Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132362e302f32332d3233203d3e20323633363132.roa
File:                     3137392e3138392e3132362e302f32332d3233203d3e20323633363132.roa (raw, json)
Hash identifier:          r3GJMR4fkXytZUudAsHcyY+7Zktp36w+4CApcCfltoY=
Subject key identifier:   A9:91:71:05:56:87:57:55:62:0F:A3:10:A8:18:E9:57:0C:3E:D8:A9
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       2E76DFCB987BAE27323D03CB33993A9270DB066F
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132362e302f32332d3233203d3e20323633363132.roa
Signing time:             Tue 18 Mar 2025 13:37:13 +0000
ROA not before:           Tue 18 Mar 2025 13:32:13 +0000
ROA not after:            Tue 17 Mar 2026 13:37:13 +0000
asID:                     263612
IP address blocks:        179.189.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 22:29:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:76:df:cb:98:7b:ae:27:32:3d:03:cb:33:99:3a:92:70:db:06:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: Mar 18 13:32:13 2025 GMT
            Not After : Mar 17 13:37:13 2026 GMT
        Subject: CN=A991710556875755620FA310A818E9570C3ED8A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c4:8e:8a:5d:22:a8:ab:c3:93:3b:df:b2:59:
                    64:69:9a:4f:de:9b:1e:b2:cc:b3:97:56:24:21:d1:
                    f5:6e:c5:27:b4:5e:49:75:db:d6:04:d4:0a:bd:b4:
                    13:3a:fe:53:58:10:da:54:2e:7d:cd:2c:ed:c3:7c:
                    fa:dd:ac:07:64:11:c8:5b:bd:e7:a8:10:9d:bc:e8:
                    b4:70:cc:85:26:95:97:db:ad:f1:bd:95:01:89:1e:
                    e9:04:e1:6f:c5:64:23:7f:da:7f:88:6a:ae:2a:9d:
                    55:40:0d:00:c7:62:04:8f:7a:5a:45:7a:24:6b:ac:
                    26:0c:32:a4:d4:3e:49:49:93:12:a7:f0:d5:97:c4:
                    c1:01:21:0a:f0:41:89:38:9a:8b:1d:05:6a:a0:1b:
                    29:8b:b3:ae:53:50:bd:17:e1:86:5c:96:27:a7:b8:
                    08:da:31:d5:ad:1e:95:24:71:38:38:29:a1:5f:8b:
                    7f:6e:f6:89:77:62:e1:a4:de:73:86:6d:03:6e:e5:
                    ca:4f:35:72:96:6b:e5:79:b6:57:33:fe:99:66:e8:
                    25:c8:c9:a3:b0:c8:cf:d7:97:11:12:76:f0:d9:4d:
                    86:14:6d:71:6f:a1:8c:5a:ab:e8:e3:af:da:29:45:
                    57:ed:10:0d:71:e9:90:41:6c:cb:e4:94:c4:4c:2d:
                    bd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:91:71:05:56:87:57:55:62:0F:A3:10:A8:18:E9:57:0C:3E:D8:A9
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132362e302f32332d3233203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:f5:4c:9d:cd:5d:23:a3:cb:68:ea:ad:da:a7:1c:e0:f4:6a:
         08:fc:ed:41:76:8a:13:e8:e8:81:5a:24:72:8b:ae:3d:da:01:
         c7:d8:0a:6f:07:68:ab:f3:49:59:45:56:d1:5a:8c:4f:4e:5e:
         3e:7d:ba:e9:a5:95:a3:f1:43:91:80:0d:fa:a0:70:02:19:29:
         91:c2:bf:e2:fa:da:1b:9a:44:3c:ad:d9:34:1e:75:4a:a6:6b:
         b1:5d:50:03:d2:1b:54:91:48:db:35:36:3c:f8:11:26:4f:1e:
         44:a7:5f:04:9c:69:9e:ea:58:05:d4:2c:dc:97:a1:7f:67:71:
         52:d9:3c:82:3f:84:3f:93:3d:36:98:b2:8f:cf:d4:42:fd:08:
         4e:f6:fb:d3:27:64:c5:43:b1:cf:48:83:5d:d5:b2:5f:b7:ed:
         45:18:17:45:df:b1:5a:84:cb:17:c6:8b:3a:1d:f0:69:66:34:
         e8:28:b1:db:b5:e3:80:a0:03:b7:b8:b9:df:e6:94:59:d5:4f:
         05:02:d5:9a:07:be:8d:49:65:67:d7:68:7b:5d:a3:ee:ab:1e:
         7c:10:8f:cd:f9:5e:86:f7:35:9f:60:1b:86:41:86:c1:09:9f:
         a4:d5:25:fd:76:eb:8a:55:8e:15:95:9f:1b:e4:e4:1f:1e:e9:
         4a:c6:70:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:37:35 2025 by rpki-client