Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136332e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3136332e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          CoINjZED84sCa1Jqw7M2YaS/7h4wSo9vDOyJhGUj8OI=
Subject key identifier:   C0:07:DC:3C:CC:A1:76:CF:F2:F3:27:C8:BA:73:9A:58:26:F4:E2:31
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       301DA4747E6011C34ABBE122217287C0470B7163
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136332e302f32342d3332203d3e203532353830.roa
Signing time:             Wed 30 Apr 2025 18:41:35 +0000
ROA not before:           Wed 30 Apr 2025 18:36:35 +0000
ROA not after:            Wed 29 Apr 2026 18:41:35 +0000
asID:                     52580
IP address blocks:        179.191.163.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 21:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:1d:a4:74:7e:60:11:c3:4a:bb:e1:22:21:72:87:c0:47:0b:71:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr 30 18:36:35 2025 GMT
            Not After : Apr 29 18:41:35 2026 GMT
        Subject: CN=C007DC3CCCA176CFF2F327C8BA739A5826F4E231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:da:ba:f6:b3:95:df:3f:2c:a3:33:fb:6f:7a:
                    e4:1b:45:27:2a:f0:11:68:1f:8b:7b:5d:71:f9:5f:
                    08:de:c2:b9:e8:13:b1:d9:12:00:92:8d:0f:be:c5:
                    24:14:d0:88:68:a8:7a:dc:3d:ce:8a:96:6d:14:e2:
                    8d:8f:8a:5f:7b:09:08:1c:45:61:f6:59:bb:6f:a3:
                    6d:93:2b:0b:d5:4e:e5:92:62:59:4b:27:e9:16:34:
                    f4:56:a1:00:75:d4:4d:95:3e:3b:99:df:37:bb:39:
                    19:fc:f8:64:be:6c:7f:63:00:90:a4:61:65:69:32:
                    44:7f:2f:d7:e6:81:81:50:35:a4:40:d1:f8:12:54:
                    e3:f3:b8:75:3a:1b:30:3f:31:c3:8f:35:9c:f1:e9:
                    37:03:ae:76:ff:95:d6:b7:4c:62:90:2c:77:06:03:
                    9d:c6:39:fd:89:1e:d8:4f:81:1c:7f:d2:e3:38:db:
                    e6:05:06:08:9e:f4:de:3a:a7:24:81:f0:8e:61:d4:
                    8b:f6:34:c9:ab:a4:00:ee:a2:40:bd:7d:1f:a9:a4:
                    f3:9e:77:6c:d6:3a:d2:99:fc:97:27:f4:52:79:a4:
                    29:a9:3c:72:3e:48:41:ec:be:51:03:77:79:0a:20:
                    24:a1:16:20:93:58:7d:53:46:0f:02:f0:74:47:5c:
                    54:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:07:DC:3C:CC:A1:76:CF:F2:F3:27:C8:BA:73:9A:58:26:F4:E2:31
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136332e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:dc:05:d9:e5:3b:4a:98:01:7e:e8:e5:c4:04:de:f5:08:d5:
         2d:db:e0:34:29:fb:a6:4a:74:b3:a4:8d:28:4e:5c:8f:8d:f7:
