Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33312e302f32342d3234203d3e203532363331.roa
File:                     3137372e3132382e33312e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier:          7CWq+gqVKwCLsuJ/ru6EI7tqUIjz5YbJe2c/N2g9yYo=
Subject key identifier:   C9:68:FC:94:94:36:5A:D9:97:D6:2C:45:EC:21:E0:33:36:71:3D:B1
Certificate issuer:       /CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
Certificate serial:       4CEB647A6E805383790E6883527BA2F3E5B6BE0D
Authority key identifier: C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33312e302f32342d3234203d3e203532363331.roa
Signing time:             Sat 03 May 2025 16:03:29 +0000
ROA not before:           Sat 03 May 2025 15:58:29 +0000
ROA not after:            Sat 02 May 2026 16:03:29 +0000
asID:                     52631
IP address blocks:        177.128.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 16:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:eb:64:7a:6e:80:53:83:79:0e:68:83:52:7b:a2:f3:e5:b6:be:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
        Validity
            Not Before: May  3 15:58:29 2025 GMT
            Not After : May  2 16:03:29 2026 GMT
        Subject: CN=C968FC9494365AD997D62C45EC21E03336713DB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b0:57:72:91:91:c4:e0:0d:0f:5b:a5:13:b1:
                    be:eb:45:44:85:02:8d:70:fb:56:fe:ac:26:32:24:
                    bf:89:db:61:61:87:db:f2:ca:30:b3:76:b1:3a:12:
                    51:93:b0:26:a2:66:66:d0:e1:f2:2b:a7:8c:f0:af:
                    14:ff:6f:71:a0:7d:90:b7:17:68:2c:7a:bb:8f:a6:
                    33:2d:9e:fc:29:65:12:74:f7:cb:c0:ab:f6:82:3e:
                    06:4b:0e:8d:6d:d0:33:70:cb:c3:81:40:67:e9:bd:
                    c7:a1:fd:f2:ed:12:a2:cf:7b:32:55:eb:25:36:00:
                    ca:87:47:eb:35:5c:c3:fc:e7:1a:b2:d4:7d:05:ce:
                    20:20:b2:10:19:1f:89:9c:98:84:43:42:b5:ff:3a:
                    85:39:1d:6f:50:17:71:a2:da:1b:27:ef:28:4e:94:
                    21:d6:9e:81:9e:a3:27:4e:f6:bb:f8:b4:10:74:c0:
                    92:59:1c:82:aa:9a:c6:0b:9d:f9:c6:5a:15:f0:15:
                    9b:27:21:41:17:83:9c:c5:8d:c4:57:8a:c7:27:64:
                    69:57:cf:1b:80:e8:5c:9b:ab:88:b6:fb:fc:22:95:
                    38:09:c1:18:92:e2:14:f8:cf:cc:c7:4b:5d:bb:30:
                    f8:a0:93:1e:08:a7:cd:29:48:14:37:fd:8d:8f:76:
                    2d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:68:FC:94:94:36:5A:D9:97:D6:2C:45:EC:21:E0:33:36:71:3D:B1
            X509v3 Authority Key Identifier:
                keyid:C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33312e302f32342d3234203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:82:2f:8a:b4:ad:87:8b:78:82:81:6b:d4:39:a6:3a:b5:87:
         37:71:1a:d2:dd:d7:90:d9:c7:14:29:33:50:a3:0f:ec:ad:15:
         52:7e:88:bf:c1:0f:bf:a1:a8:57:04:7a:03:f8:d9:1b:61:29:
         3b:68:04:e2:cd:09:24:54:1e:60:fa:d0:9c:fd:dd:29:91:30:
         55:63:e8:98:15:cd:d2:9d:38:d3:d4:5b:dd:a0:70:0b:f2:36:
         1b:30:53:01:0a:46:c9:15:e1:e4:84:b3:6f:2e:f2:db:05:88:
         5b:0c:85:8f:2b:e2:09:b4:3f:d8:1b:d3:73:7b:64:36:a2:48:
         19:22:ef:41:0b:91:50:24:a8:d1:ff:1d:fb:13:50:79:fe:09:
         08:4e:3d:29:53:5f:ad:46:14:7c:0e:1f:43:97:94:5d:de:d8:
         77:56:57:9e:af:ef:87:75:14:ad:dc:c3:2a:d2:ae:a7:6a:c0:
         95:b6:c7:ad:87:bd:8a:31:12:93:0a:14:e2:ad:ee:b5:c8:2a:
         5d:31:23:b7:b3:c2:6d:0d:32:ac:32:98:6f:f2:04:dc:87:58:
         74:1a:a3:12:2b:7a:9a:54:c8:02:53:70:a8:28:6c:1f:f6:9f:
         0f:f5:32:27:c8:39:ce:3e:ed:3b:ec:74:b0:1f:8e:ca:26:26:
         e6:0f:ea:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 07:55:33 2025 by rpki-client