Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131372e302f32342d3234203d3e20323633363132.roa
File:                     3137392e3138392e3131372e302f32342d3234203d3e20323633363132.roa (raw, json)
Hash identifier:          c5Pygn1vxsKw+xhRpSyntWv55uUDReqsGToCCtVs/Sg=
Subject key identifier:   48:D7:61:36:AD:01:21:D5:37:0E:2A:25:49:A8:EC:40:5A:C4:47:AC
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       71FCD9F7928E8A35B11A5F11BB8C5934CCF8C3DB
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131372e302f32342d3234203d3e20323633363132.roa
Signing time:             Sat 03 May 2025 00:20:33 +0000
ROA not before:           Sat 03 May 2025 00:15:33 +0000
ROA not after:            Sat 02 May 2026 00:20:33 +0000
asID:                     263612
IP address blocks:        179.189.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 May 2025 23:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:fc:d9:f7:92:8e:8a:35:b1:1a:5f:11:bb:8c:59:34:cc:f8:c3:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: May  3 00:15:33 2025 GMT
            Not After : May  2 00:20:33 2026 GMT
        Subject: CN=48D76136AD0121D5370E2A2549A8EC405AC447AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e7:2d:da:c4:3c:89:06:84:ba:e7:db:d6:f8:
                    26:49:a4:79:d7:37:94:ea:f6:e7:14:57:d8:35:ad:
                    75:79:31:a9:4a:01:a9:f9:c1:56:86:9b:c9:48:16:
                    bb:24:af:5d:e7:16:7c:00:4a:c3:89:2e:02:be:db:
                    39:1b:c8:04:21:6b:a5:2e:97:43:e1:0f:a4:7d:08:
                    c8:ed:bc:4c:0a:9b:6f:14:9a:bc:10:da:e8:6f:16:
                    25:09:f9:49:43:c3:66:83:1d:15:da:99:7a:9b:93:
                    2a:db:c0:f2:c4:a5:46:5b:7e:db:14:f5:18:97:2b:
                    3d:bb:ca:47:1a:a9:9c:bd:29:42:f0:6f:3c:d9:5d:
                    b4:f9:e8:10:00:9e:92:5b:98:a6:a5:ac:c1:a9:3a:
                    c4:fa:ef:c9:01:9f:35:61:7b:5b:80:cd:4e:04:34:
                    37:0b:0f:9a:43:33:35:bf:8e:8a:85:92:60:f2:2e:
                    8a:7c:e4:7f:2a:b0:9f:b7:a8:d8:8b:59:a6:63:7b:
                    33:02:12:e4:54:57:5c:ec:dc:a9:86:96:4a:e3:7e:
                    61:82:5e:ff:13:db:ea:4f:98:ab:9c:39:1f:90:ec:
                    0c:f1:33:24:e5:55:b6:93:72:9c:11:e0:dd:d3:47:
                    ad:ec:60:8b:44:c9:04:20:70:df:60:c8:5e:1e:08:
                    9a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D7:61:36:AD:01:21:D5:37:0E:2A:25:49:A8:EC:40:5A:C4:47:AC
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131372e302f32342d3234203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:02:32:04:88:cb:26:b7:9d:72:e6:ea:24:9a:fc:c2:a8:f8:
         ca:26:8c:7b:c3:09:50:74:96:1c:8a:e6:1c:7a:40:82:a5:d2:
         14:14:f3:5a:89:a6:7d:83:ab:45:1d:a4:47:08:dc:8f:f4:ce:
         b1:2b:4a:f7:b8:34:8c:7c:03:4a:d0:9f:95:c2:08:25:6d:4f:
         e4:38:6d:57:0c:24:f0:0d:80:eb:4d:db:b2:e1:d1:16:42:fb:
         83:1c:4a:1e:d7:9f:70:cf:93:f1:d1:f7:6c:f0:43:e2:60:f1:
         80:0f:b2:fd:d9:92:fb:2d:d5:4e:02:a3:ef:a7:00:30:0c:c4:
         b2:e7:0a:cb:43:e4:c6:26:f0:59:63:2e:cc:1b:68:ce:7a:4a:
         c4:23:77:1d:54:00:6b:01:06:f7:03:f1:ca:ed:02:8c:dc:4d:
         db:4c:9d:7d:fa:c2:01:38:e6:c3:6c:26:7d:ab:28:4a:bd:4b:
         45:08:3e:77:6a:5a:ba:22:1e:78:ed:f6:f8:be:f9:1d:74:81:
         e6:f5:58:1f:75:8f:07:75:5f:29:41:1f:8b:f7:b4:40:85:0a:
         d6:c8:f6:bb:2f:8b:32:0b:73:3b:7b:a7:37:46:3d:0f:96:05:
         71:0a:9f:45:54:c8:75:a1:87:0e:5b:26:9c:73:42:98:ee:5b:
         cb:3a:9e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:50:38 2025 by rpki-client