Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/1/3137392e34382e37332e302f32342d3234203d3e20323731303638.roa
File:                     3137392e34382e37332e302f32342d3234203d3e20323731303638.roa (raw, json)
Hash identifier:          gaoG6u11kPw09dWpDPMtKnKe5B2POI3dnVYkWxK1u9Q=
Subject key identifier:   C1:FB:AF:4D:E3:FA:08:59:C6:F6:04:08:05:2B:63:E0:DC:7D:F9:8A
Certificate issuer:       /CN=3297FC6045B32620F4B7F6A0AABC041F270B248B
Certificate serial:       03FADCC8BC327CE97A51DFAF2017125B2FD9B225
Authority key identifier: 32:97:FC:60:45:B3:26:20:F4:B7:F6:A0:AA:BC:04:1F:27:0B:24:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3297FC6045B32620F4B7F6A0AABC041F270B248B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/1/3137392e34382e37332e302f32342d3234203d3e20323731303638.roa
Signing time:             Thu 06 Mar 2025 07:10:44 +0000
ROA not before:           Thu 06 Mar 2025 07:05:44 +0000
ROA not after:            Thu 05 Mar 2026 07:10:44 +0000
asID:                     271068
IP address blocks:        179.48.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/1/3297FC6045B32620F4B7F6A0AABC041F270B248B.crl
                          rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/1/3297FC6045B32620F4B7F6A0AABC041F270B248B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3297FC6045B32620F4B7F6A0AABC041F270B248B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 21:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:fa:dc:c8:bc:32:7c:e9:7a:51:df:af:20:17:12:5b:2f:d9:b2:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3297FC6045B32620F4B7F6A0AABC041F270B248B
        Validity
            Not Before: Mar  6 07:05:44 2025 GMT
            Not After : Mar  5 07:10:44 2026 GMT
        Subject: CN=C1FBAF4DE3FA0859C6F60408052B63E0DC7DF98A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:40:5b:26:55:df:41:92:1d:96:8c:6a:25:3c:
                    c0:aa:9f:ce:2d:92:14:01:5d:ad:c5:6a:ad:73:40:
                    95:6d:2f:03:76:5c:59:ef:da:40:8e:da:9e:09:d1:
                    b7:ed:29:79:79:2c:74:37:2f:39:f9:7e:ba:f6:dc:
                    71:28:77:9d:ef:ac:46:7f:26:24:7b:2c:85:4c:89:
                    c3:9b:98:73:c7:e9:d3:ba:ca:00:39:2e:d5:79:88:
                    67:a6:97:67:8a:75:b3:07:6b:33:20:33:b5:77:22:
                    be:9a:bc:4e:ad:12:02:76:63:0f:0c:df:b4:46:68:
                    c1:fd:74:c4:42:8d:ec:08:d7:0d:90:b8:d5:61:d7:
                    52:52:c7:3b:75:96:9e:73:f1:a2:e0:38:32:ad:ea:
                    4d:69:1b:48:85:9b:c7:1c:2f:e7:ad:0a:cf:ce:17:
                    d7:50:b4:de:c2:98:1c:b0:d6:66:bb:35:ec:57:66:
                    25:7c:33:99:53:55:57:01:15:f3:ee:89:33:cb:df:
                    67:bb:31:54:c0:27:74:29:cf:1b:0a:43:0f:6a:d8:
                    3a:73:6f:f5:05:4d:2a:17:66:b2:1a:f5:61:6d:54:
                    e4:17:6d:18:ae:20:ef:d6:b4:fd:21:93:37:25:c9:
                    c8:49:2a:8d:e2:18:91:86:b1:02:b6:d7:0a:70:e6:
                    a6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FB:AF:4D:E3:FA:08:59:C6:F6:04:08:05:2B:63:E0:DC:7D:F9:8A
            X509v3 Authority Key Identifier:
