=805EE52B48268AC59AAA71C464FE7A0DABBE5F52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d7:6e:57:76:25:a8:87:aa:c3:f8:b4:50:6c:
                    42:80:ab:d1:f0:d4:94:fd:ec:ac:bf:56:83:04:5f:
                    9e:25:5e:7f:1a:1d:fc:ce:1d:6f:1f:e3:64:50:c1:
                    fe:2c:e6:29:eb:26:6c:d9:99:dc:dc:4c:59:7d:11:
                    8b:20:6f:01:0b:65:26:dd:69:5f:10:88:06:88:d1:
                    59:40:43:9f:e8:16:1f:ab:04:ee:ce:a7:1a:c1:03:
                    2c:31:a1:58:9e:cd:1d:ad:6f:b7:96:d6:de:e0:c9:
                    0e:60:a5:b3:ef:ef:ee:5b:e2:2e:d6:66:0e:79:05:
                    1a:bd:75:02:39:87:76:6a:e0:f4:8b:7c:a9:cc:7f:
                    65:f4:06:0c:89:35:a8:61:a7:23:e9:3c:6c:5a:1e:
                    52:38:5b:ba:67:02:48:60:ca:65:be:04:1f:0d:5f:
                    41:ba:6c:86:d8:b4:84:03:bd:65:22:b1:12:88:a7:
                    1a:78:51:35:70:6f:7b:43:6b:56:75:76:86:a1:d0:
                    46:a5:19:ef:67:0a:a1:47:31:29:0c:30:f3:13:0b:
                    c1:80:33:87:91:e6:0f:89:c8:d9:97:c2:15:92:a4:
                    8f:78:45:7d:64:51:96:4f:38:3a:26:f2:24:5d:81:
                    19:be:4c:0f:3a:8c:73:0f:3c:0b:aa:d7:92:77:6d:
                    db:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5E:E5:2B:48:26:8A:C5:9A:AA:71:C4:64:FE:7A:0D:AB:BE:5F:52
            X509v3 Authority Key Identifier:
                keyid:C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32372e302f32342d3234203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:5f:f9:f2:a4:39:a9:2c:a2:30:01:04:d8:a0:9c:ec:d8:ea:
         4e:48:67:95:e6:70:e6:ae:74:28:8e:3f:e7:5d:c9:c1:c9:cb:
         d9:6c:cc:9b:58:7b:b6:db:52:84:e3:0f:dc:51:5d:ad:ae:ec:
         87:ef:1b:83:df:41:ce:c8:5c:48:63:da:2d:7f:96:8a:18:3c:
         81:46:c8:46:8e:3b:24:a9:d3:c6:72:40:27:60:8b:91:4a:b6:
         b4:a7:fe:7a:18:7f:c8:25:8f:9f:c5:5d:4f:c4:bb:34:c4:b7:
         6b:ae:fd:f3:da:39:fb:00:dd:4d:69:9e:39:96:4e:ec:74:2f:
         f7:88:35:d0:05:66:eb:52:3f:3f:8a:0b:a1:ff:ad:2c:3f:8a:
         1a:f4:47:22:7d:7d:b0:40:5a:cd:70:3d:59:e7:a9:92:5b:6c:
         c0:43:22:34:61:fc:80:c5:da:c6:67:a1:95:7c:28:c7:07:b7:
         a6:1c:bd:2c:40:01:f6:2f:46:ba:e4:64:f0:68:eb:83:83:88:
         4f:dc:3d:72:34:c4:f8:16:cc:9e:cf:1f:46:43:60:1d:cf:ca:
         13:83:17:fd:ef:13:82:5d:18:de:7e:69:50:d0:fd:fd:ab:0e:
         13:e4:38:b3:cc:b5:52:ea:d8:2b:7c:f2:e8:1c:4d:d5:c6:ec:
         c1:b8:f4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:30:45 2025 by rpki-client