Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137372e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3137372e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          useGcXFsL8ZUDe8ITCgoNOm1s/Q+oGfej8oo89j0KvU=
Subject key identifier:   80:70:CB:08:7B:E5:59:73:0B:E8:7F:48:54:A5:65:19:8B:C8:13:AF
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       7412DBF274128CB08329A349D6F8C1B0223ED1C4
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137372e302f32342d3332203d3e203532353830.roa
Signing time:             Wed 30 Apr 2025 18:40:03 +0000
ROA not before:           Wed 30 Apr 2025 18:35:03 +0000
ROA not after:            Wed 29 Apr 2026 18:40:03 +0000
asID:                     52580
IP address blocks:        179.191.177.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 06:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:12:db:f2:74:12:8c:b0:83:29:a3:49:d6:f8:c1:b0:22:3e:d1:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr 30 18:35:03 2025 GMT
            Not After : Apr 29 18:40:03 2026 GMT
        Subject: CN=8070CB087BE559730BE87F4854A565198BC813AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1d:21:16:6a:62:a3:a4:28:01:a6:28:22:3a:
                    af:93:1d:90:c6:92:7f:6d:a3:83:43:17:ca:ed:da:
                    32:d5:b0:8a:d7:11:8a:9e:e6:fa:a8:d3:5a:62:ce:
                    51:62:80:db:ec:6c:b0:5f:b1:1e:22:41:9c:9c:9f:
                    8e:20:fa:6b:74:3d:93:2d:8b:9d:bc:3d:b2:0e:6f:
                    d1:4e:4d:00:68:85:02:d4:dd:54:bc:d7:7a:1d:b5:
                    9f:dd:a4:a0:06:f5:4d:35:92:94:c8:27:ed:9d:9a:
                    f6:d3:45:68:b4:6b:d3:05:00:3e:69:30:57:bb:ef:
                    05:f5:ad:d3:a3:4c:15:fb:14:f7:dc:16:2a:f3:08:
                    95:f4:4a:f4:60:ae:1d:34:e2:ce:fa:0a:92:6c:90:
                    12:46:f1:be:cc:bf:5b:d0:bd:07:0e:91:76:0d:fc:
                    a1:e9:01:cf:b0:c7:b6:d7:da:67:a5:f0:30:45:10:
                    63:58:65:0d:ea:8a:c6:2e:83:22:42:bc:df:ab:13:
                    e9:15:26:7a:b4:9b:4d:1d:8a:82:03:9c:2a:0f:55:
                    0f:ac:5f:48:cc:d8:6b:ad:75:ed:07:86:d0:61:d1:
                    92:f6:4d:8a:91:bd:74:48:98:18:ab:ce:95:ff:f4:
                    05:99:16:2c:4f:75:df:14:c9:6d:bc:bc:aa:6c:06:
                    b9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:70:CB:08:7B:E5:59:73:0B:E8:7F:48:54:A5:65:19:8B:C8:13:AF
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137372e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:d6:a2:9c:1e:1d:7f:c2:e1:3f:ca:8c:c8:ed:bb:48:77:5c:
         59:61:20:22:49:a3:2d:f6:2f:1c:35:93:ba:52:bc:25:85:5b:
