Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33302e302f32342d3234203d3e203532363331.roa
File:                     3137372e3132382e33302e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier:          lMmXJwKFS9qENB8w76PvrHnB+7n3tlkqBWXPpMGF2rU=
Subject key identifier:   AD:27:7D:DC:7C:41:CD:93:EB:24:7A:5C:0C:21:2F:DE:EC:92:65:8C
Certificate issuer:       /CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
Certificate serial:       5606F5D7D1C15837524F18C028196FE990B601D3
Authority key identifier: C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33302e302f32342d3234203d3e203532363331.roa
Signing time:             Sat 03 May 2025 16:03:29 +0000
ROA not before:           Sat 03 May 2025 15:58:29 +0000
ROA not after:            Sat 02 May 2026 16:03:29 +0000
asID:                     52631
IP address blocks:        177.128.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 23:11:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:06:f5:d7:d1:c1:58:37:52:4f:18:c0:28:19:6f:e9:90:b6:01:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
        Validity
            Not Before: May  3 15:58:29 2025 GMT
            Not After : May  2 16:03:29 2026 GMT
        Subject: CN=AD277DDC7C41CD93EB247A5C0C212FDEEC92658C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:39:a3:27:cb:c2:60:4c:0c:97:90:ce:4a:7f:
                    d5:d2:30:cc:47:01:7c:74:1e:85:a9:4f:27:90:7f:
                    60:b8:61:18:81:bf:56:6a:29:a8:b0:b6:5c:97:59:
                    6a:10:2d:c2:d9:1e:df:fa:30:3f:8b:0f:47:b1:7c:
                    81:9f:69:04:b8:37:70:83:44:e9:b9:d0:ca:8e:0c:
                    12:50:db:3c:b2:6a:9d:88:67:52:8e:d2:64:1f:9f:
                    e9:22:fd:fa:4e:f9:92:aa:ab:3f:f1:89:9a:43:06:
                    ae:3b:ac:32:e5:34:f1:ab:c2:8f:ae:e3:c7:fe:18:
                    32:73:1c:32:1e:89:93:fa:55:89:e8:44:1a:11:ee:
                    58:b1:e1:a8:30:4f:bd:8f:af:60:70:07:43:5f:bd:
                    63:4a:0a:f9:2f:88:b3:c2:43:f5:2c:b8:5b:23:fa:
                    f5:08:41:8a:d6:ae:c2:f8:64:58:99:0e:88:d2:16:
                    d8:21:91:0d:9d:d3:5d:a1:cf:99:1a:43:da:24:18:
                    b3:2d:80:7e:cc:3b:f0:a1:22:28:d1:c5:ff:a4:c9:
                    d5:91:da:68:4a:e1:91:9a:25:72:27:6d:2e:29:fa:
                    dc:7b:03:29:99:d6:7d:cb:d3:be:33:63:da:01:e9:
                    c0:ac:40:e6:bd:53:2c:76:e9:ef:e3:68:19:a8:61:
                    f1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:27:7D:DC:7C:41:CD:93:EB:24:7A:5C:0C:21:2F:DE:EC:92:65:8C
            X509v3 Authority Key Identifier:
                keyid:C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33302e302f32342d3234203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:8e:ae:83:29:e3:f9:1f:2a:fa:8f:ca:b7:d7:50:18:e1:56:
         67:da:9f:3c:dc:6f:21:cb:91:cd:43:cc:f4:c1:03:fd:8a:91:
         d3:9b:a9:f3:d6:11:64:5e:f3:4c:6a:51:ec:d9:6e:57:b7:7f:
         c2:b4:95:6b:68:32:7b:7d:95:57:b3:3e:ab:bd:91:11:d3:34:
         43:de:11:b2:03:65:9b:03:4c:27:ab:5f:00:04:d5:31:24:a5:
         97:87:95:b6:30:cb:3e:d7:2c:d0:7f:ab:c8:5b:04:4c:76:2e:
         df:10:fb:13:32:ee:e2:b2:c2:cf:d6:fe:9e:30:ca:8a:46:f7:
         70:e6:03:8e:9d:9a:3c:ed:83:f4:bf:00:6b:66:84:70:31:76:
         93:3f:58:95:2d:31:cc:95:3f:79:1d:38:c1:64:ed:70:ae:13:
         26:b1:14:bd:ce:b0:86:bf:82:d5:89:04:12:fb:5e:fd:0e:d8:
         68:53:7a:26:e1:1e:11:a9:4d:5d:d0:08:d4:61:0b:b0:b7:38:
         c9:bc:e7:ce:af:0f:8a:f9:b7:8f:dd:0e:6b:c2:7a:04:e3:0c:
         4f:55:f9:82:34:7d:cc:95:83:35:84:80:6c:12:9a:35:ac:01:
         0f:1b:e7:5f:40:b6:14:5f:54:35:82:c7:92:ea:92:47:d4:9c:
         a3:21:2c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 12:56:41 2025 by rpki-client