Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3132342e3132382e302f32342d3234203d3e20323633363132.roa
File:                     3137392e3132342e3132382e302f32342d3234203d3e20323633363132.roa (raw, json)
Hash identifier:          2+lG21dyZSBtbTxYnyDK/pPMqmCNrkclcZX+SSVGd+w=
Subject key identifier:   9D:52:93:5D:62:59:65:3F:96:00:78:E2:02:74:65:6A:2A:CE:DA:CF
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       51DB70C4E104AEA48D9F53C33F870381B672F568
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3132342e3132382e302f32342d3234203d3e20323633363132.roa
Signing time:             Sat 03 May 2025 00:20:41 +0000
ROA not before:           Sat 03 May 2025 00:15:41 +0000
ROA not after:            Sat 02 May 2026 00:20:41 +0000
asID:                     263612
IP address blocks:        179.124.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 May 2025 23:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:db:70:c4:e1:04:ae:a4:8d:9f:53:c3:3f:87:03:81:b6:72:f5:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: May  3 00:15:41 2025 GMT
            Not After : May  2 00:20:41 2026 GMT
        Subject: CN=9D52935D6259653F960078E20274656A2ACEDACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cd:5c:9d:c6:85:4f:45:c8:2b:0a:20:88:3f:
                    44:31:54:be:43:9f:f8:2a:2f:e5:04:e9:ed:fb:7f:
                    d1:43:97:5c:90:d5:64:d6:0c:b0:18:eb:60:cd:db:
                    57:74:7f:29:69:6f:cc:bb:b1:09:6b:bd:db:e5:20:
                    00:1c:97:5f:5b:d3:96:3e:01:dc:f0:fd:09:9b:4a:
                    39:95:08:07:3a:c3:34:c8:00:1f:d8:ae:a4:e1:18:
                    87:ed:40:d5:b5:11:3d:49:69:59:a3:10:cd:ca:bc:
                    b9:fd:3e:ed:39:60:1f:4b:df:3b:c4:89:49:cd:07:
                    e9:12:8d:68:43:57:38:72:0b:40:ed:19:40:84:a5:
                    21:8b:c8:c1:2a:e0:06:bc:0a:76:67:ec:19:72:1d:
                    95:98:b4:dc:16:ca:9f:8a:fc:b2:03:dd:dd:42:74:
                    6e:e1:8c:00:fb:e2:62:cc:98:d4:99:7f:a6:dc:fd:
                    54:ef:72:7b:aa:15:9e:33:7c:a9:ac:31:22:e1:88:
                    15:06:3c:de:98:a6:8e:11:0f:85:aa:f9:74:f8:4f:
                    38:92:49:a3:27:16:78:4e:a8:93:d6:e5:2a:43:1d:
                    c5:e0:c9:b3:e5:32:3e:2d:66:1d:85:e1:0c:72:10:
                    c9:4b:c3:af:d4:a2:b0:da:f3:11:85:88:b0:90:c0:
                    0b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:52:93:5D:62:59:65:3F:96:00:78:E2:02:74:65:6A:2A:CE:DA:CF
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3132342e3132382e302f32342d3234203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:72:e9:80:d5:00:68:a3:41:93:f5:c7:a9:c1:da:35:33:de:
         d0:bb:19:c7:95:c5:a0:5c:a4:3a:63:2c:3c:1b:65:9e:57:d7:
         cf:0a:88:e9:3a:ad:f9:89:e8:1b:93:bd:75:ff:f9:63:6e:10:
         7b:b7:7e:d3:13:6e:3b:9f:23:1e:23:1f:50:2a:be:83:3b:25:
         4a:a2:14:99:b7:6a:f2:9e:b0:69:b3:ff:03:3d:60:af:4b:74:
         ea:19:ac:fc:9d:45:d2:40:89:dc:f1:bd:b3:12:8f:21:d4:95:
         19:97:32:f1:9a:2c:4f:6d:d5:0d:a6:2b:58:53:52:f8:0f:a7:
         09:99:90:8a:29:c4:45:87:e6:4c:d0:00:7c:9c:04:e0:ce:27:
         5e:c6:aa:59:7f:02:ae:41:f9:41:95:5f:07:51:5c:b3:89:0a:
         b4:a3:9c:c7:1b:8f:10:e5:ab:86:6c:f1:3e:e9:e2:cc:3a:d4:
         73:06:a8:c0:fc:04:9a:21:f0:de:2d:c5:0c:4b:97:9d:a2:93:
         dd:53:bc:61:af:02:06:d7:90:23:b2:59:aa:41:1c:3d:a7:bc:
         8c:3d:5c:9d:5b:78:0d:2a:1e:0f:e1:10:47:49:2b:ea:2f:14:
         85:47:bf:aa:e1:89:c2:2e:ec:47:67:3d:c3:ff:63:66:a8:62:
         83:d4:b0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 04:28:54 2025 by rpki-client