Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmeyVz9PUnzoTitHpW8YWnehzYKNvodcwJCyoSDJtQS7/0/3137392e36302e3132382e302f32322d3332203d3e20323730363732.roa
File:                     3137392e36302e3132382e302f32322d3332203d3e20323730363732.roa (raw, json)
Hash identifier:          NjDWvQ7eQ9Ljce5UYkT1Vdj109GKNINTnp+7SW7eCWU=
Subject key identifier:   C2:DC:76:66:E2:D2:8F:71:E2:21:1B:40:FD:0E:89:7E:18:93:14:40
Certificate issuer:       /CN=001AEAFAC3DB84DF8098F4CA1CA612C595E64631
Certificate serial:       0D127A1A41910D9FADE613C3B1A86580E23357B7
Authority key identifier: 00:1A:EA:FA:C3:DB:84:DF:80:98:F4:CA:1C:A6:12:C5:95:E6:46:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001AEAFAC3DB84DF8098F4CA1CA612C595E64631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmeyVz9PUnzoTitHpW8YWnehzYKNvodcwJCyoSDJtQS7/0/3137392e36302e3132382e302f32322d3332203d3e20323730363732.roa
Signing time:             Tue 24 Sep 2024 19:32:27 +0000
ROA not before:           Tue 24 Sep 2024 19:27:27 +0000
ROA not after:            Tue 23 Sep 2025 19:32:27 +0000
asID:                     270672
IP address blocks:        179.60.128.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmeyVz9PUnzoTitHpW8YWnehzYKNvodcwJCyoSDJtQS7/0/001AEAFAC3DB84DF8098F4CA1CA612C595E64631.crl
                          rsync://rpki-repo.registro.br/repo/HmeyVz9PUnzoTitHpW8YWnehzYKNvodcwJCyoSDJtQS7/0/001AEAFAC3DB84DF8098F4CA1CA612C595E64631.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001AEAFAC3DB84DF8098F4CA1CA612C595E64631.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:12:7a:1a:41:91:0d:9f:ad:e6:13:c3:b1:a8:65:80:e2:33:57:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001AEAFAC3DB84DF8098F4CA1CA612C595E64631
        Validity
            Not Before: Sep 24 19:27:27 2024 GMT
            Not After : Sep 23 19:32:27 2025 GMT
        Subject: CN=C2DC7666E2D28F71E2211B40FD0E897E18931440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:eb:eb:17:84:a6:41:2a:29:40:11:33:b6:bb:
                    bd:5c:bc:b8:9c:fc:3b:a9:76:fd:07:ea:d2:06:d5:
                    17:ba:71:12:18:6f:7f:2d:36:e1:96:92:93:e3:ba:
                    51:4c:41:d8:8a:e0:74:e7:7e:c5:27:57:73:55:47:
                    c7:f9:d2:d0:b8:ef:43:64:87:fb:c9:99:c7:4e:f5:
                    3c:c5:f9:0b:d0:60:56:f5:0c:ba:db:2f:b7:e0:ba:
                    b7:e5:35:74:41:0e:77:21:56:b5:0d:87:97:1d:03:
                    d8:54:f7:4a:2d:0e:ad:65:d4:ae:7b:0c:44:00:8a:
                    d4:c5:e7:9a:bf:28:1a:8f:ff:52:cc:ee:02:67:ce:
                    f4:2e:b6:b1:c7:3f:17:fe:21:74:b3:6e:15:74:bd:
                    81:d8:3a:7d:7e:77:d2:26:fc:5a:0d:e1:a0:96:b4:
                    f9:0f:5c:33:e1:72:ab:79:08:1e:46:98:3a:0f:4c:
                    93:1d:45:87:37:a0:15:5c:37:51:5b:47:06:78:e4:
                    04:5b:a3:ba:0b:3d:4b:ac:71:4e:29:f7:9e:3d:73:
                    65:95:00:b1:5b:c6:56:f7:96:16:76:8c:b6:d5:8b:
                    19:49:66:f6:92:df:bf:14:10:36:aa:68:e4:ab:9e:
                    94:b0:e3:ec:b3:ac:a2:c0:40:b6:b7:93:8b:f7:9e:
                    e7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DC:76:66:E2:D2:8F:71:E2:21:1B:40:FD:0E:89:7E:18:93:14:40
            X509v3 Authority Key Identifier:
                keyid:00:1A:EA:FA:C3:DB:84:DF:80:98:F4:CA:1C:A6:12:C5:95:E6:46:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmeyVz9PUnzoTitHpW8YWnehzYKNvodcwJCyoSDJtQS7/0/001AEAFAC3DB84DF8098F4CA1CA612C595E64631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001AEAFAC3DB84DF8098F4CA1CA612C595E64631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmeyVz9PUnzoTitHpW8YWnehzYKNvodcwJCyoSDJtQS7/0/3137392e36302e3132382e302f32322d3332203d3e20323730363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:fa:44:8e:fd:d8:b8:b7:35:4a:13:17:36:3f:1b:d2:3a:7e:
         e0:96:ee:af:b6:77:d3:3d:00:c7:82:f7:19:04:eb:ca:ef:2c:
         19:a9:2d:e3:64:43:bb:52:72:09:27:da:d1:f7:0e:c6:75:93:
         31:0d:a6:de:37:f4:3b:21:5f:4b:a4:f7:76:81:9e:c5:07:8d:
         92:75:f9:97:99:03:17:47:40:bf:42:e3:09:89:de:97:ed:76:
         d5:d3:72:56:a7:aa:02:3a:3b:ae:6b:be:6d:73:25:df:1e:48:
         85:b3:d7:9a:23:56:f6:d3:ed:22:85:79:62:15:d4:17:56:aa:
         fe:c1:50:57:9e:57:e9:85:16:3d:78:9c:0a:67:33:c4:3c:3a:
         30:f8:71:96:7c:95:77:91:92:8f:0f:8f:7c:29:f0:1c:05:aa:
         98:92:44:78:a2:42:ae:a3:06:9b:bd:48:59:fa:e9:70:90:ba:
         e1:96:0a:33:72:53:80:51:39:c1:36:17:a3:5e:d4:d1:25:33:
         de:76:45:52:57:b1:30:2c:3b:fa:5d:92:1e:ca:28:36:fc:47:
         d1:12:c7:0f:a2:16:c3:24:b0:70:2a:3b:db:9c:df:b5:dd:79:
         4c:7c:f6:cb:54:7f:21:8c:4f:a3:66:6e:e2:87:27:ff:84:3c:
         7e:5d:ff:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:41 2024 by rpki-client on console-ams.rpki-client.org