Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136382e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3136382e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          54FfcjBxj5XmpZbmEYkJN6sjTowWRLOhFa+TwshupNU=
Subject key identifier:   0B:9F:75:18:E7:4C:94:AA:FA:2D:73:87:1B:C0:03:AE:81:AA:9C:EB
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       754A0D77BEF4F19895371ED0873E59A760B21BAC
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136382e302f32342d3332203d3e203532353830.roa
Signing time:             Wed 30 Apr 2025 18:41:05 +0000
ROA not before:           Wed 30 Apr 2025 18:36:05 +0000
ROA not after:            Wed 29 Apr 2026 18:41:05 +0000
asID:                     52580
IP address blocks:        179.191.168.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 15:44:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:4a:0d:77:be:f4:f1:98:95:37:1e:d0:87:3e:59:a7:60:b2:1b:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr 30 18:36:05 2025 GMT
            Not After : Apr 29 18:41:05 2026 GMT
        Subject: CN=0B9F7518E74C94AAFA2D73871BC003AE81AA9CEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2e:ca:81:08:47:9b:25:a7:5c:e1:07:0f:bb:
                    05:0d:2e:08:16:f6:d7:96:57:db:45:b9:0c:56:5b:
                    3a:e0:a2:d1:6b:5b:15:ad:d9:ee:3c:e5:43:21:36:
                    92:47:98:06:8e:fe:db:c2:33:87:b7:c5:b8:7b:ee:
                    ee:de:a9:9e:26:a2:a4:30:d6:35:cd:9a:8b:f5:68:
                    67:9e:57:65:7a:dd:83:97:04:d8:48:ae:26:08:4b:
                    5b:84:96:c3:f9:b7:67:55:d4:4d:8a:38:f2:52:7f:
                    2b:41:7a:f2:7a:6e:0c:5b:0d:d2:05:f0:3f:80:85:
                    db:60:d2:4a:d5:fd:9f:3f:82:fb:01:d3:2d:06:02:
                    f0:14:b7:7e:1c:9d:d6:f4:10:96:03:17:06:d5:53:
                    ad:c5:60:93:45:72:10:ed:a3:db:9f:d6:2e:31:7e:
                    3b:9c:62:04:77:0d:79:f7:95:dd:28:69:bb:89:c8:
                    35:53:45:1a:87:e2:f7:23:be:b2:28:d1:61:fc:f2:
                    3d:e8:6b:76:dd:e0:ad:50:c8:3d:8f:f7:6d:de:35:
                    19:67:c5:87:d9:d4:c1:a6:64:6f:62:d6:9d:92:0e:
                    85:c5:d1:cf:4f:18:81:65:1c:d1:d0:63:ca:3f:db:
                    24:41:56:27:a5:39:51:66:20:2c:0d:6b:e3:f8:5d:
                    d9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9F:75:18:E7:4C:94:AA:FA:2D:73:87:1B:C0:03:AE:81:AA:9C:EB
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136382e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:d0:9b:4c:da:c5:ca:ff:51:72:28:eb:25:86:59:56:c2:2e:
         fc:a0:e5:8e:64:40:9d:20:80:5c:f4:0b:8c:4d:bc:4b:9d:b6:
         d0:af:30:b7:ca:0b:47:34:c1:75:3f:ea:3b:c4:d4:ad:1b:3f:
         db:dc:ac:48:10:ce:b9:b1:5f:1f:e5:12:70:37:60:b1:7a:db:
         71:34:4c:6f:6d:99:f6:44:78:f5:b5:61:07:a0:d0:08:18:4d:
         80:5a:8b:7d:62:84:73:eb:ba:e2:04:53:f2:2b:a6:25:19:1e:
         b2:8f:5f:56:5d:20:77:3b:10:2a:0f:be:d4:04:69:cb:37:57:
         b6:62:78:f7:35:10:b0:e6:59:b5:56:62:06:36:4b:33:4d:f6:
         e5:99:ad:10:63:5b:f6:80:58:36:01:74:8e:c1:28:a5:ce:9b:
         97:44:b9:98:9d:fd:67:f0:5a:92:75:b5:cf:0c:53:aa:9e:48:
         0b:a5:89:eb:91:9b:51:fc:bc:5f:41:27:d6:7b:dd:c7:5c:e3:
         cd:6a:01:c6:3d:e9:d3:07:be:4e:43:fa:f9:24:5f:fb:40:51:
         39:83:0e:9c:7b:1f:7d:e2:f7:88:5e:7a:e2:f2:bc:a9:65:8a:
         a5:9d:5a:c7:1f:d0:40:90:bc:f5:17:fb:c7:be:42:e6:6d:83:
         25:1a:66:13
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdUoNd7708ZiVNx7Qhz5Zp2CyG6wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzEzMTM2QURFRUJCNTQxMTFFMkMwOUYyQzdERkJCMzk1
MUVCQ0ZEMDAeFw0yNTA0MzAxODM2MDVaFw0yNjA0MjkxODQxMDVaMDMxMTAvBgNV
BAMTKDBCOUY3NTE4RTc0Qzk0QUFGQTJENzM4NzFCQzAwM0FFODFBQTlDRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQLsqBCEebJadc4QcPuwUNLggW
9teWV9tFuQxWWzrgotFrWxWt2e485UMhNpJHmAaO/tvCM4e3xbh77u7eqZ4moqQw
1jXNmov1aGeeV2V63YOXBNhIriYIS1uElsP5t2dV1E2KOPJSfytBevJ6bgxbDdIF
8D+Ahdtg0krV/Z8/gvsB0y0GAvAUt34cndb0EJYDFwbVU63FYJNFchDto9uf1i4x
fjucYgR3DXn3ld0oabuJyDVTRRqH4vcjvrIo0WH88j3oa3bd4K1QyD2P923eNRln
xYfZ1MGmZG9i1p2SDoXF0c9PGIFlHNHQY8o/2yRBVielOVFmICwNa+P4XdmxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUC591GOdMlKr6LXOHG8ADroGqnOswHwYDVR0j
BBgwFoAUwTE2re67VBEeLAnyx9+7OVHrz9AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHBUOGppQldteU4zUnhuakdvUGNZR3BWUnd1VkYzZE1Wd1JldjNGTnp0
aTEvMC9DMTMxMzZBREVFQkI1NDExMUUyQzA5RjJDN0RGQkIzOTUxRUJDRkQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxMzEzNkFERUVCQjU0MTEx
RTJDMDlGMkM3REZCQjM5NTFFQkNGRDAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hwVDhqaUJXbXlOM1J4bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAv
MzEzNzM5MmUzMTM5MzEyZTMxMzYzODJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1
MzIzNTM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzv6gwDQYJKoZIhvcNAQELBQADggEBAFHQm0za
xcr/UXIo6yWGWVbCLvyg5Y5kQJ0ggFz0C4xNvEudttCvMLfKC0c0wXU/6jvE1K0b
P9vcrEgQzrmxXx/lEnA3YLF623E0TG9tmfZEePW1YQeg0AgYTYBai31ihHPruuIE
U/IrpiUZHrKPX1ZdIHc7ECoPvtQEacs3V7ZiePc1ELDmWbVWYgY2SzNN9uWZrRBj
W/aAWDYBdI7BKKXOm5dEuZid/WfwWpJ1tc8MU6qeSAulieuRm1H8vF9BJ9Z73cdc
481qAcY96dMHvk5D+vkkX/tAUTmDDpx7H33i94heeuLyvKlliqWdWscf0ECQvPUX
+8e+QuZtgyUaZhM=
-----END CERTIFICATE-----
Generated at Mon May 12 19:02:02 2025 by rpki-client