         23:36:39:00:f7:73:1a:57:7a:34:2a:2f:bb:72:03:c7:db:7f:
         94:ce:c3:2e:07:cb:70:1e:c4:2e:cc:a1:67:3a:d1:a4:b4:d0:
         72:22:58:83:b2:4f:1e:ff:d5:51:3a:0e:f4:cb:07:9e:ca:7f:
         d7:5d:74:9c:63:2f:d9:67:6e:68:f5:9f:e1:92:fd:5b:ce:74:
         37:a2:c3:f3:ef:77:c3:73:17:d8:ba:ed:0f:d9:48:1b:f7:65:
         44:37:50:32:7c:46:5c:9b:ae:f4:78:46:eb:3f:85:e8:05:eb:
         59:15:f6:7d:69:be:a3:8f:5c:62:ea:7c:a6:ea:28:41:88:e2:
         49:56:19:41:08:1c:07:cf:73:ce:b6:ab:2c:0f:a5:00:d5:08:
         36:13:83:d4:ce:a9:36:83:0f:55:1d:3a:26:08:2a:a9:13:db:
         d1:3e:ba:d2:c3:96:69:82:1b:32:12:1e:30:e9:51:4b:29:ac:
         5d:c3:89:76:c5:db:e1:aa:38:d9:a9:00:5c:7d:9d:b1:b3:47:
         98:9d:4f:9b:b5:54:31:87:93:7d:83:8b:84:54:89:a4:24:0c:
         dc:48:33:90
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMB2kdH5gEcNKu+EiIXKHwEcLcWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzEzMTM2QURFRUJCNTQxMTFFMkMwOUYyQzdERkJCMzk1
MUVCQ0ZEMDAeFw0yNTA0MzAxODM2MzVaFw0yNjA0MjkxODQxMzVaMDMxMTAvBgNV
BAMTKEMwMDdEQzNDQ0NBMTc2Q0ZGMkYzMjdDOEJBNzM5QTU4MjZGNEUyMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ2rr2s5XfPyyjM/tveuQbRScq
8BFoH4t7XXH5XwjewrnoE7HZEgCSjQ++xSQU0IhoqHrcPc6Klm0U4o2Pil97CQgc
RWH2Wbtvo22TKwvVTuWSYllLJ+kWNPRWoQB11E2VPjuZ3ze7ORn8+GS+bH9jAJCk
YWVpMkR/L9fmgYFQNaRA0fgSVOPzuHU6GzA/McOPNZzx6TcDrnb/lda3TGKQLHcG
A53GOf2JHthPgRx/0uM42+YFBgie9N46pySB8I5h1Iv2NMmrpADuokC9fR+ppPOe
d2zWOtKZ/Jcn9FJ5pCmpPHI+SEHsvlEDd3kKICShFiCTWH1TRg8C8HRHXFQlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUwAfcPMyhds/y8yfIunOaWCb04jEwHwYDVR0j
BBgwFoAUwTE2re67VBEeLAnyx9+7OVHrz9AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHBUOGppQldteU4zUnhuakdvUGNZR3BWUnd1VkYzZE1Wd1JldjNGTnp0
aTEvMC9DMTMxMzZBREVFQkI1NDExMUUyQzA5RjJDN0RGQkIzOTUxRUJDRkQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxMzEzNkFERUVCQjU0MTEx
RTJDMDlGMkM3REZCQjM5NTFFQkNGRDAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hwVDhqaUJXbXlOM1J4bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAv
MzEzNzM5MmUzMTM5MzEyZTMxMzYzMzJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1
MzIzNTM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzv6MwDQYJKoZIhvcNAQELBQADggEBALrcBdnl
O0qYAX7o5cQE3vUI1S3b4DQp+6ZKdLOkjShOXI+N9yM2OQD3cxpXejQqL7tyA8fb
f5TOwy4Hy3AexC7MoWc60aS00HIiWIOyTx7/1VE6DvTLB57Kf9dddJxjL9lnbmj1
n+GS/VvOdDeiw/Pvd8NzF9i67Q/ZSBv3ZUQ3UDJ8RlybrvR4Rus/hegF61kV9n1p
vqOPXGLqfKbqKEGI4klWGUEIHAfPc862qywPpQDVCDYTg9TOqTaDD1UdOiYIKqkT
29E+utLDlmmCGzISHjDpUUsprF3DiXbF2+GqONmpAFx9nbGzR5idT5u1VDGHk32D
i4RUiaQkDNxIM5A=
-----END CERTIFICATE-----
Generated at Mon May 12 13:24:06 2025 by rpki-client