Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138332e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3138332e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          OtvYqp0m8CtBe7Nwm6PmvJZxMd62bjvpMx2KCg4oJBo=
Subject key identifier:   B2:5B:31:76:EA:28:71:61:3C:4D:B1:7D:8F:76:B6:51:99:C8:DB:E9
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       2412B3D0084B5AAC5A3B74BBD90A717CA21075B6
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138332e302f32342d3332203d3e203532353830.roa
Signing time:             Wed 30 Apr 2025 18:39:21 +0000
ROA not before:           Wed 30 Apr 2025 18:34:21 +0000
ROA not after:            Wed 29 Apr 2026 18:39:21 +0000
asID:                     52580
IP address blocks:        179.191.183.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 11:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:12:b3:d0:08:4b:5a:ac:5a:3b:74:bb:d9:0a:71:7c:a2:10:75:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr 30 18:34:21 2025 GMT
            Not After : Apr 29 18:39:21 2026 GMT
        Subject: CN=B25B3176EA2871613C4DB17D8F76B65199C8DBE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c6:f4:10:d1:4c:f1:2a:55:2b:03:56:13:49:
                    aa:af:35:70:21:a5:5d:a3:97:1b:ad:8f:86:9b:0b:
                    01:f2:6c:bc:7f:8a:ab:e1:96:c8:81:ef:29:1e:b7:
                    e0:e7:bb:03:8c:47:29:3c:78:4b:73:4d:92:27:f5:
                    1a:1e:23:2e:53:22:0d:1c:ad:bc:e1:90:0f:25:77:
                    fe:bb:57:f5:10:83:93:5d:eb:4b:f7:6b:7d:a7:e9:
                    08:63:7e:e0:9f:98:f7:01:59:15:7c:fe:44:95:58:
                    2b:a1:90:f4:70:42:63:44:1b:42:64:6c:d7:ce:22:
                    c6:69:34:a4:d8:4f:f5:c9:65:81:34:99:dd:2f:a1:
                    15:83:f8:c9:f0:e5:dd:a3:b8:ac:3d:c1:83:fc:e8:
                    2b:26:ca:70:39:50:30:1c:2c:f4:34:de:92:7d:3c:
                    77:ca:5e:45:0d:62:ba:98:9e:f3:d8:12:9d:11:c2:
                    fd:ff:45:7f:af:55:53:cc:39:28:c3:68:06:d2:63:
                    23:57:08:a5:10:db:84:fa:56:8d:31:27:d0:a6:dc:
                    35:17:fd:11:0c:e0:f4:29:f6:b9:b5:03:47:17:dc:
                    f6:40:54:a3:f2:19:e6:6f:72:ba:02:13:ff:48:f5:
                    47:70:c1:3b:22:22:6d:1e:3d:f0:30:45:0e:57:79:
                    ac:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5B:31:76:EA:28:71:61:3C:4D:B1:7D:8F:76:B6:51:99:C8:DB:E9
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138332e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:b9:04:29:d1:95:d4:ee:43:08:78:1d:02:2b:5b:33:a3:8c:
         d2:8c:ed:03:dc:7f:4f:1f:44:f0:f2:2c:8a:24:b2:c1:4c:34:
         a4:8a:e9:28:91:63:31:f0:7f:bb:a0:90:c3:65:85:cf:8b:51:
         64:01:c6:64:6a:f3:0a:07:15:7b:dc:92:a5:19:29:fa:33:45:
         f9:01:cb:61:6c:4b:cf:1c:1f:6c:2f:44:e6:a2:28:69:6c:fe:
         2f:34:24:b1:62:3f:e1:69:e6:87:a3:05:ea:63:4c:7a:a9:c7:
         84:e1:f4:88:b3:56:22:e6:e0:bb:87:ff:ff:8d:f6:08:cb:d3:
         bd:b5:ae:05:cb:33:ca:14:c3:27:e1:9d:16:97:8f:1e:0e:8f:
         49:d0:22:ae:95:84:68:e3:91:2c:a0:11:64:5d:8c:47:ba:9e:
         c2:23:ab:b2:23:0a:73:cc:22:9c:b8:47:f9:fe:04:66:f8:f1:
         be:ad:d1:29:8f:4d:5c:4a:39:3b:9c:02:e5:4b:80:02:b8:53:
         88:38:00:b0:ad:f9:9c:e0:04:99:9b:8e:7e:ec:ab:13:1a:61:
         89:bc:33:d4:a0:48:d6:1e:e7:d4:d9:f7:9c:b7:d5:1e:e4:a5:
         7a:3a:da:23:76:90:2a:54:e7:b0:56:b4:dc:88:5b:7d:86:5e:
         3f:d0:6a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 02:52:15 2025 by rpki-client