         9b:b9:5f:83:40:40:07:a5:5f:0d:01:33:93:da:69:bf:ea:3a:
         73:e3:cc:90:17:cb:4f:89:5e:de:9f:0e:83:24:01:29:72:46:
         55:b7:4b:a3:71:1b:89:ef:49:9d:2c:6e:49:e9:7f:21:dd:e1:
         c1:e0:72:a4:01:0b:c6:af:1e:37:29:c1:c6:c9:74:f7:10:15:
         99:6b:a7:7e:bc:35:d5:35:68:e9:25:b6:04:c2:c3:9a:64:a2:
         33:0d:05:40:a7:ce:a6:ff:16:d8:22:b2:a0:f9:e0:bf:a6:0f:
         6f:89:53:6b:c1:b2:e5:90:21:be:c0:ff:e7:63:a6:da:4e:19:
         1b:5b:bb:6f:b6:37:5d:df:48:7b:f3:01:ee:0c:5a:ef:01:f3:
         7b:7d:4b:50:53:75:fc:02:49:d4:15:ea:08:9c:1c:6d:3e:7f:
         d1:42:46:ad:30:1e:ef:ea:52:db:cd:f3:4d:b6:65:01:d0:b8:
         0c:1f:ca:3f:9d:e7:c0:e2:2a:01:fc:f1:fd:9f:0a:d1:6b:34:
         27:af:6a:32:c2:af:ff:11:c8:20:2b:4a:a4:b7:45:a7:ea:dc:
         e7:98:04:5b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdBLb8nQSjLCDKaNJ1vjBsCI+0cQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzEzMTM2QURFRUJCNTQxMTFFMkMwOUYyQzdERkJCMzk1
MUVCQ0ZEMDAeFw0yNTA0MzAxODM1MDNaFw0yNjA0MjkxODQwMDNaMDMxMTAvBgNV
BAMTKDgwNzBDQjA4N0JFNTU5NzMwQkU4N0Y0ODU0QTU2NTE5OEJDODEzQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIHSEWamKjpCgBpigiOq+THZDG
kn9to4NDF8rt2jLVsIrXEYqe5vqo01pizlFigNvsbLBfsR4iQZycn44g+mt0PZMt
i528PbIOb9FOTQBohQLU3VS813odtZ/dpKAG9U01kpTIJ+2dmvbTRWi0a9MFAD5p
MFe77wX1rdOjTBX7FPfcFirzCJX0SvRgrh004s76CpJskBJG8b7Mv1vQvQcOkXYN
/KHpAc+wx7bX2mel8DBFEGNYZQ3qisYugyJCvN+rE+kVJnq0m00dioIDnCoPVQ+s
X0jM2Gutde0HhtBh0ZL2TYqRvXRImBirzpX/9AWZFixPdd8UyW28vKpsBrlLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUgHDLCHvlWXML6H9IVKVlGYvIE68wHwYDVR0j
BBgwFoAUwTE2re67VBEeLAnyx9+7OVHrz9AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHBUOGppQldteU4zUnhuakdvUGNZR3BWUnd1VkYzZE1Wd1JldjNGTnp0
aTEvMC9DMTMxMzZBREVFQkI1NDExMUUyQzA5RjJDN0RGQkIzOTUxRUJDRkQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxMzEzNkFERUVCQjU0MTEx
RTJDMDlGMkM3REZCQjM5NTFFQkNGRDAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hwVDhqaUJXbXlOM1J4bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAv
MzEzNzM5MmUzMTM5MzEyZTMxMzczNzJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1
MzIzNTM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzv7EwDQYJKoZIhvcNAQELBQADggEBAArWopwe
HX/C4T/KjMjtu0h3XFlhICJJoy32Lxw1k7pSvCWFW5u5X4NAQAelXw0BM5Paab/q
OnPjzJAXy0+JXt6fDoMkASlyRlW3S6NxG4nvSZ0sbknpfyHd4cHgcqQBC8avHjcp
wcbJdPcQFZlrp368NdU1aOkltgTCw5pkojMNBUCnzqb/FtgisqD54L+mD2+JU2vB
suWQIb7A/+djptpOGRtbu2+2N13fSHvzAe4MWu8B83t9S1BTdfwCSdQV6gicHG0+
f9FCRq0wHu/qUtvN8022ZQHQuAwfyj+d58DiKgH88f2fCtFrNCevajLCr/8RyCAr
SqS3Rafq3OeYBFs=
-----END CERTIFICATE-----
Generated at Fri May 2 21:09:22 2025 by rpki-client