Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133332e302f32342d3234203d3e20323731313636.roa
File:                     3137392e34322e3133332e302f32342d3234203d3e20323731313636.roa (raw, json)
Hash identifier:          KTcAkgeYiA11ExQN7cxBo03hZTlRZpRR0UNVqAdvMzI=
Subject key identifier:   12:DC:42:10:B0:C1:0A:46:71:49:E5:BC:85:83:8B:46:FC:0A:ED:BD
Certificate issuer:       /CN=0343B8928CA78A1D3548AF9EB5A390CF7664FEBA
Certificate serial:       6FF46670383A11353DB15B6D04E373236254CE13
Authority key identifier: 03:43:B8:92:8C:A7:8A:1D:35:48:AF:9E:B5:A3:90:CF:76:64:FE:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133332e302f32342d3234203d3e20323731313636.roa
Signing time:             Wed 30 Jul 2025 23:59:49 +0000
ROA not before:           Wed 30 Jul 2025 23:54:49 +0000
ROA not after:            Wed 29 Jul 2026 23:59:49 +0000
asID:                     271166
IP address blocks:        179.42.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.crl
                          rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 00:42:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f4:66:70:38:3a:11:35:3d:b1:5b:6d:04:e3:73:23:62:54:ce:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0343B8928CA78A1D3548AF9EB5A390CF7664FEBA
        Validity
            Not Before: Jul 30 23:54:49 2025 GMT
            Not After : Jul 29 23:59:49 2026 GMT
        Subject: CN=12DC4210B0C10A467149E5BC85838B46FC0AEDBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:60:0b:9a:78:ec:60:57:4c:e2:5e:71:6c:a0:
                    0f:d1:47:5e:0e:db:13:50:a9:3f:28:f3:f7:60:42:
                    90:b2:5d:8e:d3:b8:ad:1e:7e:c7:0f:e3:3e:3d:aa:
                    b1:2d:4c:d3:52:83:aa:71:27:c6:0a:7e:38:be:a8:
                    86:67:f8:4d:99:be:b1:94:75:62:5b:a9:24:16:5e:
                    db:b3:4b:4a:0f:23:25:55:f5:9a:da:70:da:df:ec:
                    e6:60:a0:03:08:0c:43:57:91:23:71:45:ea:5e:a1:
                    6c:49:13:a3:5a:0a:7e:a9:e8:1b:5e:16:a4:15:67:
                    af:61:d9:1c:99:c5:5b:16:4e:58:c2:a8:e4:d5:57:
                    35:6f:5a:f9:6e:57:a5:78:78:5d:4a:ad:4b:34:e3:
                    de:80:dc:7f:fd:9d:81:7c:e0:48:1b:bc:88:43:f7:
                    f4:48:73:4c:b9:b3:09:8c:ba:33:75:8c:e2:e7:2f:
                    e3:0e:61:b3:ee:05:93:48:31:a8:1a:9e:59:dc:15:
                    02:5a:10:04:9f:46:3c:23:69:3f:f5:47:86:df:57:
                    29:4b:50:66:db:5e:65:18:60:75:d0:eb:23:43:53:
                    82:33:9f:ea:fa:5b:1d:73:6f:ac:1e:1a:4a:e1:bf:
                    bf:1c:5d:f4:c9:12:ed:e8:97:92:35:18:e8:2d:1a:
                    b0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DC:42:10:B0:C1:0A:46:71:49:E5:BC:85:83:8B:46:FC:0A:ED:BD
            X509v3 Authority Key Identifier:
                keyid:03:43:B8:92:8C:A7:8A:1D:35:48:AF:9E:B5:A3:90:CF:76:64:FE:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133332e302f32342d3234203d3e20323731313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:a8:a5:c0:2a:95:e2:a1:07:d0:ea:27:0f:c8:73:26:91:eb:
         cf:9d:90:4b:86:f6:dc:3e:29:f5:4a:16:e7:d7:87:b2:fe:a2:
         80:9d:f7:3d:f4:fc:54:f7:a3:2b:cf:0a:e6:cf:59:eb:31:a8:
         e7:a2:40:bc:ed:97:91:47:72:3f:32:28:03:46:e7:b7:44:1c:
         bb:5e:a7:74:cd:f6:a4:c1:14:a1:bd:7e:e8:3f:32:04:cd:71:
         8c:85:a3:31:82:85:88:69:6a:ae:88:d1:91:b1:b2:77:4a:fa:
         38:96:dd:d8:85:3c:6d:a7:32:58:b4:9b:bc:94:79:ff:7f:1e:
         1b:af:4b:5e:d9:90:59:e8:a8:0a:fe:42:0c:3c:e4:9b:d3:ce:
         7c:1b:59:bd:9c:94:55:3d:04:43:8e:66:57:ec:53:aa:66:72:
         77:7f:2d:a0:b3:4d:d3:d9:0b:60:75:7f:70:f5:0f:46:8e:25:
         e1:66:7f:10:57:be:8b:ec:3f:14:3f:c2:5b:3b:58:3b:08:c4:
         13:45:5c:19:1a:c5:4e:38:cb:da:d9:e3:06:bb:b4:13:d7:67:
         dc:24:f3:a7:6d:3d:c0:c9:fb:2c:70:ba:e3:93:31:c4:fc:e6:
         16:49:7c:e4:10:e0:b9:2d:b9:75:8e:55:05:cb:c0:f8:a7:5e:
         e6:9f:77:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:11:43 2025 by rpki-client