Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137382e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3137382e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          re5wuz52H/5pwb/kjLVuG0IH13StOVywC/nwIklaZbM=
Subject key identifier:   A8:FA:96:7E:35:08:1E:C9:8E:C0:CA:1D:9A:A0:0E:19:77:71:EF:E3
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       32F9C7732E7D72588AAEFC3C4A8993665EC76215
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137382e302f32342d3332203d3e203532353830.roa
Signing time:             Wed 30 Apr 2025 18:39:57 +0000
ROA not before:           Wed 30 Apr 2025 18:34:57 +0000
ROA not after:            Wed 29 Apr 2026 18:39:57 +0000
asID:                     52580
IP address blocks:        179.191.178.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 08:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:f9:c7:73:2e:7d:72:58:8a:ae:fc:3c:4a:89:93:66:5e:c7:62:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr 30 18:34:57 2025 GMT
            Not After : Apr 29 18:39:57 2026 GMT
        Subject: CN=A8FA967E35081EC98EC0CA1D9AA00E197771EFE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b2:47:0d:3a:a3:59:d3:0f:1f:5d:44:99:ce:
                    64:26:46:f6:b8:66:13:54:7c:d3:92:39:ca:a8:b3:
                    c2:4a:cd:52:9e:9a:9e:0c:46:4d:0b:53:78:8e:c6:
                    3f:e6:cb:5e:87:a8:22:9b:d4:c4:0b:6d:71:10:50:
                    39:1c:e9:78:9b:05:18:dd:b0:b7:64:c6:de:a7:4b:
                    e2:10:41:90:ef:d0:b7:c3:ca:25:95:da:3b:f3:cb:
                    7c:43:9b:45:47:26:3c:7f:c1:90:d0:63:c9:c1:20:
                    7d:e9:bf:da:da:aa:8e:b6:e6:4d:76:ab:75:ee:f5:
                    0b:35:d0:3f:7e:8f:f9:c5:7b:dc:37:87:a2:4d:27:
                    86:0b:3b:bb:5a:ad:0d:fb:f1:fc:63:7c:5f:3c:b1:
                    ed:68:1d:4b:aa:3b:28:44:72:93:15:8a:f9:03:6a:
                    f1:1c:51:d8:bc:f1:23:67:db:1f:0d:d2:9b:1b:74:
                    27:f6:c8:d1:f7:be:8f:a6:65:ba:67:68:cd:9f:f4:
                    9b:b8:9b:16:21:87:ed:d4:2a:ca:1b:32:7a:1c:45:
                    0f:3f:35:88:d9:ba:12:52:62:c0:e3:8b:72:20:58:
                    9c:ee:d6:bc:d3:f5:4a:e8:cc:f3:94:d1:8c:c6:03:
                    40:7a:d3:c5:3c:dc:58:9d:af:ce:7f:46:43:ef:d4:
                    4b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FA:96:7E:35:08:1E:C9:8E:C0:CA:1D:9A:A0:0E:19:77:71:EF:E3
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137382e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:b8:7f:7d:53:56:63:ac:6c:26:3d:b0:19:2d:0a:cb:14:3d:
         34:5f:8f:4b:8e:df:a9:a3:c7:15:4a:db:2b:79:51:7e:12:da:
         39:e7:67:63:2e:3f:56:df:e6:10:36:77:40:c7:3f:66:1c:47:
         4d:fd:83:57:9f:17:80:3e:97:b3:74:cb:36:52:58:03:19:8f:
         d0:18:1c:1f:f7:79:c5:94:73:35:41:aa:d6:03:87:b5:5d:bc:
         42:5b:5f:52:e6:cc:2f:58:31:22:a3:8e:63:a1:fb:88:b9:56:
         aa:d0:a7:b0:72:41:16:99:a9:71:4e:26:24:52:d9:cc:d8:08:
         bf:95:c1:33:74:0b:e8:d8:21:a0:d7:da:1a:a5:71:80:6f:52:
         e7:e1:1d:09:a9:78:5f:4b:a4:b2:f5:d7:95:cb:7e:90:17:64:
         2d:b7:b7:2a:ec:e1:89:22:28:35:be:44:85:60:c4:4a:47:fc:
         96:b0:9a:39:80:b0:58:80:de:e0:fb:a7:69:33:a4:76:fc:5e:
         04:84:dc:1e:af:23:02:37:55:24:54:66:13:2e:5e:b1:d1:4b:
         35:6e:a8:09:9f:98:4c:3f:cf:32:8b:2f:f3:e6:73:fe:c6:33:
         79:f6:31:d6:34:d5:91:ea:91:10:fd:f4:b6:e9:e6:f0:1b:6a:
         19:17:10:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:13:00 2025 by rpki-client