Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136302e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3136302e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          yDhfBGEGR6ua84Ak94hc0Hr4lRTGP+9T0YKgo+Ryl2E=
Subject key identifier:   A8:6E:C9:47:1A:3E:B3:15:27:16:A8:EB:F7:71:16:7F:FA:FA:05:9E
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       289B5508548AF9659B000F28472921A4EF2296E9
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136302e302f32342d3332203d3e203532353830.roa
Signing time:             Wed 30 Apr 2025 18:36:02 +0000
ROA not before:           Wed 30 Apr 2025 18:31:02 +0000
ROA not after:            Wed 29 Apr 2026 18:36:02 +0000
asID:                     52580
IP address blocks:        179.191.160.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 19:07:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:9b:55:08:54:8a:f9:65:9b:00:0f:28:47:29:21:a4:ef:22:96:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr 30 18:31:02 2025 GMT
            Not After : Apr 29 18:36:02 2026 GMT
        Subject: CN=A86EC9471A3EB3152716A8EBF771167FFAFA059E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:40:55:22:85:52:8b:90:93:58:8e:da:8c:4c:
                    98:c9:9d:11:8f:fd:71:cb:f9:5a:70:fb:9a:df:25:
                    50:dc:d9:f5:5f:a4:3a:00:61:ed:57:67:b7:c1:20:
                    3d:43:3d:be:f0:30:79:a2:2e:7e:1e:f9:30:f1:30:
                    b4:21:f3:c8:13:9e:c4:4f:b1:b1:1f:a0:70:b5:d2:
                    86:d6:23:3a:fd:da:1f:d6:fb:a5:22:ef:9c:b6:de:
                    87:b4:5c:b6:85:50:62:20:1e:08:77:d0:cb:dd:4b:
                    3d:f7:a2:b8:b5:19:eb:2b:cd:be:20:20:94:2a:98:
                    fe:23:5d:f4:7f:0e:95:76:2b:78:22:a0:f1:b7:41:
                    74:a9:19:1f:00:81:12:17:7d:6e:23:4a:b5:46:01:
                    57:24:02:51:b0:a4:47:05:14:4f:35:0f:00:e5:ac:
                    8b:cc:d5:45:f0:24:99:0c:cc:ba:3f:dd:49:b0:8a:
                    d5:ec:7c:5c:77:0e:cb:bc:ee:87:b5:21:21:5f:1b:
                    51:b8:d7:5c:22:19:55:71:d7:f9:c4:a2:17:6c:8e:
                    2e:4d:d8:c8:b9:80:c9:e2:f2:06:ff:40:da:fa:c7:
                    ad:8c:5c:3b:e0:62:e8:84:ec:67:b2:d6:1e:ec:e3:
                    ae:28:d6:e7:9d:23:e1:92:b7:89:3f:e9:7a:2b:57:
                    6c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6E:C9:47:1A:3E:B3:15:27:16:A8:EB:F7:71:16:7F:FA:FA:05:9E
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136302e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:30:e9:3c:31:d6:56:86:bd:81:b8:54:d6:e7:c2:c8:3e:30:
         c8:fc:2e:cf:bb:e8:96:db:2d:8f:f8:3a:d5:34:9c:8d:ca:76:
         71:74:7e:49:54:4b:e2:c9:b3:9f:a2:58:ac:9d:83:86:21:3b:
         bf:45:9c:94:8e:84:49:7b:f2:79:4c:12:b4:77:ee:08:d1:af:
         6b:e1:a1:86:25:a5:ee:3b:61:ae:a9:c3:0c:e1:1e:b5:99:aa:
         1b:23:06:4f:20:e2:00:e6:94:ff:0e:5c:88:f1:0f:21:c1:09:
         65:2b:c5:fe:7a:41:6e:0d:b0:47:dd:14:95:0b:1d:89:7e:b5:
         ac:cd:45:0c:29:a3:0f:bd:9e:ed:ad:22:ae:ab:6d:ec:b5:d8:
         7e:cf:33:59:eb:a8:16:25:c1:34:89:54:56:5e:4c:34:85:d1:
         c6:52:95:66:60:4d:1c:b1:1f:7e:de:d4:10:ac:5c:62:f5:5f:
         ec:33:0f:63:8d:41:7d:0e:14:de:a0:61:75:a5:7d:78:51:e0:
         8e:cc:ee:46:d6:60:18:b0:37:2f:6e:3f:78:32:a0:00:5a:db:
         0d:9f:9d:87:81:d5:8b:36:cb:0d:e5:5f:e9:09:81:96:35:dc:
         e3:94:91:89:e3:1a:fa:ed:75:0b:48:fd:cd:60:72:23:25:7b:
         db:25:2d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:03:05 2025 by rpki-client