Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131342e302f32342d3234203d3e20323633363132.roa
File:                     3137392e3138392e3131342e302f32342d3234203d3e20323633363132.roa (raw, json)
Hash identifier:          /3q7WfNMJ0jOIlakR2LBm+3ztjijGQF91R2yg/fgAs0=
Subject key identifier:   51:CD:A6:5E:53:19:1E:AC:58:AF:23:09:56:5B:50:F7:28:5A:E1:C0
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       04012BE76F4D448B9A9BB5F7A3374C1BBE47359B
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131342e302f32342d3234203d3e20323633363132.roa
Signing time:             Sat 03 May 2025 00:20:30 +0000
ROA not before:           Sat 03 May 2025 00:15:30 +0000
ROA not after:            Sat 02 May 2026 00:20:30 +0000
asID:                     263612
IP address blocks:        179.189.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 16:48:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:01:2b:e7:6f:4d:44:8b:9a:9b:b5:f7:a3:37:4c:1b:be:47:35:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: May  3 00:15:30 2025 GMT
            Not After : May  2 00:20:30 2026 GMT
        Subject: CN=51CDA65E53191EAC58AF2309565B50F7285AE1C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b9:61:71:06:48:83:cd:a2:29:c5:3d:cb:6a:
                    e0:bd:84:58:3a:e0:7b:ed:41:55:2d:d9:97:3a:db:
                    f1:ec:4a:ff:fd:9e:9f:b6:1b:ff:1e:c0:01:a6:52:
                    21:16:07:ae:2f:ff:0a:85:cc:45:12:2b:5e:04:50:
                    1c:92:6b:63:bf:6f:37:97:4e:65:4c:2d:4c:88:98:
                    1f:6e:3d:02:81:b1:f4:ff:07:bf:ef:8b:a8:69:6a:
                    c1:08:9b:c8:88:8f:98:56:8c:b6:3c:46:45:bb:ec:
                    1d:36:18:62:d3:17:b0:b4:fc:9a:ca:7b:96:42:1a:
                    6a:a0:4a:5f:99:03:52:76:27:3e:55:b6:3b:31:c7:
                    3b:ab:c7:b3:02:32:54:b4:73:0f:9b:db:d2:6d:1e:
                    88:06:d7:87:0c:4b:c1:03:92:c2:f4:24:cf:b0:1c:
                    cf:a7:89:23:54:32:66:ec:5a:93:bc:73:7c:b3:02:
                    34:57:aa:e6:4a:e5:fe:d1:85:b7:c2:2c:46:a5:9d:
                    ee:58:84:f0:01:a6:c1:c9:5e:e2:56:7f:02:99:ba:
                    60:ef:3b:47:05:5c:4a:1d:a2:07:08:fa:72:a2:cc:
                    f0:2b:a9:24:ae:38:41:6a:cb:4b:7f:10:f9:7f:f7:
                    1a:56:a6:ed:cb:3f:31:11:0b:95:b9:1a:c9:59:0f:
                    a2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:CD:A6:5E:53:19:1E:AC:58:AF:23:09:56:5B:50:F7:28:5A:E1:C0
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131342e302f32342d3234203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:15:f7:29:65:7f:76:c8:3c:11:bf:a3:b2:fa:60:87:da:a6:
         fc:32:b5:f0:0a:36:df:03:3b:ec:05:47:e7:e1:ca:e2:f1:0b:
         1f:99:f7:3f:a7:c6:42:d2:43:37:59:d0:d9:a1:0c:9d:5f:64:
         f4:18:71:5a:cd:cf:8b:13:e3:a0:59:75:56:ef:c5:21:5f:7e:
         9d:2b:f6:ba:73:78:32:56:f4:0c:bf:2a:c8:98:70:a8:0f:ff:
         9c:7d:d6:a2:0e:3d:bc:d9:b3:61:42:e6:6a:40:37:60:df:60:
         d3:85:0f:50:e6:9f:a5:0f:23:fd:31:6e:30:25:7a:16:2a:c9:
         ec:29:d8:76:75:aa:6d:e2:75:50:70:c0:0b:7e:ec:6e:09:ee:
         9f:53:87:b1:6f:a6:bd:54:53:4b:eb:92:49:b8:31:53:74:57:
         71:b5:8e:36:9d:b4:70:04:c1:a6:fc:41:5f:f0:bf:47:5e:4b:
         d4:23:f4:8c:7d:b5:7e:dd:7f:08:4b:a0:73:d1:4f:e7:82:19:
         10:60:3e:24:05:ee:b2:84:9f:e2:02:bd:ed:72:25:37:a7:d9:
         7e:4d:79:ba:1f:6d:f8:91:b4:2b:ed:27:b9:89:98:8b:ac:27:
         d6:3e:14:fa:35:ad:ed:12:ad:42:c3:86:da:66:a0:fe:6d:a1:
         b7:ef:1a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:14:19 2025 by rpki-client