Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137332e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3137332e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          ksVhu/OJCk74sR9zJlIG0Fzb1RQHxWOewmS9rcloLsc=
Subject key identifier:   2F:BD:93:1A:42:A9:62:08:F6:C7:E9:C2:30:3F:FF:93:FB:60:41:5B
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       04992A879E4E0705BCD5007ECC70433CAEBD1D36
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137332e302f32342d3332203d3e203532353830.roa
Signing time:             Wed 30 Apr 2025 18:40:26 +0000
ROA not before:           Wed 30 Apr 2025 18:35:26 +0000
ROA not after:            Wed 29 Apr 2026 18:40:26 +0000
asID:                     52580
IP address blocks:        179.191.173.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 11:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:99:2a:87:9e:4e:07:05:bc:d5:00:7e:cc:70:43:3c:ae:bd:1d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr 30 18:35:26 2025 GMT
            Not After : Apr 29 18:40:26 2026 GMT
        Subject: CN=2FBD931A42A96208F6C7E9C2303FFF93FB60415B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9b:b5:c2:21:47:b7:f5:b4:78:bb:b1:d5:4c:
                    6d:8c:ee:a2:2e:f2:7b:3f:4b:99:82:0f:30:25:c9:
                    eb:00:3f:be:36:78:e8:8c:18:6e:86:a7:9c:82:79:
                    6a:95:86:ff:07:03:d6:7f:5e:b9:16:50:ed:5a:58:
                    cf:30:dc:86:49:e6:01:b8:9b:0e:09:c7:a3:e7:ee:
                    ff:f7:b1:0f:51:a3:38:6a:4f:56:ec:7f:6b:16:66:
                    e5:7e:7a:be:f2:ef:11:2f:ff:9a:5d:a6:b4:62:d7:
                    60:54:66:e4:fe:b5:a2:37:24:49:7f:55:df:55:c4:
                    2f:cb:ca:1f:82:90:9f:d9:60:d2:09:69:42:33:bb:
                    20:42:77:f4:22:7d:9e:2a:86:4a:0c:a4:26:bb:41:
                    61:31:65:a5:aa:d1:e3:4f:8d:09:4f:94:28:8a:83:
                    d1:b9:a7:2c:50:4f:fe:e3:27:96:b9:5b:3a:ea:61:
                    26:1f:9b:66:51:f5:76:6f:7b:01:39:4c:10:b4:31:
                    2f:5e:36:43:a8:93:63:7d:e9:c0:bd:49:16:b3:37:
                    ae:d0:c3:6b:7b:97:88:6b:43:8d:cc:da:73:e3:c1:
                    80:70:26:f6:ea:ab:c8:ed:b0:5c:15:d1:dc:9f:de:
                    10:03:64:e9:fc:ce:26:5c:9b:ba:fe:c7:d7:7e:c4:
                    05:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:BD:93:1A:42:A9:62:08:F6:C7:E9:C2:30:3F:FF:93:FB:60:41:5B
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137332e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:93:e8:85:c9:84:72:7d:c8:7a:31:05:5c:47:23:3f:82:b3:
         87:98:60:5f:cc:3d:22:7f:55:87:76:e5:bc:1c:b6:aa:9c:3c:
         14:a4:73:d1:60:b8:2e:d3:51:9f:77:32:3a:16:07:33:0e:58:
         0e:25:d7:87:ec:82:ef:f2:bb:30:ba:78:72:9d:4f:56:ee:90:
         12:b2:e8:fc:e9:dd:c8:cc:d0:dd:89:4a:de:85:56:4b:80:9e:
         7b:b1:26:2e:44:0b:66:12:5b:a4:63:0d:c2:72:25:0a:fc:5a:
         08:a4:37:cf:49:ff:cf:57:b0:32:46:f9:7c:10:0f:51:5d:f6:
         fc:9e:65:2f:de:47:46:fb:01:f5:22:15:b7:5e:a4:81:22:d7:
         76:91:10:fe:4b:5c:76:7f:a7:bc:01:20:d7:82:6f:be:53:df:
         35:a1:03:2a:2e:f0:cd:63:4d:04:bc:ff:64:fd:a3:5d:22:02:
         d9:28:65:18:a5:aa:c4:37:a2:82:2e:f2:8d:18:b8:25:57:fe:
         cd:f0:13:e1:7c:43:45:4b:7a:bb:49:30:05:f7:5d:9f:d5:6c:
         05:6c:c2:5a:bc:16:17:0a:05:cd:9c:3a:95:12:c0:1e:2f:6c:
         36:33:27:7a:ae:24:a7:6a:cd:b2:ce:14:67:1b:4d:88:11:9f:
         73:0a:e5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:40:48 2025 by rpki-client