Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32382e302f32342d3234203d3e203532363331.roa
File:                     3137372e3132382e32382e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier:          x+4QWZTgvk7AdRbmmc9KLwoaljZNlWMP/E0MEWNii20=
Subject key identifier:   A8:DF:74:50:45:CC:3B:67:B4:19:94:14:2A:5E:51:22:B7:9E:C7:54
Certificate issuer:       /CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
Certificate serial:       1B21E8B6384B7D8CE5246941C51234654029C6A7
Authority key identifier: C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32382e302f32342d3234203d3e203532363331.roa
Signing time:             Sat 03 May 2025 16:03:31 +0000
ROA not before:           Sat 03 May 2025 15:58:31 +0000
ROA not after:            Sat 02 May 2026 16:03:31 +0000
asID:                     52631
IP address blocks:        177.128.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 16:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:21:e8:b6:38:4b:7d:8c:e5:24:69:41:c5:12:34:65:40:29:c6:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
        Validity
            Not Before: May  3 15:58:31 2025 GMT
            Not After : May  2 16:03:31 2026 GMT
        Subject: CN=A8DF745045CC3B67B41994142A5E5122B79EC754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7b:ae:5d:d4:77:9c:aa:12:51:ba:3f:b8:2f:
                    12:7e:f6:d5:62:22:65:a4:c9:04:3f:ea:7d:9a:91:
                    32:bf:f2:ca:1b:42:6f:39:d5:c9:60:a6:ff:40:e6:
                    a0:09:ec:cc:36:37:db:34:80:91:24:60:7f:e0:c8:
                    74:80:36:3d:e7:0e:3d:c0:5b:90:48:0d:9e:b2:7e:
                    24:ed:f5:79:8b:cd:71:7d:32:6e:ea:45:6b:34:0a:
                    a3:62:40:bc:55:41:a8:0b:3a:af:31:29:d7:22:79:
                    ba:4a:6d:3a:c4:1a:a8:ef:c5:82:3f:de:66:a3:12:
                    31:a1:81:47:c1:47:b3:f5:63:47:79:a9:96:b1:fc:
                    90:bc:d5:4e:69:a9:b3:45:65:ec:8b:e7:e4:b9:e2:
                    20:ab:07:a8:00:53:4a:5f:2f:c1:af:f1:05:bb:d9:
                    23:ee:27:51:75:35:d3:e1:3d:26:a6:da:01:f1:2c:
                    4e:f8:c2:f1:d0:f4:0b:42:66:e0:d9:f3:e3:7e:a1:
                    d9:86:0d:1b:f1:d2:34:77:eb:e0:ac:55:35:3a:39:
                    07:64:95:c0:3d:5a:80:5b:41:5e:12:0c:7e:e1:86:
                    56:ef:a3:86:08:51:9f:a3:0a:f1:05:9e:be:54:b8:
                    83:b6:9a:ba:be:87:08:3d:8c:55:6b:f6:b0:ba:01:
                    5f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DF:74:50:45:CC:3B:67:B4:19:94:14:2A:5E:51:22:B7:9E:C7:54
            X509v3 Authority Key Identifier:
                keyid:C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32382e302f32342d3234203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:fa:07:d5:a1:6e:45:cd:cb:77:2b:41:ef:6f:4b:3b:64:b1:
         b5:54:34:78:4d:f8:a4:4a:0b:ec:52:36:52:90:28:74:20:d2:
         c9:b4:91:02:c4:7e:97:07:a5:cc:41:68:8d:31:be:f4:f1:0b:
         94:8b:59:a4:54:7d:79:8e:09:c3:b1:a0:2c:c4:fb:8f:03:f4:
         04:35:c9:cd:c1:69:04:05:b1:68:d0:b7:8c:50:f0:20:bb:5c:
         0c:8c:8e:b1:84:a0:03:c6:89:85:98:21:ac:d6:58:8c:62:2c:
         f4:36:67:99:3e:20:26:80:bf:72:54:03:ac:90:40:fd:90:7b:
         73:25:97:6e:93:bf:38:85:3a:f5:cc:68:69:f0:73:88:6b:ec:
         c2:3c:2a:cd:33:c0:79:95:d6:21:f7:0e:ba:37:14:cb:92:d9:
         34:f0:3b:16:29:79:1d:68:f4:e3:ca:34:8e:b2:72:5c:fb:5f:
         2b:12:9c:10:67:ff:37:c0:48:69:28:8c:07:7d:df:21:b5:89:
         b3:9a:82:c6:9a:3c:6c:50:36:67:06:bb:34:7e:b1:0e:79:cd:
         52:1b:91:25:e5:b4:16:3f:8d:63:c6:6a:90:a8:2c:81:68:70:
         22:3b:5b:df:68:13:58:66:02:07:4d:59:73:b3:3b:94:f7:67:
         a7:3a:6c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 08:10:50 2025 by rpki-client