Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137322e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3137322e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          Sn2QLupfaOnEtQviJGU07oh0z2p68WuEddjPMdAhPqg=
Subject key identifier:   10:4A:27:50:B2:EF:7E:2F:85:CC:10:08:BE:62:45:DF:07:16:0F:F4
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       2EC94C58AC12C9635EC4DD3580C3CEE0F184767E
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137322e302f32342d3332203d3e203532353830.roa
Signing time:             Wed 30 Apr 2025 18:40:33 +0000
ROA not before:           Wed 30 Apr 2025 18:35:33 +0000
ROA not after:            Wed 29 Apr 2026 18:40:33 +0000
asID:                     52580
IP address blocks:        179.191.172.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 10:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c9:4c:58:ac:12:c9:63:5e:c4:dd:35:80:c3:ce:e0:f1:84:76:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr 30 18:35:33 2025 GMT
            Not After : Apr 29 18:40:33 2026 GMT
        Subject: CN=104A2750B2EF7E2F85CC1008BE6245DF07160FF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:72:ab:8d:3d:18:e7:77:20:d7:a2:13:da:6f:
                    d3:de:f4:76:19:ca:c1:16:ed:4c:48:ec:23:f6:51:
                    65:ec:89:21:d5:4e:e7:4c:22:2b:84:95:08:c2:b1:
                    34:68:14:d6:fa:f1:13:70:ad:ff:a6:25:62:53:da:
                    48:38:97:8b:af:b9:a6:7e:ce:cd:72:ce:82:1c:30:
                    ad:e2:66:23:0a:2e:c6:b3:1e:a0:0c:fe:f8:5a:44:
                    01:2f:d9:bf:57:06:13:7f:9b:8b:69:ca:43:c9:40:
                    7c:d2:30:70:15:47:5c:a9:5f:45:35:a4:d9:8f:89:
                    45:1b:5a:ea:14:07:03:e0:eb:f2:42:e8:8e:28:20:
                    f1:bb:5c:ab:93:17:54:0d:16:8a:21:04:43:a1:ba:
                    35:a9:47:63:8d:88:cb:d7:f8:a3:4d:a4:b3:35:3a:
                    87:1e:ce:13:dc:f7:52:fe:5f:b5:76:ab:f2:0a:f5:
                    a5:61:ad:b6:43:54:ae:d2:ff:ea:27:c3:1f:e1:e7:
                    39:7a:3c:07:73:d5:b5:07:5e:9b:af:c7:0d:ad:bc:
                    c5:50:4f:48:04:db:11:3f:7b:6e:e9:d4:4c:75:04:
                    8a:03:d7:1f:b1:ad:5b:a2:cc:20:1c:26:d5:c8:e0:
                    5c:6f:7f:6d:1e:7a:93:a0:0d:48:39:ff:05:6a:73:
                    6c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:4A:27:50:B2:EF:7E:2F:85:CC:10:08:BE:62:45:DF:07:16:0F:F4
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137322e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:60:e0:08:90:d6:44:7c:d3:2e:ab:70:da:ec:01:c3:b8:00:
         3b:4a:71:6a:fd:92:83:64:b2:68:63:57:32:b9:04:be:0b:38:
         42:a0:60:27:49:99:78:2f:4f:05:b7:98:0b:41:f9:a0:2f:04:
         aa:47:b7:1a:d2:02:11:1f:10:be:34:8b:28:44:84:15:2f:67:
         e9:03:a0:c0:f7:84:5b:55:5c:6c:fb:73:ae:3f:0c:70:63:57:
         ec:d5:9d:7a:4d:31:00:58:c0:5c:8d:94:01:d2:37:a9:07:a3:
         ce:eb:b6:6f:4d:11:78:39:1a:2c:6d:0d:2d:5f:0f:33:44:db:
         2b:36:07:19:a3:a7:ba:51:18:04:89:b4:15:40:1a:8f:71:25:
         81:0d:70:c5:06:3f:10:a1:87:bb:56:07:91:3c:db:b1:79:b3:
         b0:dd:17:24:51:33:68:11:5b:20:2b:1d:dc:84:67:06:f7:87:
         44:d6:38:e9:98:2a:20:60:55:72:58:0a:d8:e7:30:47:fc:71:
         4a:6b:cf:fe:6d:9d:aa:84:35:19:27:03:b0:cd:65:0a:97:57:
         4c:94:d6:59:5a:05:d3:bc:28:c7:cd:97:00:23:bc:4f:72:20:
         1a:ae:ec:b0:33:c9:e3:c4:3b:90:40:34:8d:76:64:30:94:6a:
         e0:57:65:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:18:12 2025 by rpki-client