Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33302e302f32332d3233203d3e203532363331.roa
File:                     3137372e3132382e33302e302f32332d3233203d3e203532363331.roa (raw, json)
Hash identifier:          gp2hyIh0pBNrvMp2yEDfe7LBcvGicCM2WQF3zzImLe8=
Subject key identifier:   07:72:4B:79:D6:FA:04:07:68:C3:03:D9:88:E7:38:90:A0:08:CE:B9
Certificate issuer:       /CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
Certificate serial:       0F0B1F6A14C9A1C00041A8C9214DB40C2A680D82
Authority key identifier: C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33302e302f32332d3233203d3e203532363331.roa
Signing time:             Sat 03 May 2025 16:03:28 +0000
ROA not before:           Sat 03 May 2025 15:58:28 +0000
ROA not after:            Sat 02 May 2026 16:03:28 +0000
asID:                     52631
IP address blocks:        177.128.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 16:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:0b:1f:6a:14:c9:a1:c0:00:41:a8:c9:21:4d:b4:0c:2a:68:0d:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
        Validity
            Not Before: May  3 15:58:28 2025 GMT
            Not After : May  2 16:03:28 2026 GMT
        Subject: CN=07724B79D6FA040768C303D988E73890A008CEB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a8:c7:8d:78:26:f3:d3:e1:50:06:3a:01:de:
                    22:bc:07:32:c6:b2:5f:31:72:8e:1b:de:6a:e4:9c:
                    a4:19:d6:69:ad:32:27:d4:57:8a:c6:73:b2:42:32:
                    6f:a1:bc:07:22:31:4c:62:57:f8:eb:d3:40:4c:30:
                    c1:9d:1b:99:31:8a:9b:e4:27:2e:c5:47:4b:ca:4c:
                    47:ed:de:0d:6a:ef:93:83:06:73:d6:6e:46:94:9e:
                    8e:96:95:d8:1a:85:89:1e:97:b3:7e:b1:5e:d9:43:
                    7a:27:ab:1e:2a:aa:59:b3:36:28:7c:1b:ef:6a:63:
                    1b:9e:07:7b:5e:86:6a:77:c0:3e:29:4a:0b:39:11:
                    8e:00:56:c8:97:79:13:6b:35:4d:24:1b:05:cb:01:
                    39:0a:5f:69:1b:dc:79:58:e1:04:39:63:02:09:10:
                    00:73:ac:f1:c4:80:a4:2e:16:bb:7d:6f:62:48:c2:
                    b2:c3:5e:d6:45:eb:54:46:3d:2b:f3:8e:d2:38:bf:
                    97:6e:be:f2:33:7f:7b:a4:29:c5:3f:50:27:f3:66:
                    6f:b5:41:ca:04:13:c6:f3:ed:8e:86:f4:60:9f:1d:
                    15:30:94:95:2e:43:4b:83:a3:8f:f3:d1:17:3c:e6:
                    e9:fc:71:cb:c2:73:60:0e:d3:2a:13:f4:39:a3:8a:
                    50:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:72:4B:79:D6:FA:04:07:68:C3:03:D9:88:E7:38:90:A0:08:CE:B9
            X509v3 Authority Key Identifier:
                keyid:C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33302e302f32332d3233203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:53:ba:4e:45:7a:eb:58:52:58:a8:9a:76:7c:91:17:e7:38:
         59:cf:89:79:1c:98:00:72:2f:d2:58:d3:0e:ad:d3:78:bd:73:
         5d:a3:a4:08:db:38:92:a9:ea:48:07:e7:32:50:fa:9d:51:cd:
         54:6c:e8:62:d2:41:04:bf:5a:d2:74:bb:c3:bb:11:f9:ca:ec:
         ce:2c:a4:e1:f1:eb:cb:b7:c9:61:b5:f4:ce:0a:96:40:46:85:
         99:9c:06:5d:c0:f6:d0:ad:6f:f0:18:41:13:ed:53:81:53:72:
         67:e8:59:d6:7c:11:25:4f:d8:b3:c9:99:2c:bd:8f:f6:bf:97:
         0c:56:4e:a0:49:41:2f:77:93:d6:5e:5b:f2:e1:71:92:cc:27:
         51:6d:a1:6e:7d:7a:14:d0:48:71:ec:64:0a:eb:dd:dc:ca:97:
         40:c2:c6:6a:4e:c0:47:46:58:8d:03:bf:53:db:c9:c2:f7:ab:
         f0:e0:dc:df:7a:62:bd:25:52:5e:85:20:16:9f:aa:16:20:08:
         ce:be:d0:26:5e:df:19:ec:4f:4e:d3:73:77:1b:d5:30:03:ef:
         ed:14:fb:fd:f3:72:a4:18:7f:0f:e5:07:6c:19:b8:0f:fd:a3:
         a6:52:1c:00:73:ef:37:a1:2a:fc:98:86:27:ca:20:3a:f8:b4:
         1a:c1:75:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 07:48:37 2025 by rpki-client