Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3137392e3234302e302e302f31342d3234203d3e203232303835.roa
File:                     3137392e3234302e302e302f31342d3234203d3e203232303835.roa (raw, json)
Hash identifier:          Y1l+9yBG97tPMA+SKgZobyep2lX8XxbzDN3Vr86e/eM=
Subject key identifier:   D3:DF:8E:7E:9D:6C:5A:79:BD:EF:22:95:12:30:D4:E8:46:14:1E:E8
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       1AAB6A4CF04475C9F44A847EAEEAF08E9C43D2A9
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3137392e3234302e302e302f31342d3234203d3e203232303835.roa
Signing time:             Tue 16 Jul 2024 14:24:15 +0000
ROA not before:           Tue 16 Jul 2024 14:19:15 +0000
ROA not after:            Tue 15 Jul 2025 14:24:15 +0000
asID:                     22085
IP address blocks:        179.240.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl
                          rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 02:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ab:6a:4c:f0:44:75:c9:f4:4a:84:7e:ae:ea:f0:8e:9c:43:d2:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Jul 16 14:19:15 2024 GMT
            Not After : Jul 15 14:24:15 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:61:aa:06:3a:7f:03:03:57:a0:3a:99:ca:7c:
                    c7:b5:78:bc:77:f6:aa:3b:a5:82:c9:06:da:43:36:
                    36:73:c5:20:4c:f1:56:17:16:ee:8e:41:33:62:84:
                    f1:40:bf:2f:c8:ae:c0:a2:e8:38:50:75:a7:26:b0:
                    76:d7:5b:c2:6c:c0:66:eb:6e:e5:21:69:e8:15:d2:
                    48:9b:d0:87:82:a4:0a:76:fe:b6:a0:a0:66:24:c6:
                    bf:19:c8:48:9f:90:90:a3:30:ea:e2:7e:9a:d0:93:
                    79:f4:b0:12:08:6d:83:5a:e2:95:16:48:a4:b5:5c:
                    6c:db:44:c9:b2:53:8a:b9:f2:10:8a:8e:30:5b:c2:
                    4b:31:b5:6c:2f:cf:47:53:52:41:93:02:05:f1:14:
                    c9:27:ff:f6:22:99:c7:7f:34:0c:98:b3:83:b3:34:
                    52:0d:dc:48:ab:05:9b:6d:54:10:ed:76:06:2c:55:
                    13:2e:f3:68:6a:77:8d:10:22:4d:0d:ab:49:1f:5c:
                    42:ef:d2:16:19:bf:8a:da:07:b0:f4:da:57:08:4c:
                    12:64:2b:55:0b:32:47:50:37:9f:aa:15:e8:01:6a:
                    d7:bb:9a:ca:00:a1:bf:63:22:59:0f:8c:8f:20:23:
                    fd:ff:8d:ab:10:7f:2a:60:64:e4:6a:61:15:0e:86:
                    58:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DF:8E:7E:9D:6C:5A:79:BD:EF:22:95:12:30:D4:E8:46:14:1E:E8
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3137392e3234302e302e302f31342d3234203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.240.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         d2:a3:76:2a:6d:d4:87:50:ae:96:a2:42:7b:be:11:f6:e9:10:
         9f:46:aa:c6:76:ff:21:38:bd:38:f6:2b:fa:68:7a:66:59:81:
         f9:25:64:47:06:42:7e:e5:d9:89:b3:97:11:bc:57:44:23:bf:
         a4:56:72:f0:32:76:88:db:86:91:7a:2d:1c:61:18:ee:56:bf:
         c9:8f:22:cf:cd:15:a7:c9:1d:fe:9c:fb:44:45:1f:94:34:e0:
         52:d3:fa:97:eb:9d:c1:75:99:80:1e:0e:24:92:81:95:ec:bc:
         95:9c:fb:2c:37:a7:94:9c:46:7a:f3:14:f3:79:f4:a8:9a:b5:
         1e:73:b7:07:8f:18:9f:f5:6f:82:00:9f:48:0a:47:17:e0:71:
         04:45:55:81:62:b4:d0:9a:c0:9c:26:af:74:d7:4c:f9:f0:8c:
         06:31:3e:b2:07:f5:91:0d:41:ce:fc:c0:c5:05:cf:36:74:07:
         d9:b5:0b:79:27:17:84:27:f6:a0:a5:7d:1f:bb:4a:90:4c:2f:
         3c:90:f2:68:eb:fa:eb:a5:53:fb:f9:3a:f5:40:47:82:d7:87:
         74:dd:d5:e0:53:81:18:84:2e:5c:35:16:75:d0:5e:e5:78:30:
         dc:08:3c:ef:78:f7:70:6a:45:9f:73:98:b4:07:6b:08:97:1c:
         43:04:ab:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:09 2024 by rpki-client on console-fra.rpki-client.org