Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3132342e3132382e302f32342d3234203d3e20323633363132.roa
File:                     3137392e3132342e3132382e302f32342d3234203d3e20323633363132.roa (raw, json)
Hash identifier:          wSPPn96vnVyEDJGxkPODSZsr/G3ESOP7iKlKfjqbxD8=
Subject key identifier:   C7:40:B4:0A:67:90:05:93:4B:C3:2B:CC:B9:AB:54:74:C4:2D:8C:9C
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       4DC88D35A35E8FFAE6715E174195B77E51788835
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3132342e3132382e302f32342d3234203d3e20323633363132.roa
Signing time:             Fri 31 May 2024 23:29:07 +0000
ROA not before:           Fri 31 May 2024 23:24:07 +0000
ROA not after:            Fri 30 May 2025 23:29:07 +0000
asID:                     263612
IP address blocks:        179.124.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c8:8d:35:a3:5e:8f:fa:e6:71:5e:17:41:95:b7:7e:51:78:88:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: May 31 23:24:07 2024 GMT
            Not After : May 30 23:29:07 2025 GMT
        Subject: CN=C740B40A679005934BC32BCCB9AB5474C42D8C9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3c:e7:58:0d:eb:8c:60:2a:e1:e0:3c:df:0e:
                    e7:e8:1d:9b:bb:61:63:88:25:35:2e:1c:00:82:94:
                    8d:a5:77:0f:23:8d:9f:73:b2:8b:22:7a:da:8e:27:
                    13:2b:ca:8e:3c:7e:fc:08:4b:d3:2f:0d:f4:59:4d:
                    05:35:64:a0:b7:5d:b4:cd:02:6e:dd:09:93:c1:dc:
                    6b:20:b4:ad:ec:25:6d:95:75:a8:69:dd:06:48:c9:
                    b4:71:60:ed:20:b7:f1:a5:89:0f:3c:0f:e5:5d:9e:
                    43:3d:3f:b5:73:9a:0a:84:08:9b:ce:b4:3d:18:99:
                    75:21:77:f1:b8:f2:d2:db:b5:ce:8f:4a:a2:ba:cb:
                    b5:5e:e5:09:48:0a:5b:f1:35:18:0a:74:61:e8:79:
                    71:1d:ab:07:57:71:9d:53:ec:ac:9c:93:f7:29:05:
                    e2:db:65:6a:79:db:6a:03:19:fa:97:a4:13:f3:c8:
                    28:7a:4c:1d:df:16:be:50:62:4a:36:c5:8e:b7:83:
                    20:d4:5f:81:66:b9:fe:b2:65:ab:6c:f1:be:0a:1c:
                    73:44:48:ef:82:9b:a7:96:d9:f9:c8:57:a3:09:79:
                    03:d7:64:8c:9e:da:4d:4b:5c:fc:d1:d0:b5:b7:64:
                    58:3b:10:2b:0f:a4:4d:0c:59:e8:34:1f:18:41:29:
                    89:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:40:B4:0A:67:90:05:93:4B:C3:2B:CC:B9:AB:54:74:C4:2D:8C:9C
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3132342e3132382e302f32342d3234203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:d3:cd:1a:e1:ba:a5:ee:cf:13:5e:f4:49:1d:70:83:a0:e9:
