Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3132342e3132382e302f32322d3232203d3e20323633363132.roa
File:                     3137392e3132342e3132382e302f32322d3232203d3e20323633363132.roa (raw, json)
Hash identifier:          2W+VWkV4ubSn/SV8m2koI0zPqQm7+i5TC8tk0xW4Fgg=
Subject key identifier:   45:6C:F0:80:60:6C:F6:B5:B8:03:93:99:80:F1:BF:3C:4B:8F:81:2D
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       7D62DD7551F48FBAE33B9B0F67A3F9F7F238B439
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3132342e3132382e302f32322d3232203d3e20323633363132.roa
Signing time:             Fri 31 May 2024 23:28:58 +0000
ROA not before:           Fri 31 May 2024 23:23:58 +0000
ROA not after:            Fri 30 May 2025 23:28:58 +0000
asID:                     263612
IP address blocks:        179.124.128.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:62:dd:75:51:f4:8f:ba:e3:3b:9b:0f:67:a3:f9:f7:f2:38:b4:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: May 31 23:23:58 2024 GMT
            Not After : May 30 23:28:58 2025 GMT
        Subject: CN=456CF080606CF6B5B803939980F1BF3C4B8F812D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7e:3c:db:4c:92:66:ce:a6:10:92:85:a2:e5:
                    75:e4:6e:c3:10:05:b0:f8:8e:61:9b:db:82:80:af:
                    0e:50:53:2d:dd:71:37:65:5f:4c:6d:30:fe:02:98:
                    98:a0:3b:eb:98:ae:ba:0e:04:c5:ea:ab:fc:4f:57:
                    05:0c:03:5b:f9:f0:c3:a3:91:94:ae:a7:8c:96:a5:
                    16:61:09:c5:0e:7d:a8:07:c8:a4:55:ee:69:ac:18:
                    32:a3:4b:4a:ce:b4:50:6e:4e:c5:d7:1f:a3:a0:46:
                    2b:9b:3f:8e:b2:71:7d:79:c2:30:c6:86:db:72:45:
                    75:7a:6a:4b:a9:e6:23:43:e9:35:b5:f4:51:42:de:
                    1e:53:31:d8:f6:d9:f8:b0:1b:ee:a5:f7:e4:e2:66:
                    f6:87:49:df:4d:e7:90:74:f1:77:ff:0d:83:bc:ea:
                    a9:94:b6:65:41:8c:7d:c0:9d:d4:64:22:81:8b:a2:
                    75:a7:31:38:f2:1e:b8:7e:7e:62:39:5b:d0:68:87:
                    dc:6d:72:f0:75:1b:11:42:af:19:ba:29:9f:85:c8:
                    b4:fb:4d:9b:a9:a7:a6:56:b9:b4:09:bc:f7:01:8b:
                    c0:a8:38:7e:99:32:61:af:3f:65:ec:f4:f4:42:36:
                    aa:8f:a3:bc:fd:01:db:29:00:24:af:d7:81:21:1a:
                    73:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:6C:F0:80:60:6C:F6:B5:B8:03:93:99:80:F1:BF:3C:4B:8F:81:2D
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3132342e3132382e302f32322d3232203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:e1:db:c2:52:bd:2d:37:df:5e:a1:51:2d:39:80:52:18:6a:
         0b:d4:45:4d:12:d5:2f:5c:e4:d1:f0:f1:8d:3e:cf:4d:31:43:
         32:f9:a1:66:4e:c8:6c:c5:61:f6:5f:36:6f:0f:cc:fc:11:4c:
         de:78:50:8c:8f:b0:5b:a1:e4:2c:78:6d:db:b5:65:40:68:fe:
         d4:ca:3b:a6:0e:8d:1b:bc:f1:51:1f:ec:a4:00:b8:80:ec:4e:
         b6:02:5e:84:33:56:a8:5b:cb:08:29:78:89:a7:d3:1f:81:4c:
         67:17:67:c3:7a:f3:45:23:3e:f4:a4:d8:1f:32:ec:08:ae:38:
         31:6e:46:46:da:72:26:b7:e7:1a:f0:36:48:0c:7e:e6:bd:29:
         f5:6c:82:71:c2:bd:d1:79:a6:3e:1e:ed:ad:22:af:9c:f0:35:
         70:48:75:3b:a6:a3:b4:f3:9a:7e:05:cf:12:53:a1:b2:c8:a4:
         68:b4:cc:58:81:8f:64:3c:bc:90:0c:d7:bf:c9:7b:9b:71:32:
         78:0e:cb:f7:32:2d:a3:a5:b3:a9:bd:b7:73:93:86:78:d2:e9:
         6d:df:33:36:7d:a6:c1:74:42:dc:92:ab:66:3c:52:98:06:fa:
         68:fe:6f:04:10:4f:75:a4:aa:98:fc:a9:4d:43:9f:38:ae:40:
         67:f2:6f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:30 2024 by rpki-client on console-ams.rpki-client.org