Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3132342e3133302e302f32342d3234203d3e20323633363132.roa
File:                     3137392e3132342e3133302e302f32342d3234203d3e20323633363132.roa (raw, json)
Hash identifier:          lgT0PEYUHB60qxG1MwzBO8FPjnhKH5wovryRgcnPT4c=
Subject key identifier:   23:06:FB:B4:06:59:6E:15:7C:9E:CA:C4:E9:75:A9:76:D4:A4:18:63
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       04F405BA70749B51D4B0A97A00C47E11E582B2F2
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3132342e3133302e302f32342d3234203d3e20323633363132.roa
Signing time:             Sat 03 May 2025 00:20:33 +0000
ROA not before:           Sat 03 May 2025 00:15:33 +0000
ROA not after:            Sat 02 May 2026 00:20:33 +0000
asID:                     263612
IP address blocks:        179.124.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 22:27:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f4:05:ba:70:74:9b:51:d4:b0:a9:7a:00:c4:7e:11:e5:82:b2:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: May  3 00:15:33 2025 GMT
            Not After : May  2 00:20:33 2026 GMT
        Subject: CN=2306FBB406596E157C9ECAC4E975A976D4A41863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2c:fe:2d:1a:25:4e:a2:dd:fa:80:28:24:03:
                    bc:67:3e:a6:96:13:ae:23:6c:d4:07:3e:00:ee:03:
                    fa:c3:7b:57:41:d7:6b:a9:8d:86:64:df:d0:fc:51:
                    a1:fb:7d:a5:e5:59:7a:02:72:7f:2c:55:d4:fc:aa:
                    e6:3f:b4:36:c8:d8:3b:04:21:27:89:7c:f8:25:1b:
                    de:cb:18:8d:b2:75:98:35:d0:e5:0a:e2:93:9e:ff:
                    fe:4f:0b:c1:47:d7:a7:35:eb:23:90:0e:12:e1:fa:
                    18:e6:53:03:a0:09:ea:15:a0:80:03:8b:02:f7:59:
                    98:b7:90:7f:37:f7:bd:a0:70:b4:eb:98:10:61:e4:
                    29:1f:7e:2d:e8:75:0a:20:7b:cc:91:2d:28:6b:07:
                    e6:d9:b4:a8:1c:1a:3e:d5:77:e6:17:0c:40:b3:a0:
                    d9:c6:c3:59:99:73:87:7c:fa:57:6c:b7:43:8d:40:
                    6a:64:fa:04:d9:7f:cb:1f:d4:dc:80:a2:d1:be:c7:
                    f1:fe:f8:d4:87:31:f4:4b:10:0a:f8:19:dc:ed:45:
                    da:82:ed:d1:df:fb:8e:81:55:da:8e:35:1b:cd:37:
                    fe:4a:32:af:f0:18:4b:24:6a:30:8b:02:04:a3:d3:
                    2e:98:96:d3:95:a6:de:0f:b8:b8:ec:2c:4c:53:b8:
                    01:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:06:FB:B4:06:59:6E:15:7C:9E:CA:C4:E9:75:A9:76:D4:A4:18:63
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3132342e3133302e302f32342d3234203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:66:04:b4:b4:61:8e:f1:79:6c:5b:e8:b6:43:53:49:0d:a3:
         1b:e5:b6:8d:b8:a5:4d:e0:dd:5b:43:0e:47:37:9e:80:e8:ed:
         26:23:0e:00:18:fb:b5:3b:2f:6e:54:01:86:ce:7b:0c:4e:15:
         a4:a6:30:6c:95:d1:81:81:87:70:ee:38:bd:ec:d7:66:10:bd:
         22:89:91:52:51:80:6e:b2:97:bd:dc:1b:26:1d:d8:53:28:4c:
         54:7f:06:ca:af:26:e6:17:ba:56:4b:f9:77:5b:14:56:06:30:
         82:21:e0:56:db:98:1f:35:81:11:97:9f:36:28:2b:58:13:bb:
         bf:ab:bd:a6:be:86:72:ea:8a:60:a3:8c:1d:9c:26:67:05:c2:
         43:17:b2:c7:ff:cd:4a:86:25:4a:29:48:7c:f9:7d:21:a4:cd:
         a8:cb:6c:4f:79:9c:9c:a8:48:e4:9f:a5:be:53:33:05:82:82:
         b3:b0:2a:2a:fc:fa:ad:a9:1d:a7:25:c8:0e:04:bd:53:48:89:
         47:23:67:f3:23:c2:7a:59:98:ce:57:5b:f6:37:bc:b5:83:8a:
         34:14:f9:d7:b7:23:fc:10:b2:68:48:2a:cc:c8:0a:42:b8:00:
         ac:ad:9d:14:46:0a:d1:3c:45:a5:f2:44:c7:95:5a:63:d1:07:
         c4:eb:55:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:48:47 2025 by rpki-client