Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/1/3137392e3130392e39362e302f32322d3234203d3e20323730373533.roa
File:                     3137392e3130392e39362e302f32322d3234203d3e20323730373533.roa (raw, json)
Hash identifier:          sC2zzSQ29PvPQAz0Q1ljVoCrwtpr43NANqdCJfjtQcc=
Subject key identifier:   1F:C9:9B:8B:69:EB:19:42:0E:EA:5A:C7:28:B6:F2:49:81:EF:29:9E
Certificate issuer:       /CN=144D8BA24CABA5C71D99AA708E69E7D4F9612435
Certificate serial:       624DCF39F742C2953C3437AFD1DF546962E03301
Authority key identifier: 14:4D:8B:A2:4C:AB:A5:C7:1D:99:AA:70:8E:69:E7:D4:F9:61:24:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/1/3137392e3130392e39362e302f32322d3234203d3e20323730373533.roa
Signing time:             Wed 05 Mar 2025 19:00:11 +0000
ROA not before:           Wed 05 Mar 2025 18:55:11 +0000
ROA not after:            Wed 04 Mar 2026 19:00:11 +0000
asID:                     270753
IP address blocks:        179.109.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.crl
                          rsync://rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 03:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:4d:cf:39:f7:42:c2:95:3c:34:37:af:d1:df:54:69:62:e0:33:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=144D8BA24CABA5C71D99AA708E69E7D4F9612435
        Validity
            Not Before: Mar  5 18:55:11 2025 GMT
            Not After : Mar  4 19:00:11 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:be:6e:7c:b3:48:f2:41:ca:57:36:ef:0b:02:
                    7a:4d:bb:c1:f0:00:82:aa:9d:0e:3c:98:b1:cd:da:
                    d9:63:7c:98:09:d0:bf:c3:94:bb:79:68:3d:da:82:
                    99:8b:a3:8a:d5:72:e7:08:41:01:20:e9:08:e6:22:
                    0d:08:44:93:61:93:10:96:e5:a0:c8:c3:6f:84:82:
                    a1:10:eb:f5:ff:96:3e:88:0a:10:a6:96:4d:8e:90:
                    a9:d5:ca:b4:d5:ec:fc:45:f6:c8:fc:f2:f6:c4:3b:
                    7d:53:89:a1:eb:45:0d:2f:e4:85:98:92:be:79:28:
                    8d:46:0e:fc:6d:33:f3:4e:06:ed:43:4f:23:8e:60:
                    58:f5:58:51:02:ef:1d:89:d1:8e:a8:2e:84:fe:5e:
                    d4:6b:f3:2c:05:04:7f:02:84:12:cb:87:fe:e0:b7:
                    1c:00:64:1b:0b:5c:e0:f8:00:2d:14:b3:78:cf:22:
                    35:55:04:de:d5:63:3d:8e:3e:f8:e8:4e:5c:ad:f9:
                    76:54:64:4c:8d:3f:b1:a9:30:ba:34:9a:7b:60:10:
                    20:1b:a4:7f:ea:14:02:2b:fd:23:58:84:10:f0:4f:
                    de:f1:22:e9:d3:a8:eb:da:55:5d:b1:d9:c1:da:99:
                    3e:a5:c0:67:7c:86:15:6e:3a:ad:b8:50:85:a5:22:
                    a1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C9:9B:8B:69:EB:19:42:0E:EA:5A:C7:28:B6:F2:49:81:EF:29:9E
            X509v3 Authority Key Identifier:
                keyid:14:4D:8B:A2:4C:AB:A5:C7:1D:99:AA:70:8E:69:E7:D4:F9:61:24:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/1/3137392e3130392e39362e302f32322d3234203d3e20323730373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:fb:b9:97:21:d9:68:40:a5:d6:0a:e8:4f:53:95:1d:44:54:
         63:f1:8c:2e:05:9c:ea:2b:31:85:fe:11:1a:ec:70:e4:33:80:
         b2:8b:8e:72:34:9f:85:29:4b:49:d2:f1:0a:0c:f9:77:c4:a1:
         5a:89:71:a0:c6:a0:80:1a:62:19:40:56:94:14:d2:26:b2:41:
         7c:33:0b:05:b6:af:d6:22:62:64:42:3f:5c:30:5a:c5:73:d7:
         f2:8f:22:4d:fa:20:a9:b0:e8:40:98:33:11:a3:26:ca:32:a5:
         74:19:bb:27:0b:27:61:7f:ef:fe:44:b4:f0:8a:e6:0b:38:52:
         e4:8e:3f:99:c2:2f:fa:42:ba:25:58:1f:99:88:0f:c7:28:98:
         0d:ee:19:5b:cb:0c:ff:ef:87:00:56:67:1a:89:72:e3:cc:40:
         ef:93:fb:56:62:1d:27:31:05:0f:85:91:1c:d6:a2:cf:af:c2:
         7c:d4:7b:81:70:f2:2d:91:57:bf:0e:e1:01:5e:68:9c:c2:ee:
         ed:9a:cc:b3:72:60:1a:a8:f2:9d:d7:c8:cf:7a:bb:91:3d:73:
         e6:0d:4a:ab:2a:fa:e7:a8:4c:54:53:68:f4:40:c4:4f:2e:d5:
         8f:47:66:fb:b2:77:fe:f3:33:2b:42:f1:09:0d:c5:e4:df:eb:
         45:31:35:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:49:46 2025 by rpki-client