Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136312e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3136312e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          i8htkdenZjpWlDq4kib7DEATnBGJJncZezQmRtx1364=
Subject key identifier:   F6:F3:B7:77:1D:D4:CB:9C:74:84:A5:5C:17:1C:91:70:53:5C:4E:0F
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       31E1B4A085EBAF209731082ECF5E00DF628FF93D
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136312e302f32342d3332203d3e203532353830.roa
Signing time:             Wed 30 Apr 2025 18:36:34 +0000
ROA not before:           Wed 30 Apr 2025 18:31:34 +0000
ROA not after:            Wed 29 Apr 2026 18:36:34 +0000
asID:                     52580
IP address blocks:        179.191.161.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 19:07:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e1:b4:a0:85:eb:af:20:97:31:08:2e:cf:5e:00:df:62:8f:f9:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr 30 18:31:34 2025 GMT
            Not After : Apr 29 18:36:34 2026 GMT
        Subject: CN=F6F3B7771DD4CB9C7484A55C171C9170535C4E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c7:b2:49:a8:ee:45:4a:42:d8:1f:c4:58:ba:
                    9a:ca:aa:6f:d8:49:7c:be:be:84:79:dd:aa:b2:c0:
                    ac:ed:bd:8d:08:9e:c6:84:99:d3:dd:a5:43:cb:1c:
                    05:28:97:9f:a6:6f:35:3f:18:95:dd:90:a9:b6:b4:
                    8c:78:37:78:9e:65:d6:7d:0d:39:f2:48:b0:78:86:
                    77:fb:76:4a:b4:7c:1f:3d:97:b3:77:b8:1e:1a:95:
                    5a:27:95:71:08:bf:40:ff:14:0b:1f:ad:6a:51:69:
                    07:62:bd:32:1b:8b:fd:21:a8:ae:57:84:81:c5:05:
                    9c:a3:57:44:cb:c5:3e:87:55:b2:52:e3:ad:83:6b:
                    4a:ab:3e:be:07:c8:71:13:62:20:50:a7:d1:c5:db:
                    37:7b:bd:54:c9:ae:b1:c9:d7:b0:eb:78:07:84:43:
                    b6:75:97:45:5e:ec:77:05:5e:bd:af:42:55:3c:be:
                    dd:f8:1a:22:ff:8d:6f:86:85:e7:5f:28:bd:32:6a:
                    10:fe:d6:19:c0:d3:9e:a1:e6:76:6c:fb:50:2e:1a:
                    c0:f4:eb:01:ee:49:96:ef:d4:82:4c:67:66:ae:bd:
                    19:db:63:c5:f2:97:c2:97:c2:de:97:8f:9b:e7:04:
                    eb:b8:94:29:c4:ae:95:48:9f:25:7b:68:00:60:47:
                    df:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F3:B7:77:1D:D4:CB:9C:74:84:A5:5C:17:1C:91:70:53:5C:4E:0F
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136312e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:72:fe:4e:0e:d5:f0:66:76:04:20:16:4f:4a:b4:7c:79:39:
         a1:a7:36:86:39:49:77:83:83:23:9f:8c:99:e5:0b:43:23:da:
         23:1d:dc:a3:c1:9b:91:4f:80:f8:09:34:03:d6:24:70:27:da:
         43:fc:8f:01:8e:43:6b:7a:c9:3f:c2:32:68:e5:3c:50:26:89:
         3b:ae:f8:36:62:c0:01:66:6c:d1:27:73:44:c8:0e:8a:e9:75:
         46:fc:07:e0:d5:27:32:af:d5:0f:30:fd:f0:64:c1:33:a7:5a:
         f9:cc:3c:a6:d4:cb:17:aa:37:48:ec:ca:8f:f2:7e:5f:b1:08:
         cf:fe:ae:9a:22:6f:dc:30:c6:5b:96:24:12:96:79:5c:80:63:
         6d:52:44:98:c8:46:97:ed:43:57:74:c5:5f:25:94:0b:03:3d:
         d8:fc:f2:ce:b1:2e:ed:97:8f:74:9d:89:7a:16:c8:64:d3:42:
         9d:17:a0:48:1d:32:a9:4d:82:5c:b7:29:fe:66:b4:8b:22:49:
         96:f0:81:68:93:e2:3b:74:46:82:fa:bf:33:37:f9:79:04:88:
         cd:0a:7a:05:e7:56:6a:b5:02:a4:65:4b:10:79:03:a9:45:89:
         03:f5:46:c6:7a:2c:cf:f1:3e:50:b7:9b:4c:7c:45:91:bb:22:
         7c:b6:81:f9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMeG0oIXrryCXMQguz14A32KP+T0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzEzMTM2QURFRUJCNTQxMTFFMkMwOUYyQzdERkJCMzk1
MUVCQ0ZEMDAeFw0yNTA0MzAxODMxMzRaFw0yNjA0MjkxODM2MzRaMDMxMTAvBgNV
BAMTKEY2RjNCNzc3MURENENCOUM3NDg0QTU1QzE3MUM5MTcwNTM1QzRFMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQx7JJqO5FSkLYH8RYuprKqm/Y
SXy+voR53aqywKztvY0InsaEmdPdpUPLHAUol5+mbzU/GJXdkKm2tIx4N3ieZdZ9
DTnySLB4hnf7dkq0fB89l7N3uB4alVonlXEIv0D/FAsfrWpRaQdivTIbi/0hqK5X
hIHFBZyjV0TLxT6HVbJS462Da0qrPr4HyHETYiBQp9HF2zd7vVTJrrHJ17DreAeE
Q7Z1l0Ve7HcFXr2vQlU8vt34GiL/jW+GhedfKL0yahD+1hnA056h5nZs+1AuGsD0
6wHuSZbv1IJMZ2auvRnbY8Xyl8KXwt6Xj5vnBOu4lCnErpVInyV7aABgR99RAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU9vO3dx3Uy5x0hKVcFxyRcFNcTg8wHwYDVR0j
BBgwFoAUwTE2re67VBEeLAnyx9+7OVHrz9AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHBUOGppQldteU4zUnhuakdvUGNZR3BWUnd1VkYzZE1Wd1JldjNGTnp0
aTEvMC9DMTMxMzZBREVFQkI1NDExMUUyQzA5RjJDN0RGQkIzOTUxRUJDRkQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxMzEzNkFERUVCQjU0MTEx
RTJDMDlGMkM3REZCQjM5NTFFQkNGRDAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hwVDhqaUJXbXlOM1J4bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAv
MzEzNzM5MmUzMTM5MzEyZTMxMzYzMTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1
MzIzNTM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzv6EwDQYJKoZIhvcNAQELBQADggEBAH5y/k4O
1fBmdgQgFk9KtHx5OaGnNoY5SXeDgyOfjJnlC0Mj2iMd3KPBm5FPgPgJNAPWJHAn
2kP8jwGOQ2t6yT/CMmjlPFAmiTuu+DZiwAFmbNEnc0TIDorpdUb8B+DVJzKv1Q8w
/fBkwTOnWvnMPKbUyxeqN0jsyo/yfl+xCM/+rpoib9wwxluWJBKWeVyAY21SRJjI
RpftQ1d0xV8llAsDPdj88s6xLu2Xj3SdiXoWyGTTQp0XoEgdMqlNgly3Kf5mtIsi
SZbwgWiT4jt0RoL6vzM3+XkEiM0KegXnVmq1AqRlSxB5A6lFiQP1RsZ6LM/xPlC3
m0x8RZG7Iny2gfk=
-----END CERTIFICATE-----
Generated at Thu May 1 11:32:55 2025 by rpki-client