Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/3137302e3135302e3132342e302f32322d3234203d3e20323635303333.roa
File:                     3137302e3135302e3132342e302f32322d3234203d3e20323635303333.roa (raw, json)
Hash identifier:          WDrWb6yQthRmSHjUAVmgUnI4U1ULCqYQS3SW8DpfF5Y=
Subject key identifier:   4D:9C:B2:19:F7:5B:89:06:8A:B9:1C:E1:48:C0:72:08:60:6C:4D:E1
Certificate issuer:       /CN=7ED7FB77C6430C0662EFBB0086DC22532C394D9F
Certificate serial:       0CE79FF8633C93F14633B4BEC13459CC87A888AB
Authority key identifier: 7E:D7:FB:77:C6:43:0C:06:62:EF:BB:00:86:DC:22:53:2C:39:4D:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ED7FB77C6430C0662EFBB0086DC22532C394D9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/3137302e3135302e3132342e302f32322d3234203d3e20323635303333.roa
Signing time:             Mon 01 Jul 2024 18:06:07 +0000
ROA not before:           Mon 01 Jul 2024 18:01:07 +0000
ROA not after:            Mon 30 Jun 2025 18:06:07 +0000
asID:                     265033
IP address blocks:        170.150.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/7ED7FB77C6430C0662EFBB0086DC22532C394D9F.crl
                          rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/7ED7FB77C6430C0662EFBB0086DC22532C394D9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ED7FB77C6430C0662EFBB0086DC22532C394D9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 12:44:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e7:9f:f8:63:3c:93:f1:46:33:b4:be:c1:34:59:cc:87:a8:88:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ED7FB77C6430C0662EFBB0086DC22532C394D9F
        Validity
            Not Before: Jul  1 18:01:07 2024 GMT
            Not After : Jun 30 18:06:07 2025 GMT
        Subject: CN=4D9CB219F75B89068AB91CE148C07208606C4DE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e5:bc:5e:45:12:4b:d9:64:11:88:8a:6c:e8:
                    77:19:33:f6:2c:d8:ed:5d:88:b6:3f:28:c5:0b:19:
                    ec:db:3c:8c:36:e3:91:d4:5b:85:06:e2:dd:3f:39:
                    e1:d4:52:00:a5:33:28:93:8d:c4:8b:1e:4e:b7:30:
                    ce:da:c7:e8:43:40:26:be:54:61:a1:d7:6b:a1:28:
                    97:3d:67:85:82:e5:6c:64:86:fa:ea:10:eb:48:67:
                    ff:02:ce:78:c4:ef:a7:3e:96:0a:1a:01:08:52:55:
                    34:f8:37:d7:13:cb:56:52:2c:7c:e0:8f:f1:40:6e:
                    ba:05:2d:7c:96:83:7f:29:14:15:63:be:db:3a:56:
                    87:3c:84:c6:90:ad:8c:d5:61:b9:90:55:c9:17:83:
                    5b:1b:83:f3:52:22:1c:12:51:14:73:0e:1c:d3:fc:
                    89:1b:f4:8e:61:6c:cc:2a:5a:74:52:42:b7:0b:dc:
                    d8:ad:da:94:ee:8f:9e:ad:98:f9:62:6e:23:54:6b:
                    68:cd:8e:1a:24:da:9e:d2:69:2d:af:8b:6d:63:9c:
                    8a:c0:09:f2:ca:1d:5a:50:9b:9c:da:b2:6a:13:f5:
                    ff:94:49:b6:03:cd:3b:99:64:e1:6b:18:c0:99:ea:
                    b7:5b:5a:87:98:95:99:8b:ad:f2:80:ee:ae:23:8b:
                    1b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9C:B2:19:F7:5B:89:06:8A:B9:1C:E1:48:C0:72:08:60:6C:4D:E1
            X509v3 Authority Key Identifier:
                keyid:7E:D7:FB:77:C6:43:0C:06:62:EF:BB:00:86:DC:22:53:2C:39:4D:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/7ED7FB77C6430C0662EFBB0086DC22532C394D9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ED7FB77C6430C0662EFBB0086DC22532C394D9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/3137302e3135302e3132342e302f32322d3234203d3e20323635303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:f9:dd:77:b5:ed:17:c8:d3:72:1d:e3:b6:fc:01:bd:70:63:
         63:43:9b:c7:d5:70:85:a8:fc:65:1c:63:ff:9b:c6:dd:3f:1c:
         aa:1b:8a:df:17:69:68:85:ef:4a:1e:97:02:aa:2d:7a:24:d1:
         bf:d2:00:74:54:3d:7f:de:68:b6:19:b7:2b:b8:60:0f:c1:12:
         77:81:e8:a8:db:d2:9e:99:1d:c2:07:d6:19:12:f2:99:c9:56:
         43:61:a3:5c:89:ee:cf:be:1f:ca:ab:53:80:ad:c3:5b:6e:77:
         f9:c4:31:87:d9:f3:48:c5:ef:d1:17:f9:fb:1e:c0:fc:63:4d:
         a5:ec:b1:a0:0c:9f:90:69:4e:e2:02:de:bf:84:50:4b:7e:fc:
         3c:d3:e4:12:cd:19:85:21:0a:78:44:7d:63:e6:1c:66:e2:03:
         38:d5:6b:89:30:00:20:d9:19:b7:87:20:ed:60:57:a9:f6:67:
         c0:27:8f:90:ca:f0:4a:2e:ba:a0:fc:e9:a9:eb:a2:b4:9a:47:
         92:bd:73:57:df:a3:fe:53:51:66:9a:04:cb:5c:97:0b:b4:53:
         46:96:ae:96:a7:cf:d9:3d:c1:ad:68:b2:84:db:1e:fb:b9:27:
         78:1c:56:3d:7a:d7:01:6b:ab:0b:38:00:1c:10:73:df:96:76:
         ae:50:0c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 12:57:39 2024 by rpki-client on console-fra.rpki-client.org