Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132332e302f32342d3234203d3e20323633363132.roa
File:                     3137392e3138392e3132332e302f32342d3234203d3e20323633363132.roa (raw, json)
Hash identifier:          sNwPHmFqIN7Oi3mtmXnq5wxakZD4d2mtV5ohIGo61wU=
Subject key identifier:   5A:D9:8B:2C:8C:D1:83:A0:EA:70:40:0F:0F:00:12:73:EC:98:8B:77
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       5C986B0276151EC7B3C8EA9C0602331DDA3E17F4
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132332e302f32342d3234203d3e20323633363132.roa
Signing time:             Sat 03 May 2025 00:20:38 +0000
ROA not before:           Sat 03 May 2025 00:15:38 +0000
ROA not after:            Sat 02 May 2026 00:20:38 +0000
asID:                     263612
IP address blocks:        179.189.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 14:42:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:98:6b:02:76:15:1e:c7:b3:c8:ea:9c:06:02:33:1d:da:3e:17:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: May  3 00:15:38 2025 GMT
            Not After : May  2 00:20:38 2026 GMT
        Subject: CN=5AD98B2C8CD183A0EA70400F0F001273EC988B77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fd:0a:62:74:03:07:e9:e2:5d:dc:47:01:41:
                    ef:02:9b:9f:0b:47:8f:b5:c6:a8:38:cb:57:be:64:
                    86:f1:c3:2a:e2:10:d6:0e:23:04:b7:9e:df:69:2e:
                    02:55:61:55:9c:cf:a1:b9:8f:49:54:19:d6:b3:e2:
                    2a:be:d5:4e:30:25:65:ca:0f:d2:42:08:66:86:8a:
                    1f:22:07:e2:10:b7:99:d2:09:25:5a:18:c8:f4:de:
                    35:e3:fd:9c:77:98:a5:39:e9:2e:59:fd:9e:3b:cc:
                    2b:1b:eb:fe:37:cd:50:9e:19:aa:de:b7:db:b8:5f:
                    ef:30:82:b5:49:2a:da:45:9e:bb:1b:67:af:93:a6:
                    1c:78:f8:00:fd:16:17:7a:09:e4:f2:b6:90:c6:d1:
                    bb:28:c4:14:78:ac:be:eb:d7:35:41:6c:fb:2f:6d:
                    e7:d3:3f:ef:97:89:4f:d7:53:9d:44:79:cb:3b:d0:
                    ec:c6:71:1e:fe:ad:c3:e5:82:91:9a:77:6b:d0:2b:
                    9e:e5:83:d2:e9:20:3e:36:86:08:c3:2b:7e:a0:c1:
                    74:37:4c:6e:e2:c8:71:c3:9c:d6:a1:a5:3a:f9:62:
                    a3:b5:ad:f8:3a:50:ae:ea:22:b9:e1:d2:cb:36:82:
                    47:5d:13:35:09:11:a9:f3:32:31:13:88:3f:f0:bd:
                    3b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D9:8B:2C:8C:D1:83:A0:EA:70:40:0F:0F:00:12:73:EC:98:8B:77
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132332e302f32342d3234203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:0e:7f:95:76:64:a4:2d:77:d1:c4:77:2d:9d:99:25:10:17:
         8a:c0:3b:44:79:bf:1c:28:ee:b9:c8:1c:b9:5d:8c:cf:1b:a4:
         0f:fd:db:18:fc:0d:5a:ac:ca:33:1c:17:43:d0:a6:1d:07:f1:
         d1:44:ff:0b:da:f0:7c:91:39:c7:7e:cc:12:f2:41:06:06:e8:
         74:a5:6c:dc:1c:70:7e:ce:52:73:50:85:97:a3:4b:ed:9e:bd:
         ab:db:48:e4:ff:c9:c3:0e:f4:57:75:a9:27:3d:59:6b:a6:32:
         c9:7b:88:ad:3a:6c:7e:32:bc:b0:6b:3b:c7:98:e4:88:f2:47:
         a1:c3:2e:48:bb:d5:a6:6a:af:98:e9:13:8b:0f:82:90:30:55:
         73:14:4b:43:56:20:d0:da:3c:71:2d:ac:36:18:3b:73:c2:13:
         9c:74:5b:da:b7:55:04:bc:2b:7c:90:9b:7c:96:60:e2:d7:8c:
         10:38:4b:19:d2:77:f6:77:5f:63:78:0d:7e:9f:dc:e0:d8:eb:
         3d:b1:77:9d:fb:59:5a:ad:80:0a:98:69:c9:9b:8a:99:c9:e8:
         25:25:2d:73:f4:76:a4:7a:06:07:85:aa:4c:72:c4:d9:09:9b:
         f2:77:55:08:5b:34:c3:31:2d:b4:1e:81:8e:55:64:b1:e2:c6:
         e0:92:81:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:30:34 2025 by rpki-client