Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132312e302f32342d3234203d3e20323633363132.roa
File:                     3137392e3138392e3132312e302f32342d3234203d3e20323633363132.roa (raw, json)
Hash identifier:          In/Ineglp5+geqJEa/SxQZKFRkUnmLTyt03EkrnFx58=
Subject key identifier:   F3:D4:35:34:94:96:0E:E1:C6:59:71:3F:DE:4B:A0:D6:62:2B:02:4D
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       728D34DA34719A57AE8A4EF7DFAF876CCD127CFF
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132312e302f32342d3234203d3e20323633363132.roa
Signing time:             Sat 03 May 2025 00:20:43 +0000
ROA not before:           Sat 03 May 2025 00:15:43 +0000
ROA not after:            Sat 02 May 2026 00:20:43 +0000
asID:                     263612
IP address blocks:        179.189.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 22:27:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:8d:34:da:34:71:9a:57:ae:8a:4e:f7:df:af:87:6c:cd:12:7c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: May  3 00:15:43 2025 GMT
            Not After : May  2 00:20:43 2026 GMT
        Subject: CN=F3D4353494960EE1C659713FDE4BA0D6622B024D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7b:f1:6d:92:4f:61:24:b0:6a:2d:34:99:3e:
                    1c:30:e0:c5:f1:07:b6:f4:e6:03:93:86:ad:a4:12:
                    33:77:53:05:02:1a:85:a1:7d:7d:ea:42:1a:52:e8:
                    6b:dd:50:82:0f:f9:f3:e7:1c:d5:e7:0a:6e:25:14:
                    93:c0:d1:2d:fa:2d:e1:ab:53:db:03:84:ab:1b:fc:
                    dd:0d:fb:65:b5:58:7a:b5:03:50:e2:98:a0:fa:dc:
                    c9:46:7c:e6:d6:ce:e3:80:19:7b:86:d7:0d:90:89:
                    8f:ae:9f:0d:5a:e7:55:3a:2b:0d:e3:94:67:02:46:
                    77:5d:f1:08:ba:4b:42:35:01:26:31:f1:5e:2d:f2:
                    3d:45:0f:c8:84:50:c9:e3:70:38:2e:98:8c:68:20:
                    3c:c3:a5:76:a0:bc:fe:06:d4:a5:9b:9b:c7:9e:93:
                    da:8c:b9:e4:f0:7d:cf:ae:aa:ee:f1:cd:ea:2a:9f:
                    de:14:42:0c:e9:a0:04:d7:61:42:03:75:69:37:0b:
                    98:39:8c:6c:2a:ff:cf:18:3b:cd:49:a6:77:1b:ba:
                    d4:ce:6d:fe:59:5b:1a:2b:93:80:ac:34:73:3e:33:
                    65:08:b0:76:74:fc:55:c6:3b:7f:18:f0:48:81:d7:
                    2f:6d:21:e2:34:37:56:29:75:a5:97:95:73:12:2e:
                    0f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D4:35:34:94:96:0E:E1:C6:59:71:3F:DE:4B:A0:D6:62:2B:02:4D
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132312e302f32342d3234203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:cf:04:78:f7:bb:54:4a:1c:a6:94:4b:8e:57:c0:8c:84:0e:
         59:26:ec:48:25:7a:cf:e2:c7:73:fd:70:35:da:28:5f:f5:74:
         f4:bd:c7:31:89:22:3e:d1:5d:ef:5e:e7:63:ab:e2:8b:97:21:
         f7:ee:ff:d4:e2:9a:6c:47:14:da:2a:30:b5:56:e4:06:d9:27:
         2c:ad:22:ef:56:2f:87:6b:13:f4:a7:58:67:86:02:ae:e7:00:
         3a:a2:28:b2:3d:ea:1d:e4:bf:5e:cd:1d:a1:7b:2a:98:78:29:
         57:98:13:2d:5e:43:09:d9:d0:57:5b:20:59:51:ce:11:9f:9a:
         6a:f0:3f:d7:ef:40:b8:35:f2:b7:5a:d0:84:32:ed:89:78:58:
         7c:28:6d:7b:f8:46:1e:47:2b:60:16:49:55:f5:a2:eb:b9:83:
         ce:2b:c6:c4:d1:2d:3c:8d:13:cf:e7:c8:8e:f4:90:6e:7d:06:
         f7:da:02:51:94:1d:ab:75:fd:7d:b9:d4:18:3a:74:63:74:ef:
         db:81:87:20:f3:bb:61:da:a5:32:8a:03:c4:50:ea:29:1a:29:
         07:6a:02:82:53:c5:94:83:32:15:b9:22:ee:2f:76:52:1f:66:
         af:fb:1f:c9:e4:ab:0a:4b:2b:7b:a2:b5:18:33:16:11:e5:fb:
         d0:e6:ae:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:58:40 2025 by rpki-client