Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133322e302f32322d3234203d3e20323731313636.roa
File:                     3137392e34322e3133322e302f32322d3234203d3e20323731313636.roa (raw, json)
Hash identifier:          y4d7zq4mwbzwBqICeHjRLPoHTUjJAP0lMSbwXBQ8Bj0=
Subject key identifier:   5B:8C:F2:67:59:94:36:04:FC:86:DE:0E:58:6C:B5:51:96:0B:5C:89
Certificate issuer:       /CN=2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC
Certificate serial:       46AED60CB40B1F7995AF7751B788BC6F3A552CCB
Authority key identifier: 2E:88:86:F9:D3:C3:B9:E0:35:3D:B7:C7:2D:18:4C:7D:C5:02:65:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133322e302f32322d3234203d3e20323731313636.roa
Signing time:             Wed 07 May 2025 20:31:27 +0000
ROA not before:           Wed 07 May 2025 20:26:27 +0000
ROA not after:            Wed 06 May 2026 20:31:27 +0000
asID:                     271166
IP address blocks:        179.42.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.crl
                          rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 09:58:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ae:d6:0c:b4:0b:1f:79:95:af:77:51:b7:88:bc:6f:3a:55:2c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC
        Validity
            Not Before: May  7 20:26:27 2025 GMT
            Not After : May  6 20:31:27 2026 GMT
        Subject: CN=5B8CF26759943604FC86DE0E586CB551960B5C89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:14:2d:d0:37:41:dc:ac:31:d4:af:93:47:ce:
                    c7:87:7d:33:9f:97:4e:f7:44:9f:61:fe:34:92:6c:
                    25:18:42:f7:da:05:fb:f8:cc:2e:ab:dd:d6:66:23:
                    e4:f1:5c:1b:76:74:9d:8c:cc:06:5e:38:1c:17:d8:
                    78:be:fc:c4:43:c9:4e:84:b8:98:ca:82:16:41:5e:
                    e4:17:ff:0e:24:dd:80:15:f6:db:b2:53:7a:55:f2:
                    fa:67:cd:fc:28:15:f4:1e:c4:6a:f9:5d:20:71:9b:
                    0a:5a:82:ee:01:ee:2d:ff:8c:56:4e:d8:89:c1:16:
                    8b:33:40:c0:46:d8:1c:27:87:c8:1b:40:c0:72:c6:
                    51:11:38:14:86:e4:08:1b:0c:8f:39:fc:67:fc:73:
                    da:21:c2:a4:a8:c9:82:82:f2:4a:5d:1e:70:8e:2f:
                    27:c0:ed:71:84:87:55:e9:d1:aa:07:0a:df:a3:06:
                    17:bf:22:6d:fa:1d:6d:7b:15:62:73:d2:36:25:3c:
                    9b:f8:26:98:fa:45:7d:4c:e5:59:f8:39:27:fd:34:
                    92:12:48:95:89:49:34:30:5e:c1:32:a4:b5:e1:55:
                    cf:2b:03:a2:d2:f1:5c:9d:fe:18:94:5b:b0:cd:f2:
                    23:3d:c0:ce:fd:bd:f2:d9:04:dc:e9:0a:82:8f:e1:
                    18:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8C:F2:67:59:94:36:04:FC:86:DE:0E:58:6C:B5:51:96:0B:5C:89
            X509v3 Authority Key Identifier:
                keyid:2E:88:86:F9:D3:C3:B9:E0:35:3D:B7:C7:2D:18:4C:7D:C5:02:65:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133322e302f32322d3234203d3e20323731313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:49:2c:0b:ee:33:97:13:70:c8:59:2b:70:24:c1:d4:56:2a:
         e1:bf:9e:13:dd:2c:fe:1d:ae:fa:b3:2a:59:9c:b5:89:c2:36:
         13:24:f5:d6:26:a4:ad:0d:f7:c3:61:5c:a9:a2:66:e3:48:7f:
         d5:65:d7:8b:75:3e:22:03:c4:fe:bc:37:4f:3b:e5:4a:68:ba:
         54:0b:22:7b:57:df:2a:16:e9:72:a7:c7:45:44:40:1b:24:7d:
         70:1c:8e:d0:dd:fd:1e:ef:3f:40:31:ab:e4:cb:f3:ae:82:4b:
         72:f6:26:91:e8:7e:04:cb:90:4f:45:77:9f:99:5c:f9:7c:e5:
         2e:fb:22:b6:a9:ce:11:b3:6d:28:84:d9:5e:41:bc:05:7a:b5:
         78:50:ed:d7:04:4d:81:b9:11:2b:ef:7e:44:f8:1b:99:b5:ec:
         24:87:c9:d4:9f:08:b5:81:dd:bb:bb:ad:1a:a8:ec:34:e8:bc:
         4b:b4:9e:7e:5f:c3:e7:00:9a:cf:87:cf:75:ba:cc:39:c9:93:
         2a:cf:ba:e5:cd:3c:3a:19:83:3b:f8:18:05:4e:5b:a7:06:20:
         e7:07:b6:7a:94:ca:11:9a:f0:97:7e:a5:78:7b:ef:ed:bc:c5:
         ce:8a:d4:63:5d:0e:f0:97:bb:ec:37:c4:ce:2b:8c:c9:33:47:
         d2:81:f6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 17:11:08 2025 by rpki-client