Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132322e302f32332d3233203d3e20323633363132.roa
File:                     3137392e3138392e3132322e302f32332d3233203d3e20323633363132.roa (raw, json)
Hash identifier:          yFkC5BLDYSoDp2SyPR8whwd8nSmSFzSaaL8HslEmF0g=
Subject key identifier:   01:6E:D5:7D:D8:23:24:29:49:67:04:B3:53:4B:54:A8:8C:81:6A:3E
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       6D59DE5C6F4B147BB272BBE906DA6144EC1034CD
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132322e302f32332d3233203d3e20323633363132.roa
Signing time:             Tue 18 Mar 2025 13:38:37 +0000
ROA not before:           Tue 18 Mar 2025 13:33:37 +0000
ROA not after:            Tue 17 Mar 2026 13:38:37 +0000
asID:                     263612
IP address blocks:        179.189.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 22:29:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:59:de:5c:6f:4b:14:7b:b2:72:bb:e9:06:da:61:44:ec:10:34:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: Mar 18 13:33:37 2025 GMT
            Not After : Mar 17 13:38:37 2026 GMT
        Subject: CN=016ED57DD8232429496704B3534B54A88C816A3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b3:59:14:1f:98:2c:a8:3b:83:a0:0b:b3:7b:
                    7a:86:db:70:d2:ae:d1:a8:b5:f3:65:88:ba:9a:e0:
                    a0:e4:8a:f7:e8:bb:e4:3d:f5:4f:58:10:3d:7e:54:
                    61:bd:2e:52:a7:98:62:4d:42:fc:1c:79:9a:0e:63:
                    44:56:66:a2:14:0f:68:94:2c:68:fc:21:93:12:5b:
                    16:76:c1:dd:81:f4:b9:34:44:d0:bb:fe:fa:9b:d3:
                    ca:04:f8:8f:47:5c:b4:4f:ce:fe:a0:61:33:6b:c5:
                    49:cd:10:b3:b5:2a:bc:55:61:a4:fc:3b:d1:3a:e9:
                    3b:8a:e5:32:f7:72:d8:7e:9f:ac:e2:7c:19:b4:cc:
                    9c:c4:4b:77:74:1b:2c:70:69:ea:2f:47:47:1f:90:
                    b0:60:61:71:73:b2:43:c9:f6:a9:1a:31:14:e6:aa:
                    ca:13:c2:5a:7b:f5:b0:ac:06:ef:ff:d0:d9:79:18:
                    cf:58:98:95:f0:68:b2:ae:6c:4f:30:8f:ef:80:7f:
                    c6:8b:bb:81:28:ab:4d:60:0b:d4:10:96:88:8a:05:
                    8e:60:77:08:71:ee:45:03:31:4b:5e:b6:d1:99:b6:
                    cf:f4:13:cd:12:1b:fa:e2:21:56:0e:e3:f3:30:4e:
                    e4:36:38:90:ed:33:8e:b0:d7:63:b5:18:9b:c2:ba:
                    57:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6E:D5:7D:D8:23:24:29:49:67:04:B3:53:4B:54:A8:8C:81:6A:3E
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132322e302f32332d3233203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:4d:e8:3c:01:34:4c:45:d6:3d:f6:ea:62:ca:83:6f:a4:c0:
         63:72:32:79:f5:99:68:42:c8:6b:03:9e:24:d9:1b:36:6d:a9:
         74:46:ea:fe:e5:65:fb:0c:5c:90:a8:93:af:a3:bc:b1:55:5e:
         14:5e:50:49:11:ea:7b:ad:91:c4:57:e2:d7:fa:82:25:33:73:
         e9:af:a3:5d:89:4c:f4:ab:62:af:78:3c:9d:56:4c:82:a1:ad:
         5c:b0:81:77:44:a6:69:ea:8a:60:95:80:09:3c:4b:e1:3a:70:
         ff:4b:f2:61:e4:b6:0d:88:3a:0d:95:7c:96:46:4d:23:b1:6c:
         55:de:df:3b:cc:b2:eb:e4:95:77:56:aa:16:54:70:78:82:86:
         d7:37:a3:68:52:56:41:fa:93:e4:f2:6c:73:34:bf:d3:30:c9:
         db:f8:7b:61:bf:e1:db:f6:ff:65:67:30:05:82:64:4f:fb:59:
         a2:01:4d:5d:94:a4:4c:a5:ec:69:f7:62:c9:fc:c5:72:ef:3b:
         99:63:ff:d5:ce:de:53:fa:cd:e3:a8:77:61:8a:4c:d9:e9:ea:
         a5:15:01:0a:f7:8b:09:52:32:b1:64:72:48:6a:62:8a:41:43:
         b5:ce:07:bf:d8:e2:6e:e3:ab:52:ea:c8:cf:0a:cc:9f:d0:97:
         08:b7:dc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:37:43 2025 by rpki-client