Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32392e302f32342d3234203d3e203532363331.roa
File:                     3137372e3132382e32392e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier:          1dCO21laCgOSMSiWlqdYzwT7/aODiYogJRwhEsEBXMg=
Subject key identifier:   8A:F5:84:36:A8:6A:B6:1D:D6:D8:27:47:E7:B2:16:A2:83:54:DC:94
Certificate issuer:       /CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
Certificate serial:       64C4D06003DFB2B217D7A5CF3EAB0673037B4DA3
Authority key identifier: C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32392e302f32342d3234203d3e203532363331.roa
Signing time:             Sat 03 May 2025 16:03:32 +0000
ROA not before:           Sat 03 May 2025 15:58:32 +0000
ROA not after:            Sat 02 May 2026 16:03:32 +0000
asID:                     52631
IP address blocks:        177.128.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 05 May 2025 11:59:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c4:d0:60:03:df:b2:b2:17:d7:a5:cf:3e:ab:06:73:03:7b:4d:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
        Validity
            Not Before: May  3 15:58:32 2025 GMT
            Not After : May  2 16:03:32 2026 GMT
        Subject: CN=8AF58436A86AB61DD6D82747E7B216A28354DC94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2c:10:4b:1b:d3:4f:fb:d8:a8:db:8a:3b:0d:
                    7b:47:87:c3:99:82:b3:32:ee:39:82:b0:0f:50:e2:
                    4a:ae:85:33:cf:11:d3:58:92:d3:c8:4a:76:a8:f3:
                    4d:a3:ae:e8:28:f6:c6:15:88:9b:16:7f:81:b7:20:
                    1d:71:3e:d0:6f:3a:e1:af:2d:53:9b:c3:57:fa:00:
                    90:f6:69:c0:d5:b4:9c:9e:44:b0:f6:e2:4b:c9:16:
                    80:13:1f:40:d9:c4:f7:54:03:08:fc:40:99:48:fe:
                    63:a3:32:7d:0f:e1:21:c3:30:15:f6:9d:26:cc:42:
                    a6:fa:b0:a4:c2:0d:6f:3d:b9:bb:3a:3c:db:8c:28:
                    c9:c9:ef:75:d6:19:bd:a6:4d:29:6f:0d:a3:f7:43:
                    d1:59:12:bc:14:4e:83:c3:6d:62:11:f0:c5:e2:2c:
                    bb:ab:b6:d9:bf:be:e1:76:ac:5a:c2:f6:01:82:ef:
                    c0:02:4d:ab:08:a8:b8:b5:1c:17:25:21:0e:9a:e9:
                    43:ba:31:06:bc:45:e6:f2:f7:bb:ba:ee:73:5d:42:
                    89:38:5a:f2:68:75:0c:3a:5f:6c:57:db:7b:2b:d4:
                    21:b6:00:c0:bd:61:47:f3:a5:39:18:06:62:9e:53:
                    72:dd:8c:3f:55:8b:a2:60:06:36:6f:ca:e2:c2:bd:
                    e8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F5:84:36:A8:6A:B6:1D:D6:D8:27:47:E7:B2:16:A2:83:54:DC:94
            X509v3 Authority Key Identifier:
                keyid:C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32392e302f32342d3234203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:4f:03:ae:2a:f7:02:04:4e:a6:2d:08:8a:63:a3:6a:13:ba:
         d2:75:56:85:49:5a:8f:c7:2d:2c:d0:86:44:03:3e:45:93:80:
         69:9d:01:b1:bc:17:01:cf:e5:3c:4c:af:69:fe:4e:14:41:1c:
         f9:20:42:44:c9:7f:a4:19:37:c0:45:35:90:2c:5d:c4:31:34:
         0a:88:55:a2:6c:07:59:1c:da:2e:a8:2d:8d:d4:fb:7b:65:62:
         6b:5e:4d:41:74:f9:b4:03:82:25:f1:57:0a:c2:aa:2d:7b:d9:
         90:f4:bf:70:1c:34:06:00:06:a4:dc:e3:1c:85:46:55:90:53:
         71:b4:92:a7:a5:7f:40:e0:18:c1:02:01:17:a7:de:f5:8c:6c:
         fb:7d:9b:1e:46:1b:28:db:52:1f:d3:7e:92:7c:75:13:36:79:
         9e:21:22:06:79:29:1a:fe:18:27:d5:4a:57:3f:0b:88:51:94:
         82:c0:85:67:00:2c:ca:3c:61:4f:26:4f:1a:7e:67:cf:06:d4:
         81:f5:16:b9:8d:bb:e5:b7:93:30:8d:18:4b:6b:06:b2:de:ef:
         43:f0:3f:91:c7:98:6d:53:98:f5:74:24:7a:f3:66:3f:42:a9:
         35:24:55:63:d5:65:ac:1e:98:ed:c9:09:ef:5b:a9:66:77:1a:
         52:8f:1f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 15:13:35 2025 by rpki-client