Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138392e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3138392e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          2ePmDFZaGfhIWL91Tpoeot5rMONfUjweKjx2XT/AYZY=
Subject key identifier:   D5:01:8B:98:DD:35:91:D9:68:63:61:E0:55:3B:F6:87:F9:FA:43:AE
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       1E7374D12B84D723DE4D5B9A0F4302705301372D
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138392e302f32342d3332203d3e203532353830.roa
Signing time:             Wed 30 Apr 2025 18:38:48 +0000
ROA not before:           Wed 30 Apr 2025 18:33:48 +0000
ROA not after:            Wed 29 Apr 2026 18:38:48 +0000
asID:                     52580
IP address blocks:        179.191.189.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 06:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:73:74:d1:2b:84:d7:23:de:4d:5b:9a:0f:43:02:70:53:01:37:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr 30 18:33:48 2025 GMT
            Not After : Apr 29 18:38:48 2026 GMT
        Subject: CN=D5018B98DD3591D9686361E0553BF687F9FA43AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:96:d2:66:08:c4:b2:c9:33:f4:f1:32:08:2e:
                    17:0f:c9:75:80:04:b3:f9:b8:b7:de:bd:8d:62:8c:
                    b8:8c:3f:88:a4:f7:2b:8a:40:65:8e:ff:ab:87:c5:
                    8f:30:85:79:6e:b2:fe:20:8d:a3:c2:57:12:41:3f:
                    76:91:d6:56:67:cb:36:4c:57:f5:be:e0:16:1f:f8:
                    e8:96:da:20:41:e3:c0:71:41:e2:42:52:3b:cb:8e:
                    ac:76:50:57:c3:57:ba:d3:e2:b1:5e:97:da:71:da:
                    fd:c2:72:44:ae:da:20:a6:84:5d:bb:05:72:d1:2d:
                    2f:8f:f4:b8:ee:cd:92:b7:78:c4:0a:05:a3:9a:b9:
                    fa:9f:a1:66:81:10:e9:85:77:ec:c9:a3:e2:f7:a0:
                    a4:a9:38:ce:fa:38:28:85:de:57:34:9b:ea:32:a8:
                    5e:31:91:bd:81:42:c5:96:30:ee:ab:c6:cb:3d:af:
                    de:ea:92:8c:7f:e4:5e:61:f6:a5:04:89:65:f4:77:
                    b4:11:2a:58:20:22:a8:ef:83:4c:63:00:67:aa:e0:
                    c1:94:08:fa:43:25:00:60:be:c2:18:ae:e9:36:f0:
                    db:68:60:95:94:84:02:34:a8:ee:82:91:9f:db:ad:
                    b6:b5:88:08:60:3c:a0:b4:de:96:f9:14:cc:b7:27:
                    dd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:01:8B:98:DD:35:91:D9:68:63:61:E0:55:3B:F6:87:F9:FA:43:AE
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138392e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:92:1e:4f:a9:a0:42:69:c3:07:15:33:74:cb:2f:2e:f5:01:
         4b:5a:75:e2:08:6f:36:64:6c:58:98:58:7e:80:e7:12:58:71:
         9f:a3:30:32:d8:ae:80:cc:a7:23:c7:9a:60:e5:0e:97:0b:bd:
         d5:a6:bb:f1:8c:88:44:0a:2d:11:36:4a:32:28:58:26:0f:07:
         23:ee:8f:5c:be:5b:81:92:15:86:e9:1b:2d:ed:b6:7c:bb:9b:
         d0:b1:48:17:f3:26:d9:e1:84:b2:14:43:f3:f2:2e:bd:b6:28:
         28:67:a5:2c:4e:ff:a2:9c:ee:82:dd:cb:ae:ed:9d:a5:57:5b:
         53:5a:12:e4:b3:2d:e1:7d:63:36:03:5c:df:ea:72:ed:fc:0a:
         c2:8b:36:0f:8f:45:b6:1f:8a:47:26:cb:50:99:68:8e:05:b3:
         41:83:3c:50:5c:63:cf:5c:6c:ef:9c:dc:b5:42:71:73:cc:9c:
         c1:f1:70:36:c1:03:6f:44:4f:dd:98:c5:36:0b:31:ac:19:d5:
         ef:6f:3c:12:46:42:ce:ed:80:05:35:2b:2e:14:e3:c2:45:5e:
         65:e6:a3:fb:bd:3f:35:2f:5a:c5:4a:af:75:be:e6:4b:99:d4:
         14:5b:8a:9b:9e:ff:d8:43:0f:04:a8:7e:76:88:9f:c2:d3:7d:
         c1:93:03:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:36:06 2025 by rpki-client