Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136352e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3136352e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          8GN97sl+pJ+tCaX0DLJ7w5dxW6B2ZKcuxGjP4u2EtE4=
Subject key identifier:   C1:7C:7F:C9:C6:C8:75:C7:6F:80:12:C3:DF:B7:C3:4D:2C:1C:9D:3F
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       5BC5B5130FDA0F3CA75E7D7F611ADA7E18B64B6C
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136352e302f32342d3332203d3e203532353830.roa
Signing time:             Wed 30 Apr 2025 18:41:29 +0000
ROA not before:           Wed 30 Apr 2025 18:36:29 +0000
ROA not after:            Wed 29 Apr 2026 18:41:29 +0000
asID:                     52580
IP address blocks:        179.191.165.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 19:07:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c5:b5:13:0f:da:0f:3c:a7:5e:7d:7f:61:1a:da:7e:18:b6:4b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr 30 18:36:29 2025 GMT
            Not After : Apr 29 18:41:29 2026 GMT
        Subject: CN=C17C7FC9C6C875C76F8012C3DFB7C34D2C1C9D3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3f:ee:09:fe:94:09:22:ed:fa:08:92:74:7e:
                    f5:e8:77:c0:9d:17:5c:8e:12:b7:f9:c2:f8:45:da:
                    ee:bd:7d:15:e7:2b:a8:f1:f4:56:40:cd:29:1b:e1:
                    1b:f2:40:45:9d:a4:47:17:89:19:46:8f:68:b8:f1:
                    29:96:78:37:78:49:7d:98:e0:44:dc:54:a0:e3:a0:
                    ee:be:06:52:72:ac:45:03:8e:7a:d6:a8:ca:d4:4e:
                    d1:5b:60:a2:a5:92:62:dc:42:dc:8a:cd:8b:3e:9b:
                    9a:ae:32:73:02:25:a8:a8:0c:2b:89:dd:d9:54:be:
                    3a:30:ea:3a:cd:2a:ba:ed:22:a7:16:71:82:3a:c9:
                    a9:89:20:42:5e:28:80:bb:2a:71:3b:8f:2a:7d:76:
                    bc:65:47:00:63:bd:db:2d:dd:c4:0b:92:af:8b:d5:
                    2d:6a:2c:5a:fc:cc:f0:8f:75:cd:e8:cd:d5:7a:93:
                    c2:78:49:37:c5:d2:79:e9:0d:58:99:1d:74:c2:68:
                    f4:7e:a2:b2:2b:86:32:e7:ba:bc:aa:f3:c7:00:a2:
                    1b:e0:92:20:bc:1a:1c:64:26:d4:1a:85:54:6f:f8:
                    d9:e6:5c:b0:87:55:4f:6c:48:41:20:bf:2f:ed:a6:
                    fa:e6:9a:c5:36:ba:af:3e:fa:28:e1:8d:70:d4:d5:
                    68:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7C:7F:C9:C6:C8:75:C7:6F:80:12:C3:DF:B7:C3:4D:2C:1C:9D:3F
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136352e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:10:9d:ba:81:b3:7f:3a:62:7b:d8:3c:e3:04:71:3c:b1:00:
         44:0a:c7:d4:2a:e8:64:6b:39:e9:00:1e:e9:a7:1f:1f:cc:41:
         55:c4:39:00:2e:e6:46:03:af:a5:2b:70:7d:27:43:7d:20:08:
         77:95:e4:67:1d:8f:da:1f:ba:f9:f3:2e:e2:6e:e6:b3:87:ea:
         fa:73:14:5e:24:23:e9:ee:af:83:c1:40:a9:b6:3c:6d:c7:03:
         d3:53:15:34:ef:b4:4e:3d:28:70:0c:4b:76:c8:2f:72:2a:96:
         7b:6d:c0:84:3d:62:b1:2c:3f:d2:2c:85:29:ae:69:e3:91:57:
         4a:dc:25:f8:34:35:e4:f3:4b:c8:9f:e0:b1:34:d6:0c:c9:31:
         7e:a0:bd:ce:67:da:a8:3a:52:5f:2c:e9:8d:31:b5:59:d6:79:
         a6:56:5e:1c:6c:a0:ae:82:39:40:23:20:8c:2a:6c:79:fc:05:
         19:39:89:47:76:ed:5b:36:c6:6a:9b:73:bc:f9:8b:74:f3:30:
         52:14:b1:19:17:1a:dc:9d:ad:ad:fe:5d:be:b3:2b:68:11:87:
         a2:bb:8d:ba:bb:30:4b:45:44:9e:d5:26:9e:5d:ba:fe:91:db:
         a4:1d:fe:cf:42:cc:64:f4:3e:5b:4e:e1:28:76:d0:e8:da:3e:
         35:69:c8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:51:43 2025 by rpki-client