Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32382e302f32332d3233203d3e203532363331.roa
File:                     3137372e3132382e32382e302f32332d3233203d3e203532363331.roa (raw, json)
Hash identifier:          LtXm42Pwj43mzgr5CxYcC+pProYvRFO2GCLVS7kqwXs=
Subject key identifier:   48:7B:04:A8:5D:E7:79:5E:E4:6B:59:C4:D6:EA:60:E7:6D:4D:DC:7F
Certificate issuer:       /CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
Certificate serial:       566397DEE36FCE628EA9D37B51F90367D1E17010
Authority key identifier: C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32382e302f32332d3233203d3e203532363331.roa
Signing time:             Sat 03 May 2025 16:03:29 +0000
ROA not before:           Sat 03 May 2025 15:58:29 +0000
ROA not after:            Sat 02 May 2026 16:03:29 +0000
asID:                     52631
IP address blocks:        177.128.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 23:11:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:63:97:de:e3:6f:ce:62:8e:a9:d3:7b:51:f9:03:67:d1:e1:70:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
        Validity
            Not Before: May  3 15:58:29 2025 GMT
            Not After : May  2 16:03:29 2026 GMT
        Subject: CN=487B04A85DE7795EE46B59C4D6EA60E76D4DDC7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:15:6e:16:04:e5:8a:d7:ff:73:8f:89:4b:62:
                    da:58:50:39:43:85:db:0d:8f:ae:39:22:54:7d:d3:
                    c2:9d:17:0c:17:e8:7a:c5:a9:06:dc:a9:b1:4a:a9:
                    98:02:61:84:3f:b3:d5:f0:4e:01:f9:ed:b2:6e:c7:
                    d0:95:13:b0:22:b6:a5:04:06:b3:1e:ed:cf:06:96:
                    30:48:ec:2a:c5:75:c8:43:61:b6:ae:e1:50:c6:26:
                    75:14:9a:09:46:81:a0:3a:5c:c7:74:37:79:3c:04:
                    38:0d:1a:b7:58:88:ad:62:30:fd:95:2a:50:bc:91:
                    c3:d7:75:ff:6f:0b:10:93:3d:a5:18:c5:66:6d:21:
                    5a:57:e7:3f:7b:c4:82:5d:cf:75:8d:ec:a6:9c:ee:
                    4f:1d:fe:fd:29:85:36:0b:ee:ec:10:33:05:11:2a:
                    89:e0:59:d5:f7:fb:aa:da:70:f4:4c:bf:99:b0:e2:
                    6f:16:84:13:2c:4a:85:27:81:86:cf:c8:4b:d6:f2:
                    4b:f5:98:06:45:5d:1c:19:ec:c3:7e:f7:74:74:0c:
                    5e:53:aa:39:7f:24:e8:9d:eb:2f:94:34:c1:10:f4:
                    80:58:e7:1a:9b:81:14:51:9a:c8:41:32:c1:63:66:
                    33:47:20:8f:e0:5d:5a:6b:43:67:8b:8c:80:e4:85:
                    19:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:7B:04:A8:5D:E7:79:5E:E4:6B:59:C4:D6:EA:60:E7:6D:4D:DC:7F
            X509v3 Authority Key Identifier:
                keyid:C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32382e302f32332d3233203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d0:76:69:3d:f0:85:49:b1:04:f1:4d:44:5c:5b:cc:9b:6b:7c:
