Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/3137372e3135342e32372e302f32342d3234203d3e20323632393435.roa
File:                     3137372e3135342e32372e302f32342d3234203d3e20323632393435.roa (raw, json)
Hash identifier:          CSFKzWeU3/sIjt0j1VcehGXRM41yYz0Jh/SMtW3nftQ=
Subject key identifier:   E0:AA:EC:66:4C:18:D1:E0:B8:0A:E0:A0:59:DF:59:A7:BB:CC:FD:19
Certificate issuer:       /CN=F5053681E4FFFE993EC674A211C8BBC7FB338987
Certificate serial:       188D56F1A0B9DAB37D6751F8C36A78BDCF0518AF
Authority key identifier: F5:05:36:81:E4:FF:FE:99:3E:C6:74:A2:11:C8:BB:C7:FB:33:89:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/3137372e3135342e32372e302f32342d3234203d3e20323632393435.roa
Signing time:             Wed 03 Apr 2024 18:33:04 +0000
ROA not before:           Wed 03 Apr 2024 18:28:04 +0000
ROA not after:            Wed 02 Apr 2025 18:33:04 +0000
asID:                     262945
IP address blocks:        177.154.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.crl
                          rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:43:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:8d:56:f1:a0:b9:da:b3:7d:67:51:f8:c3:6a:78:bd:cf:05:18:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5053681E4FFFE993EC674A211C8BBC7FB338987
        Validity
            Not Before: Apr  3 18:28:04 2024 GMT
            Not After : Apr  2 18:33:04 2025 GMT
        Subject: CN=E0AAEC664C18D1E0B80AE0A059DF59A7BBCCFD19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:96:7f:ff:9f:85:bd:75:1a:19:95:d3:b7:59:
                    cd:5d:da:e5:d6:d5:76:9c:7b:2a:ea:49:b3:cf:6c:
                    aa:2c:fa:81:ea:bf:84:a7:75:c4:8f:ac:2b:58:8d:
                    52:6d:35:2b:86:5c:8b:96:3e:a2:98:df:0c:cd:30:
                    5a:9e:fc:e4:de:cf:07:9c:63:b7:36:94:9b:94:b2:
                    6c:b8:a1:96:2f:c3:7e:68:c3:1a:a6:85:f8:5c:0c:
                    de:13:67:66:d8:d6:f9:05:34:42:fa:86:e5:02:d2:
                    a7:24:c0:a9:1c:6b:48:fa:64:39:d8:ae:58:27:60:
                    06:dc:cc:c8:4c:4e:0e:99:db:f6:54:fb:55:37:ea:
                    cd:12:03:0a:08:04:22:de:a4:ec:cf:47:c7:92:9c:
                    d9:ae:c9:f7:22:ce:a0:92:9d:4b:4e:7e:ce:40:2e:
                    ce:b9:0d:c7:c0:23:03:9e:7e:b6:0c:1a:6b:ab:b5:
                    cf:b2:1e:88:b5:2b:fa:0c:e3:4f:af:64:02:17:ed:
                    53:75:ba:b3:dc:0a:ec:5b:fa:2b:d2:a4:41:af:9c:
                    22:e1:9e:52:10:b7:dd:64:7e:59:20:ef:fa:af:5a:
                    cd:59:52:ea:db:21:d9:48:6d:ae:16:22:b1:0f:b9:
                    74:ff:f8:ee:31:3e:e3:f4:10:52:16:9f:f7:7d:52:
                    95:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:AA:EC:66:4C:18:D1:E0:B8:0A:E0:A0:59:DF:59:A7:BB:CC:FD:19
            X509v3 Authority Key Identifier:
                keyid:F5:05:36:81:E4:FF:FE:99:3E:C6:74:A2:11:C8:BB:C7:FB:33:89:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/3137372e3135342e32372e302f32342d3234203d3e20323632393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:45:c1:31:99:78:36:44:1e:38:17:26:bf:73:ae:ae:00:c1:
         f8:d1:6a:4c:35:f7:c0:f8:f5:b5:5c:2d:03:76:d6:24:c5:d9:
         44:bd:ea:e9:4d:4e:a1:95:50:af:30:48:b3:24:70:2d:04:4f:
         91:1e:14:92:3b:e3:7d:92:52:50:76:71:32:73:56:8b:4d:17:
         2f:dd:3e:b1:e9:a9:66:cb:a8:ec:ea:70:37:f2:34:64:fb:b5:
         8d:6f:86:08:d8:2e:b2:9f:86:db:a2:f7:89:96:1c:73:1c:8a:
         7f:6c:b4:39:a1:52:5d:26:20:0b:e8:71:09:a8:73:ac:0c:d4:
         33:6c:d6:f3:21:b5:37:53:a3:93:7b:48:3a:eb:5f:f1:19:94:
         30:fd:a2:a3:da:6f:69:d7:e8:78:78:16:b9:a1:c0:5f:a1:df:
         3c:7d:c6:04:7c:48:e5:a6:ea:0d:25:c1:a7:72:1a:f9:f1:0c:
         66:f0:ee:93:07:5d:5b:ae:7f:10:de:4f:26:5b:c5:07:c8:f5:
         cf:6c:38:18:97:6a:cf:20:f8:cb:eb:e5:0b:c9:eb:4d:96:20:
         a0:8e:2f:2d:a6:29:80:11:be:73:8d:78:67:7e:03:e1:b8:01:
         1e:3d:52:31:55:8c:c9:de:9e:c1:61:39:06:73:95:24:0e:7f:
         b0:b0:89:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:10 2024 by rpki-client on console-ams.rpki-client.org