Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133352e302f32342d3234203d3e20323731313636.roa
File:                     3137392e34322e3133352e302f32342d3234203d3e20323731313636.roa (raw, json)
Hash identifier:          rEVRUj+OMOr8ex1XJsMDs+aNuh4znkXFky0YVDXzhcQ=
Subject key identifier:   46:DB:EE:FE:6C:8A:E7:C2:92:DB:06:4C:3E:26:1C:63:60:AD:18:B6
Certificate issuer:       /CN=0343B8928CA78A1D3548AF9EB5A390CF7664FEBA
Certificate serial:       6340ED79AE5CFC1EC471F885D09050975CE6BECD
Authority key identifier: 03:43:B8:92:8C:A7:8A:1D:35:48:AF:9E:B5:A3:90:CF:76:64:FE:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133352e302f32342d3234203d3e20323731313636.roa
Signing time:             Wed 30 Jul 2025 23:59:56 +0000
ROA not before:           Wed 30 Jul 2025 23:54:56 +0000
ROA not after:            Wed 29 Jul 2026 23:59:56 +0000
asID:                     271166
IP address blocks:        179.42.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.crl
                          rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 08 Aug 2025 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:40:ed:79:ae:5c:fc:1e:c4:71:f8:85:d0:90:50:97:5c:e6:be:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0343B8928CA78A1D3548AF9EB5A390CF7664FEBA
        Validity
            Not Before: Jul 30 23:54:56 2025 GMT
            Not After : Jul 29 23:59:56 2026 GMT
        Subject: CN=46DBEEFE6C8AE7C292DB064C3E261C6360AD18B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8e:2c:0d:62:07:b7:30:9b:1a:77:d9:e0:ec:
                    8f:e3:f3:a4:bd:97:8d:c7:37:ee:1c:87:9f:c9:8a:
                    c4:aa:09:77:bc:a4:3f:42:e8:4b:6a:ae:73:f8:37:
                    9e:22:3a:6d:f1:b5:58:1d:e5:a4:7f:34:3e:93:a2:
                    2f:93:c4:64:6a:52:3c:66:03:67:78:36:12:8e:ac:
                    35:4e:9e:da:1f:8c:68:18:dc:60:08:84:b9:a1:a4:
                    61:ea:e3:5a:95:7d:26:2d:5e:72:35:ed:73:28:1a:
                    a6:1b:e6:51:24:a2:1a:04:d1:7e:88:b3:37:ea:23:
                    fa:e2:74:c9:16:47:c3:74:04:83:61:a4:2a:88:b7:
                    d7:51:6f:fd:1f:a0:75:33:5a:cd:6e:5c:20:79:87:
                    79:9b:fd:c1:9c:2a:d0:7f:c1:01:f1:5b:a5:54:cc:
                    11:b5:f7:32:6e:cb:dc:cf:59:08:6d:e3:3d:58:0e:
                    a1:b3:3b:82:51:4f:16:32:8d:36:37:36:22:e8:05:
                    04:10:4a:31:7f:fb:77:ab:54:c6:97:a6:b9:bd:e7:
                    c6:2f:db:c1:8b:21:61:3a:ed:df:5d:56:53:7b:47:
                    74:10:ff:68:e0:4a:90:ef:27:cb:26:aa:92:fb:f3:
                    f3:41:7b:15:0d:cc:9f:7e:51:03:9a:73:ab:7e:8d:
                    f7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DB:EE:FE:6C:8A:E7:C2:92:DB:06:4C:3E:26:1C:63:60:AD:18:B6
            X509v3 Authority Key Identifier:
                keyid:03:43:B8:92:8C:A7:8A:1D:35:48:AF:9E:B5:A3:90:CF:76:64:FE:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133352e302f32342d3234203d3e20323731313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:dd:4a:80:ae:cf:c0:c6:48:9b:91:5e:10:aa:2d:cf:74:f3:
         da:2c:7a:30:ee:c1:0a:1d:8e:18:54:ea:75:06:d1:3d:98:47:
         8c:4e:d3:aa:7b:0e:a8:11:f5:8b:4a:cb:7c:05:c2:1b:e3:6f:
         31:1e:14:19:17:35:ae:07:e0:50:4e:7b:5f:9c:d7:22:59:7e:
         0f:39:75:d2:80:40:3f:94:b5:3c:13:51:0d:f9:f0:08:b9:77:
         09:ef:24:6e:d0:ae:6d:eb:80:b2:d5:f0:48:19:1d:68:c1:db:
         e6:d4:1b:d3:3c:44:0a:a0:19:c6:e2:1d:c5:e0:27:17:7d:b8:
         02:98:e9:fb:b8:1e:f8:49:1b:ab:0c:74:62:44:20:93:d1:40:
         9b:94:f1:49:12:1e:d7:fa:50:2b:46:df:00:d8:33:7e:46:c9:
         ce:71:25:33:36:a5:f7:63:22:57:17:e3:23:87:b9:12:26:ec:
         11:d8:59:4f:37:2b:6d:e6:ff:59:28:3e:be:41:51:e8:34:8e:
         c5:78:c9:f9:63:78:ae:ac:51:e6:23:18:62:77:ec:91:21:ad:
         4c:bc:f0:93:89:48:b8:5b:e0:b2:93:fe:5d:32:b9:cf:11:a1:
         ef:8e:32:24:5b:5e:c6:25:51:80:ed:6c:00:08:d8:43:ee:a4:
         03:22:43:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:34:41 2025 by rpki-client