Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138352e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3138352e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          UK4ONrnwG49ri9G4fwmsjDcWanl7IkLUE5ieAbgn2VQ=
Subject key identifier:   2C:D9:7E:71:9B:D6:09:18:F9:95:04:74:35:10:97:A3:33:90:6A:26
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       283E41A9EB25D81C92447FF7324D7844BF03245E
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138352e302f32342d3332203d3e203532353830.roa
Signing time:             Wed 30 Apr 2025 18:39:14 +0000
ROA not before:           Wed 30 Apr 2025 18:34:14 +0000
ROA not after:            Wed 29 Apr 2026 18:39:14 +0000
asID:                     52580
IP address blocks:        179.191.185.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 06:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:3e:41:a9:eb:25:d8:1c:92:44:7f:f7:32:4d:78:44:bf:03:24:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr 30 18:34:14 2025 GMT
            Not After : Apr 29 18:39:14 2026 GMT
        Subject: CN=2CD97E719BD60918F9950474351097A333906A26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e5:f9:49:02:3c:99:e0:3d:90:01:bf:a8:97:
                    f8:14:39:c0:4f:e6:06:75:45:d9:1e:8a:c1:20:b2:
                    84:79:00:a5:13:94:d9:82:ad:14:10:d6:5f:53:64:
                    1a:15:bf:59:82:83:94:b7:68:8b:dc:5e:a8:48:2c:
                    c7:e8:87:b5:61:c4:2e:32:45:30:be:4f:c2:c1:20:
                    19:d2:67:76:0f:ee:bd:24:fc:20:8e:2c:36:19:04:
                    c2:b5:d1:29:76:30:19:c8:6b:08:5e:b6:20:99:19:
                    bb:25:2e:86:54:59:03:9e:fc:4d:56:b2:0e:6f:d9:
                    3f:88:44:57:8d:73:e2:37:1e:70:d4:0d:90:f5:e3:
                    8b:b9:b3:39:d9:d2:ef:b6:85:a7:13:8a:b3:c8:72:
                    a9:d3:f5:e8:a1:33:cc:f1:59:76:b8:7c:a7:53:14:
                    c3:d5:e9:cd:c8:b8:e5:b3:87:13:bc:71:d6:35:26:
                    3f:e9:14:0b:a3:f8:23:76:80:2a:46:5b:48:ba:01:
                    39:78:f7:72:8b:09:65:bc:c3:5d:76:a7:20:31:42:
                    bc:e4:d9:a2:16:b8:db:74:b7:08:5c:e4:47:d3:99:
                    1a:13:98:25:32:13:4e:01:f0:8f:e0:7f:f8:3d:4c:
                    2a:19:2b:17:b9:d8:c9:1d:07:99:66:6e:4b:e8:ac:
                    c9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D9:7E:71:9B:D6:09:18:F9:95:04:74:35:10:97:A3:33:90:6A:26
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138352e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:51:93:aa:31:d0:e7:07:bb:4b:54:82:b3:86:fa:8e:90:cb:
         95:c0:b9:83:78:00:eb:c3:fa:c4:73:14:5d:d6:3f:58:1c:aa:
         5c:a3:23:56:d0:88:0d:db:06:49:79:cd:6f:92:89:f8:83:69:
         ce:d8:a6:ef:25:f3:d7:97:9c:5e:ad:6f:83:c6:ce:11:9a:38:
         7a:6d:8f:06:7c:f3:0d:3e:f9:99:77:ea:6a:09:04:03:56:e6:
         26:03:99:6a:2d:27:e4:26:60:a9:3f:1b:80:88:ff:58:eb:d3:
         1a:7f:79:4c:56:b6:a7:d3:25:e0:1e:ce:da:7c:f4:f4:8b:c9:
         1f:bd:99:21:48:cd:25:c0:cb:71:b7:75:3d:6b:a9:6d:94:a5:
         7a:0d:a0:2d:4c:fc:94:b4:91:53:6e:b5:81:7a:09:70:b3:f0:
         37:02:3e:de:76:1e:d6:0e:00:3f:13:3b:08:a2:22:fc:db:fb:
         b4:9e:82:6a:a3:25:f6:dd:da:1c:7a:af:1c:0a:e7:1e:61:79:
         66:25:77:99:9e:f5:94:5e:3c:81:1c:43:79:c7:e5:7e:9d:15:
         e0:5a:a9:6d:c6:19:9c:b7:cb:30:79:f5:a3:a7:9c:f7:45:78:
         8d:a2:6a:c2:b6:52:b3:e8:02:ab:64:4d:51:28:cd:c0:99:00:
         8b:c4:22:54
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKD5Bqesl2BySRH/3Mk14RL8DJF4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzEzMTM2QURFRUJCNTQxMTFFMkMwOUYyQzdERkJCMzk1
MUVCQ0ZEMDAeFw0yNTA0MzAxODM0MTRaFw0yNjA0MjkxODM5MTRaMDMxMTAvBgNV
BAMTKDJDRDk3RTcxOUJENjA5MThGOTk1MDQ3NDM1MTA5N0EzMzM5MDZBMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC55flJAjyZ4D2QAb+ol/gUOcBP
5gZ1RdkeisEgsoR5AKUTlNmCrRQQ1l9TZBoVv1mCg5S3aIvcXqhILMfoh7VhxC4y
RTC+T8LBIBnSZ3YP7r0k/CCOLDYZBMK10Sl2MBnIawhetiCZGbslLoZUWQOe/E1W
sg5v2T+IRFeNc+I3HnDUDZD144u5sznZ0u+2hacTirPIcqnT9eihM8zxWXa4fKdT
FMPV6c3IuOWzhxO8cdY1Jj/pFAuj+CN2gCpGW0i6ATl493KLCWW8w112pyAxQrzk
2aIWuNt0twhc5EfTmRoTmCUyE04B8I/gf/g9TCoZKxe52MkdB5lmbkvorMndAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULNl+cZvWCRj5lQR0NRCXozOQaiYwHwYDVR0j
BBgwFoAUwTE2re67VBEeLAnyx9+7OVHrz9AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHBUOGppQldteU4zUnhuakdvUGNZR3BWUnd1VkYzZE1Wd1JldjNGTnp0
aTEvMC9DMTMxMzZBREVFQkI1NDExMUUyQzA5RjJDN0RGQkIzOTUxRUJDRkQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxMzEzNkFERUVCQjU0MTEx
RTJDMDlGMkM3REZCQjM5NTFFQkNGRDAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hwVDhqaUJXbXlOM1J4bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAv
MzEzNzM5MmUzMTM5MzEyZTMxMzgzNTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1
MzIzNTM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzv7kwDQYJKoZIhvcNAQELBQADggEBAEhRk6ox
0OcHu0tUgrOG+o6Qy5XAuYN4AOvD+sRzFF3WP1gcqlyjI1bQiA3bBkl5zW+SifiD
ac7Ypu8l89eXnF6tb4PGzhGaOHptjwZ88w0++Zl36moJBANW5iYDmWotJ+QmYKk/
G4CI/1jr0xp/eUxWtqfTJeAeztp89PSLyR+9mSFIzSXAy3G3dT1rqW2UpXoNoC1M
/JS0kVNutYF6CXCz8DcCPt52HtYOAD8TOwiiIvzb+7SegmqjJfbd2hx6rxwK5x5h
eWYld5me9ZRePIEcQ3nH5X6dFeBaqW3GGZy3yzB59aOnnPdFeI2iasK2UrPoAqtk
TVEozcCZAIvEIlQ=
-----END CERTIFICATE-----
Generated at Fri May 2 15:42:28 2025 by rpki-client