Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136392e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3136392e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          DMAP41/p1uaIGIv37jW+jHgXKHKIyo6M2RimYeY4qHw=
Subject key identifier:   74:63:9C:5A:6C:4A:83:03:D6:1F:5D:CB:CF:CE:EC:D1:44:50:02:DA
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       7B8B2AC4F3AF7F19E9FC8DA2E0F57F067CC92496
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136392e302f32342d3332203d3e203532353830.roa
Signing time:             Wed 30 Apr 2025 18:40:53 +0000
ROA not before:           Wed 30 Apr 2025 18:35:53 +0000
ROA not after:            Wed 29 Apr 2026 18:40:53 +0000
asID:                     52580
IP address blocks:        179.191.169.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 15:44:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:8b:2a:c4:f3:af:7f:19:e9:fc:8d:a2:e0:f5:7f:06:7c:c9:24:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr 30 18:35:53 2025 GMT
            Not After : Apr 29 18:40:53 2026 GMT
        Subject: CN=74639C5A6C4A8303D61F5DCBCFCEECD1445002DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ea:de:2a:31:70:96:97:72:b5:83:51:3c:5a:
                    b6:e7:07:94:1f:c1:9c:0c:a5:d0:03:2e:ed:1e:e5:
                    ba:55:12:ba:67:80:f0:ca:c4:88:48:30:80:21:34:
                    36:f8:79:26:9e:63:f5:ac:80:31:bb:78:66:cd:3d:
                    4e:45:0f:93:55:99:61:a7:0f:8c:ce:f0:88:8c:d1:
                    66:ee:a5:d5:9c:a0:4d:b0:16:3d:90:81:85:c0:4e:
                    45:02:b1:91:7b:79:65:0d:6b:2d:e2:39:92:03:0c:
                    81:a1:87:45:de:1f:33:83:4e:99:85:88:c2:a1:30:
                    dc:e1:c9:07:12:ed:da:29:97:ae:9b:cd:f1:ba:2e:
                    0a:1c:ef:b9:7c:46:cc:ab:f1:2c:07:3c:e1:3a:b0:
                    d2:84:c1:ae:ae:07:5a:1b:d5:4b:eb:4f:b5:09:e8:
                    81:ba:7b:89:87:b0:45:16:a7:2c:f1:82:5a:04:6d:
                    77:aa:e8:00:3e:a9:7f:fb:19:93:d9:01:b0:96:12:
                    60:80:a4:14:1e:0b:e0:fe:7b:ff:24:1f:4b:c0:73:
                    35:5d:31:51:dc:48:5c:f9:2c:5f:35:0b:eb:af:fe:
                    ef:21:f5:66:5e:f7:03:f1:e5:09:ba:3e:c2:0b:2c:
                    08:ca:2e:10:05:1b:c3:2c:fa:c2:b1:24:6a:2f:41:
                    cd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:63:9C:5A:6C:4A:83:03:D6:1F:5D:CB:CF:CE:EC:D1:44:50:02:DA
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136392e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:a0:b1:e2:22:6d:76:ea:f7:1b:e1:23:00:84:a5:49:f0:70:
         e0:6f:6a:65:ec:c0:b9:7c:4b:16:b7:6d:1e:b4:d6:ae:68:62:
         9f:58:69:9f:5d:fd:ae:46:70:86:93:44:b4:f5:06:29:7b:d3:
         e2:08:dd:60:0e:8f:41:dd:b4:7c:7a:26:80:0b:cd:06:1f:a7:
         22:9b:87:06:16:9e:c5:01:1a:11:42:93:11:31:dc:00:08:00:
         6f:1c:8d:19:da:57:3f:74:2e:0c:cd:32:df:69:b3:98:0e:da:
         19:a5:46:ec:e5:38:e9:10:dd:19:09:7b:b5:f6:43:b0:e6:2f:
         d0:65:de:10:db:f0:ea:2b:48:28:2b:66:cb:f9:aa:e5:42:de:
         d7:8a:ea:d9:d0:e7:30:c3:43:26:2b:1a:c3:e6:18:28:6a:1c:
         36:01:e3:3a:f1:ba:02:79:17:ca:28:95:c3:c6:b2:27:ed:f7:
         91:f2:13:c8:3d:1c:4b:c6:6f:3c:52:63:a6:0d:4f:99:c6:1d:
         34:a4:ba:74:8a:3a:66:63:18:32:a6:02:f9:ff:4e:2a:48:45:
         c7:7c:d0:b7:85:5a:37:d7:be:27:ef:c9:ed:52:6f:29:60:82:
         0f:17:57:ab:85:d6:45:29:2a:df:0e:8d:3f:29:6d:9b:d6:12:
         9c:8c:cc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:05:56 2025 by rpki-client