Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133322e302f32342d3234203d3e20323731313636.roa
File:                     3137392e34322e3133322e302f32342d3234203d3e20323731313636.roa (raw, json)
Hash identifier:          nsUixGFLPigSeWiVkcLSWl5yZBG2+UKFwNjxQ5cacTY=
Subject key identifier:   B8:FD:8C:23:38:90:24:42:BF:8F:E8:0C:FE:BE:2D:0E:2D:2C:45:54
Certificate issuer:       /CN=0343B8928CA78A1D3548AF9EB5A390CF7664FEBA
Certificate serial:       4CF3F72836C95C976204641C250FDE08A46B0A99
Authority key identifier: 03:43:B8:92:8C:A7:8A:1D:35:48:AF:9E:B5:A3:90:CF:76:64:FE:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133322e302f32342d3234203d3e20323731313636.roa
Signing time:             Wed 30 Jul 2025 23:59:46 +0000
ROA not before:           Wed 30 Jul 2025 23:54:46 +0000
ROA not after:            Wed 29 Jul 2026 23:59:46 +0000
asID:                     271166
IP address blocks:        179.42.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.crl
                          rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 00:42:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f3:f7:28:36:c9:5c:97:62:04:64:1c:25:0f:de:08:a4:6b:0a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0343B8928CA78A1D3548AF9EB5A390CF7664FEBA
        Validity
            Not Before: Jul 30 23:54:46 2025 GMT
            Not After : Jul 29 23:59:46 2026 GMT
        Subject: CN=B8FD8C2338902442BF8FE80CFEBE2D0E2D2C4554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cf:ca:74:d3:27:cf:bd:7d:a3:16:f0:55:e4:
                    23:a1:82:18:11:a2:0c:fb:70:21:f0:7a:9f:08:92:
                    e5:b6:fe:14:7a:4a:df:01:e9:16:4e:f3:1b:a5:be:
                    b7:73:98:68:b4:f6:4c:83:5c:02:77:53:80:6b:9c:
                    b9:07:e2:d0:2a:13:4e:ca:14:06:d0:84:36:b0:99:
                    ab:8a:3c:ca:9d:71:33:9d:08:34:6f:e5:93:db:3c:
                    7d:8f:fe:8d:4a:d7:24:f2:a6:ec:9d:7b:85:07:73:
                    fe:70:66:24:d8:53:4e:75:1b:15:05:bc:84:a7:10:
                    6c:92:b9:a0:d4:b0:7e:f9:79:d3:ba:37:1c:84:c0:
                    1a:cd:4f:3a:7d:43:1a:80:6f:df:13:d1:b7:86:d8:
                    66:c3:49:15:c2:f6:da:fa:35:88:4b:7b:4e:f9:a6:
                    ed:3b:77:df:e6:b7:67:2b:49:d8:bc:17:03:89:d9:
                    d5:c8:47:91:11:64:c7:52:cf:b8:25:ba:60:0a:c0:
                    9d:46:56:29:3c:24:be:3e:4f:89:e0:a9:86:0e:54:
                    12:80:ae:e2:54:5e:fa:91:7a:fa:ca:9a:c1:0e:ec:
                    e1:00:ae:15:0a:21:af:f7:5c:8e:9e:08:a8:e9:bc:
                    d7:db:bc:14:19:fd:50:c8:97:e5:86:41:57:42:33:
                    f8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FD:8C:23:38:90:24:42:BF:8F:E8:0C:FE:BE:2D:0E:2D:2C:45:54
            X509v3 Authority Key Identifier:
                keyid:03:43:B8:92:8C:A7:8A:1D:35:48:AF:9E:B5:A3:90:CF:76:64:FE:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133322e302f32342d3234203d3e20323731313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:e8:cb:b7:4f:41:0f:19:3d:aa:bb:23:9c:2a:c9:4c:7f:20:
         dc:0b:ba:a2:d9:c9:d4:da:c8:be:4d:49:7f:4a:fb:d0:fa:eb:
         4b:71:15:f7:f9:2d:02:dc:4b:b3:5b:d2:e3:08:48:3b:11:58:
         6c:5d:8c:5d:94:2a:0f:4c:61:b0:ea:66:dd:ca:06:a7:92:b2:
         30:d9:a7:70:4c:d0:26:80:2f:a6:98:4d:1b:06:a9:ca:4c:5b:
         ec:36:b5:eb:82:05:1e:0f:ff:a0:85:c6:82:ee:f8:ee:40:f3:
         d7:25:d6:ba:69:c9:74:4c:97:b5:71:17:d4:e5:41:17:af:47:
         58:44:a4:12:99:9c:a0:b7:89:5c:43:69:f3:f9:75:22:ac:12:
         93:81:a6:cd:43:aa:f2:a6:26:b0:5f:6f:37:20:9d:5e:88:dd:
         58:bf:88:05:4c:94:49:aa:96:de:fd:b8:ac:42:2b:43:e8:c9:
         ef:df:65:1a:28:45:8b:e4:08:68:80:80:9a:ec:47:22:ff:ef:
         c7:f1:ab:2d:46:01:3f:fd:ef:b8:29:86:45:66:00:97:ab:81:
         13:1c:eb:bb:1a:4a:07:1b:fc:12:8a:d1:81:b2:95:77:f2:90:
         09:20:b4:0b:71:02:5f:bc:e1:e2:f0:5b:c0:c3:1b:e4:4c:b1:
         7b:2e:cc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:12:15 2025 by rpki-client