Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132342e302f32322d3232203d3e203631353733.roa
File:                     3137392e3138392e3132342e302f32322d3232203d3e203631353733.roa (raw, json)
Hash identifier:          MzTBQ4/p7kO4mpIoWJvBes0oAfIjFBT3utRmVvqk3hw=
Subject key identifier:   F4:51:5C:D3:06:D7:7E:4F:D2:F3:E6:F1:68:95:A2:4C:8A:6B:94:16
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       0A3571F068B2670BA015F4015FF40D3D2DCB0539
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132342e302f32322d3232203d3e203631353733.roa
Signing time:             Sat 09 Aug 2025 07:49:18 +0000
ROA not before:           Sat 09 Aug 2025 07:44:18 +0000
ROA not after:            Sat 08 Aug 2026 07:49:18 +0000
asID:                     61573
IP address blocks:        179.189.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 00:42:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:35:71:f0:68:b2:67:0b:a0:15:f4:01:5f:f4:0d:3d:2d:cb:05:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: Aug  9 07:44:18 2025 GMT
            Not After : Aug  8 07:49:18 2026 GMT
        Subject: CN=F4515CD306D77E4FD2F3E6F16895A24C8A6B9416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6a:03:aa:70:93:1f:f1:a2:4c:07:a4:bb:4a:
                    ee:80:f6:3d:d8:74:49:7e:8b:f2:14:32:9e:98:49:
                    66:26:31:b9:ea:a3:ef:02:e9:87:44:e1:9f:8c:23:
                    63:f8:e8:05:b6:3e:d1:d2:c6:c4:8c:70:83:16:0e:
                    82:42:4f:3f:8f:b3:ef:5c:e0:27:ce:39:e2:85:e9:
                    82:35:64:74:31:10:86:92:11:c0:19:8c:39:42:c7:
                    63:c2:2a:ab:37:e2:d1:f2:17:6d:71:ef:2b:26:16:
                    3a:c4:4f:04:c3:91:f1:2c:4c:cf:be:32:10:8c:b7:
                    ad:5e:96:96:1c:1b:9c:3b:b9:83:29:9b:f7:e2:62:
                    cf:bf:bf:64:96:84:a0:0d:24:f5:d4:77:f5:a4:5b:
                    d8:80:30:fa:be:8d:61:88:89:73:5d:7f:52:e7:30:
                    4f:d0:80:37:17:ff:75:c5:9a:e0:f6:5a:8f:79:a7:
                    93:e0:74:9f:8a:32:69:64:e9:67:d4:af:2a:c7:83:
                    4d:b8:ea:00:c4:a3:cc:2d:40:af:3e:85:63:3c:16:
                    e9:03:17:d7:b2:66:2f:6b:c4:78:9f:96:f2:b4:27:
                    3e:86:af:4e:67:8e:71:61:07:67:f0:70:3e:7a:a9:
                    bc:38:48:53:49:4a:ed:94:44:c3:a1:df:72:76:83:
                    c5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:51:5C:D3:06:D7:7E:4F:D2:F3:E6:F1:68:95:A2:4C:8A:6B:94:16
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132342e302f32322d3232203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:e7:6d:9d:ae:c5:2a:d9:a9:b9:35:da:71:04:cd:b2:57:c2:
         98:03:1a:27:f4:f4:43:c8:ca:19:b1:4d:39:80:f9:a3:2f:83:
         11:55:10:ed:6a:51:19:e7:a9:26:a5:78:30:34:35:7e:22:d9:
         b6:bb:f8:b5:8a:36:20:ae:ba:d7:74:cf:19:64:51:19:89:87:
         d7:7e:7e:5c:72:c7:bd:56:a0:55:c4:d0:1c:69:f1:ad:95:3d:
         e9:07:c3:da:c2:bd:ff:fe:00:05:be:41:4a:46:19:ef:2a:6b:
         89:79:70:d0:59:be:2e:b3:a4:12:cc:40:61:d8:dc:a8:f8:81:
         ff:22:03:1e:bf:92:c1:5f:9f:d8:1b:09:23:ff:3b:af:4d:5c:
         16:c6:a9:1f:d8:62:c0:5a:a9:b4:d2:37:95:b6:55:8e:8f:1a:
         04:9f:21:1f:71:24:4d:70:10:92:00:ca:42:d5:e3:58:67:78:
         a4:27:19:81:17:03:4f:09:e9:f8:57:8b:9a:50:a3:78:62:32:
         d4:da:ad:8a:d0:e2:07:7a:3c:60:df:f9:ce:21:18:39:a0:46:
         81:24:d9:76:c2:b8:cb:ed:f2:40:e9:c6:0f:a7:a2:f7:26:ad:
         35:a9:95:c7:73:a7:a6:05:8d:e8:f9:55:2c:cb:49:c5:56:a5:
         55:6c:7d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:28:18 2025 by rpki-client