Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3132342e3133312e302f32342d3234203d3e20323633363132.roa
File:                     3137392e3132342e3133312e302f32342d3234203d3e20323633363132.roa (raw, json)
Hash identifier:          7m2a+txaAjGT6uG2KC/RdJVUjycDLqsIk5KWu7BqFQk=
Subject key identifier:   37:28:6D:FD:EA:C6:6C:D2:7A:C6:F4:D2:8D:26:7B:27:C5:BD:4D:7B
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       02CFFDF63EE0686C8F772587C53DB1E51A157707
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3132342e3133312e302f32342d3234203d3e20323633363132.roa
Signing time:             Sat 03 May 2025 00:20:37 +0000
ROA not before:           Sat 03 May 2025 00:15:37 +0000
ROA not after:            Sat 02 May 2026 00:20:37 +0000
asID:                     263612
IP address blocks:        179.124.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 04:09:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:cf:fd:f6:3e:e0:68:6c:8f:77:25:87:c5:3d:b1:e5:1a:15:77:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: May  3 00:15:37 2025 GMT
            Not After : May  2 00:20:37 2026 GMT
        Subject: CN=37286DFDEAC66CD27AC6F4D28D267B27C5BD4D7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e3:80:35:a0:17:1c:ad:36:e6:c6:fa:6e:04:
                    f6:f0:97:a9:1e:2b:60:18:91:6a:0b:0e:06:d2:b6:
                    d6:b2:af:34:f3:6d:11:99:9e:2e:37:7f:55:41:7c:
                    76:9c:54:8f:38:c3:af:0a:57:8e:5b:01:ed:d0:8d:
                    68:00:0e:f7:82:fe:73:5b:fb:96:5b:1c:68:5b:07:
                    22:5c:cf:25:85:1b:bc:24:c4:1c:9e:fb:bd:f6:3d:
                    60:90:f7:31:8e:91:cf:45:05:69:70:a4:13:04:0d:
                    83:1c:01:c2:e3:5c:72:ed:ba:6a:3d:1d:59:d2:7b:
                    91:ee:b6:b1:f6:29:9a:cd:ef:e8:bf:fe:ad:db:db:
                    67:06:9a:73:7d:a9:e0:08:59:b3:32:13:22:d3:ff:
                    ef:d7:5d:22:4c:35:5f:28:fa:10:b1:cc:47:64:67:
                    8b:09:70:a5:46:3c:45:4a:0d:14:20:25:b2:7f:11:
                    ed:f4:57:56:a9:7a:25:88:32:a4:b8:6c:24:09:a5:
                    3b:fe:58:a5:30:a0:fe:74:33:ca:8a:7b:0f:89:f3:
                    6f:13:44:f2:92:f2:21:cf:c8:56:ff:18:41:7c:db:
                    93:e7:5b:79:04:db:2b:64:35:c2:41:2c:bd:ff:b5:
                    b0:bc:ce:ba:2d:bc:d9:cf:dc:b0:df:16:7e:d2:e6:
                    d9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:28:6D:FD:EA:C6:6C:D2:7A:C6:F4:D2:8D:26:7B:27:C5:BD:4D:7B
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3132342e3133312e302f32342d3234203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:42:a8:64:92:24:31:71:c7:f4:a3:7d:dc:c2:16:8d:3f:b7:
         08:ba:62:59:f3:0c:5f:1f:d2:2f:e2:88:d0:73:8b:b0:97:ec:
         8e:cf:cc:a1:be:15:30:78:4d:1d:1e:eb:f1:6d:31:ea:11:77:
         65:39:0f:c8:90:1e:85:62:2c:a7:59:50:08:8c:7d:33:4b:43:
         27:ee:ea:29:61:d3:27:25:a9:76:e0:83:6d:db:95:b5:2e:57:
         c6:46:36:40:ca:2f:d1:e3:c0:47:93:c3:75:19:f8:21:f0:a3:
         2a:4d:ce:89:c4:c4:2f:83:04:26:e9:f6:3b:c8:fa:54:d1:12:
         33:a9:f8:79:15:d1:82:6a:3a:07:3e:61:bb:51:2c:74:8e:a0:
         61:b1:11:be:7a:d7:2e:09:d5:16:c7:fd:de:49:c9:67:81:26:
         c9:2d:13:d9:c5:2d:85:db:6d:2a:f6:7d:33:2f:2f:b6:b1:77:
         c7:e8:06:89:67:c1:59:c6:38:1f:95:92:06:01:5d:88:ee:8b:
         68:30:9b:3c:5f:95:bc:4d:b3:24:cf:e0:0e:ad:66:48:e9:3f:
         14:1d:6d:3c:91:0a:44:f0:e2:c5:8e:61:8d:cd:f2:26:71:3d:
         7d:9d:61:ea:b3:73:31:7d:7a:fa:ed:21:06:93:fd:d8:75:3c:
         fc:69:a7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:39:06 2025 by rpki-client