                keyid:32:97:FC:60:45:B3:26:20:F4:B7:F6:A0:AA:BC:04:1F:27:0B:24:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/1/3297FC6045B32620F4B7F6A0AABC041F270B248B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3297FC6045B32620F4B7F6A0AABC041F270B248B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/1/3137392e34382e37332e302f32342d3234203d3e20323731303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:0e:d5:73:8c:74:9f:02:9d:0b:84:f2:f1:0f:f8:11:03:9a:
         86:33:61:a3:28:5d:1d:73:d1:b9:74:33:31:07:23:37:3a:bc:
         b2:ee:ca:74:62:f0:5e:fc:a7:31:1f:03:4c:23:a1:7d:8c:5e:
         08:7a:e3:b0:8d:20:63:06:2b:f3:63:73:77:24:61:72:33:bb:
         32:66:58:51:f2:45:a9:51:f4:ae:e6:3c:b6:5b:46:3f:21:8c:
         9e:71:77:ff:f6:3a:77:f7:64:84:3c:6c:49:a5:b0:46:cd:9a:
         d8:cc:d9:ab:8e:a6:62:3d:84:b9:eb:18:c2:21:f9:e7:c4:31:
         9d:9d:5a:cc:76:62:57:75:e9:69:f6:cf:fd:aa:3f:4f:cf:46:
         75:12:bc:07:e7:60:50:03:ce:a2:f5:44:4d:91:0c:9c:a8:9d:
         7a:9b:38:9f:62:6f:56:38:aa:08:98:c9:d0:59:a8:ff:3a:49:
         00:70:b4:74:d4:5d:e2:24:2e:c1:65:30:54:96:51:33:a2:48:
         b5:cc:ef:58:6c:bd:8e:4f:5a:ca:be:9d:a0:72:4f:f1:bd:17:
         f2:a9:14:3f:30:06:41:37:13:15:5e:39:97:a2:67:e0:3b:bd:
         61:36:a6:1a:12:8f:63:f7:51:ad:81:b7:2a:7f:3f:ef:63:5a:
         60:51:73:03
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUA/rcyLwyfOl6Ud+vIBcSWy/ZsiUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzI5N0ZDNjA0NUIzMjYyMEY0QjdGNkEwQUFCQzA0MUYy
NzBCMjQ4QjAeFw0yNTAzMDYwNzA1NDRaFw0yNjAzMDUwNzEwNDRaMDMxMTAvBgNV
BAMTKEMxRkJBRjRERTNGQTA4NTlDNkY2MDQwODA1MkI2M0UwREM3REY5OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCQFsmVd9Bkh2WjGolPMCqn84t
khQBXa3Faq1zQJVtLwN2XFnv2kCO2p4J0bftKXl5LHQ3Lzn5frr23HEod53vrEZ/
JiR7LIVMicObmHPH6dO6ygA5LtV5iGeml2eKdbMHazMgM7V3Ir6avE6tEgJ2Yw8M
37RGaMH9dMRCjewI1w2QuNVh11JSxzt1lp5z8aLgODKt6k1pG0iFm8ccL+etCs/O
F9dQtN7CmByw1ma7NexXZiV8M5lTVVcBFfPuiTPL32e7MVTAJ3QpzxsKQw9q2Dpz
b/UFTSoXZrIa9WFtVOQXbRiuIO/WtP0hkzclychJKo3iGJGGsQK21wpw5qYXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUwfuvTeP6CFnG9gQIBStj4Nx9+YowHwYDVR0j
BBgwFoAUMpf8YEWzJiD0t/agqrwEHycLJIswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSE5WMkpXc1E2RG8xR3RyeGhjcXBvVVp2SnNMeWFDTlRQaUFmakRmVjd3
MVovMS8zMjk3RkM2MDQ1QjMyNjIwRjRCN0Y2QTBBQUJDMDQxRjI3MEIyNDhCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyOTdGQzYwNDVCMzI2MjBG
NEI3RjZBMEFBQkMwNDFGMjcwQjI0OEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hOVjJKV3NRNkRvMUd0cnhoY3Fwb1VadkpzTHlhQ05UUGlBZmpEZlY3dzFaLzEv
MzEzNzM5MmUzNDM4MmUzNzMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx
MzAzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAszBJMA0GCSqGSIb3DQEBCwUAA4IBAQBdDtVzjHSf
Ap0LhPLxD/gRA5qGM2GjKF0dc9G5dDMxByM3Oryy7sp0YvBe/KcxHwNMI6F9jF4I
euOwjSBjBivzY3N3JGFyM7syZlhR8kWpUfSu5jy2W0Y/IYyecXf/9jp392SEPGxJ
pbBGzZrYzNmrjqZiPYS56xjCIfnnxDGdnVrMdmJXdelp9s/9qj9Pz0Z1ErwH52BQ
A86i9URNkQycqJ16mzifYm9WOKoImMnQWaj/OkkAcLR01F3iJC7BZTBUllEzoki1
zO9YbL2OT1rKvp2gck/xvRfyqRQ/MAZBNxMVXjmXomfgO71hNqYaEo9j91Gtgbcq
fz/vY1pgUXMD
-----END CERTIFICATE-----
Generated at Tue Apr 22 23:11:56 2025 by rpki-client