         eb:a3:58:99:f2:f2:9d:c3:86:dd:44:d4:05:e1:22:90:03:e4:
         0b:3d:ba:e5:ce:8d:b4:35:2b:6f:01:17:cf:20:9e:89:23:ca:
         65:97:f4:2f:5f:b9:27:35:48:b0:8f:04:cd:27:ab:87:23:f3:
         17:bc:a1:0f:dd:aa:44:37:e2:89:18:5d:e5:cd:52:98:c9:81:
         74:98:48:44:53:01:49:61:4d:a3:bd:36:e8:93:55:83:44:03:
         4c:8c:40:59:05:72:35:8b:7d:ad:94:19:f7:3c:c1:ff:3d:cc:
         87:a0:b5:22:9f:1c:13:f2:f3:39:94:5a:28:18:61:14:44:2f:
         a9:da:4c:15:eb:83:99:bf:56:cd:17:e3:f8:cc:fb:a5:db:0e:
         e8:e9:09:17:18:3a:88:a5:13:bb:69:5f:49:19:3b:0b:34:99:
         6c:9a:e1:77:90:97:22:f1:ca:8f:7a:85:c2:92:14:39:65:aa:
         12:f4:ac:44:8f:7e:00:65:58:f2:ca:79:8f:ad:3f:f5:ed:de:
         08:20:8f:be:25:4c:68:44:7d:57:cf:17:ed:12:4f:59:ac:bb:
         e8:8e:80:fb:39:23:29:99:fe:9b:a6:21:07:99:21:f1:59:ad:
         b6:3d:aa:78
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVmOX3uNvzmKOqdN7UfkDZ9HhcBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY3RjgwREE4QTkwRTkyQzg5NUNDNDIyREU1QTdDOTU1
OEVDNjRFQzAeFw0yNTA1MDMxNTU4MjlaFw0yNjA1MDIxNjAzMjlaMDMxMTAvBgNV
BAMTKDQ4N0IwNEE4NURFNzc5NUVFNDZCNTlDNEQ2RUE2MEU3NkQ0RERDN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoFW4WBOWK1/9zj4lLYtpYUDlD
hdsNj645IlR908KdFwwX6HrFqQbcqbFKqZgCYYQ/s9XwTgH57bJux9CVE7AitqUE
BrMe7c8GljBI7CrFdchDYbau4VDGJnUUmglGgaA6XMd0N3k8BDgNGrdYiK1iMP2V
KlC8kcPXdf9vCxCTPaUYxWZtIVpX5z97xIJdz3WN7Kac7k8d/v0phTYL7uwQMwUR
KongWdX3+6racPRMv5mw4m8WhBMsSoUngYbPyEvW8kv1mAZFXRwZ7MN+93R0DF5T
qjl/JOid6y+UNMEQ9IBY5xqbgRRRmshBMsFjZjNHII/gXVprQ2eLjIDkhRk9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUSHsEqF3neV7ka1nE1upg521N3H8wHwYDVR0j
BBgwFoAUxn+A2oqQ6SyJXMQi3lp8lVjsZOwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEdueEgzaDhvWWg2cWlmMlRrcXh5NXpCOWFYMVBtQXlFUjJ4RTR1ZXht
dVcvMC9DNjdGODBEQThBOTBFOTJDODk1Q0M0MjJERTVBN0M5NTU4RUM2NEVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M2N0Y4MERBOEE5MEU5MkM4
OTVDQzQyMkRFNUE3Qzk1NThFQzY0RUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hHbnhIM2g4b1loNnFpZjJUa3F4eTV6QjlhWDFQbUF5RVIyeEU0dWV4bXVXLzAv
MzEzNzM3MmUzMTMyMzgyZTMyMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMy
MzYzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsYAcMA0GCSqGSIb3DQEBCwUAA4IBAQDQdmk98IVJ
sQTxTURcW8yba3zro1iZ8vKdw4bdRNQF4SKQA+QLPbrlzo20NStvARfPIJ6JI8pl
l/QvX7knNUiwjwTNJ6uHI/MXvKEP3apEN+KJGF3lzVKYyYF0mEhEUwFJYU2jvTbo
k1WDRANMjEBZBXI1i32tlBn3PMH/PcyHoLUinxwT8vM5lFooGGEURC+p2kwV64OZ
v1bNF+P4zPul2w7o6QkXGDqIpRO7aV9JGTsLNJlsmuF3kJci8cqPeoXCkhQ5ZaoS
9KxEj34AZVjyynmPrT/17d4III++JUxoRH1XzxftEk9ZrLvojoD7OSMpmf6bpiEH
mSHxWa22Pap4
-----END CERTIFICATE-----
Generated at Sun May 4 12:00:41 2025 by rpki-client