         d7:e5:7a:7b:34:50:c2:60:ea:cb:84:05:c7:0f:cb:78:3e:ac:
         92:58:a7:29:64:6c:88:56:01:67:cd:d1:28:7b:d2:38:92:39:
         e5:1c:29:b3:53:ca:b1:27:4f:ca:6d:2c:e9:cc:6f:1c:b4:83:
         ff:92:21:48:e7:20:90:5f:80:83:3e:cc:75:cd:72:22:1c:75:
         3e:e2:38:f6:68:e8:1c:4a:22:c0:f4:2b:7f:bb:4f:36:29:56:
         c5:cc:fd:ba:f7:d4:cc:22:38:1c:d6:38:09:85:e6:f9:0d:b5:
         13:9c:d8:46:ea:b1:d2:8c:16:8f:38:ec:69:20:0a:f7:99:1f:
         83:42:c5:33:ef:d8:7d:f1:38:13:c1:4c:ca:4c:0c:4a:bb:67:
         da:bd:05:f6:5c:92:1e:47:d5:40:2d:05:07:69:e2:55:84:ee:
         c7:56:27:84:52:f0:83:c1:2c:c1:78:5a:a8:f3:9c:48:55:b1:
         9f:15:eb:3c:15:fc:06:4c:74:31:27:d4:8a:a0:c2:b3:83:ee:
         12:14:02:d9:35:75:df:62:1c:51:59:3f:c6:17:70:8f:f3:81:
         0a:18:cc:ad:7b:15:0c:fd:b3:a8:71:85:e7:c2:bf:13:4d:1b:
         89:01:cb:9f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTciNNaNej/rmcV4XQZW3flF4iDUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc4QkUzRENBRTJFRUI0ODk1Q0YxNjRFMURDM0JCQTM2
MDIzQTlBMTAeFw0yNDA1MzEyMzI0MDdaFw0yNTA1MzAyMzI5MDdaMDMxMTAvBgNV
BAMTKEM3NDBCNDBBNjc5MDA1OTM0QkMzMkJDQ0I5QUI1NDc0QzQyRDhDOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdPOdYDeuMYCrh4DzfDufoHZu7
YWOIJTUuHACClI2ldw8jjZ9zsosietqOJxMryo48fvwIS9MvDfRZTQU1ZKC3XbTN
Am7dCZPB3GsgtK3sJW2Vdahp3QZIybRxYO0gt/GliQ88D+VdnkM9P7VzmgqECJvO
tD0YmXUhd/G48tLbtc6PSqK6y7Ve5QlIClvxNRgKdGHoeXEdqwdXcZ1T7Kyck/cp
BeLbZWp522oDGfqXpBPzyCh6TB3fFr5QYko2xY63gyDUX4Fmuf6yZats8b4KHHNE
SO+Cm6eW2fnIV6MJeQPXZIye2k1LXPzR0LW3ZFg7ECsPpE0MWeg0HxhBKYmTAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUx0C0CmeQBZNLwyvMuatUdMQtjJwwHwYDVR0j
BBgwFoAU54vj3K4u60iVzxZOHcO7o2AjqaEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHF4ZWFYd3htdlRkckJ3MkZVaDI1TTc5OEdTMkdzRVY2Z1JIYzZRZDI0
WEMvMC9FNzhCRTNEQ0FFMkVFQjQ4OTVDRjE2NEUxREMzQkJBMzYwMjNBOUExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3OEJFM0RDQUUyRUVCNDg5
NUNGMTY0RTFEQzNCQkEzNjAyM0E5QTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hxeGVhWHd4bXZUZHJCdzJGVWgyNU03OThHUzJHc0VWNmdSSGM2UWQyNFhDLzAv
MzEzNzM5MmUzMTMyMzQyZTMxMzIzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM2MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALN8gDANBgkqhkiG9w0BAQsFAAOCAQEArNPN
GuG6pe7PE170SR1wg6Dp1+V6ezRQwmDqy4QFxw/LeD6sklinKWRsiFYBZ83RKHvS
OJI55Rwps1PKsSdPym0s6cxvHLSD/5IhSOcgkF+Agz7Mdc1yIhx1PuI49mjoHEoi
wPQrf7tPNilWxcz9uvfUzCI4HNY4CYXm+Q21E5zYRuqx0owWjzjsaSAK95kfg0LF
M+/YffE4E8FMykwMSrtn2r0F9lySHkfVQC0FB2niVYTux1YnhFLwg8EswXhaqPOc
SFWxnxXrPBX8Bkx0MSfUiqDCs4PuEhQC2TV132IcUVk/xhdwj/OBChjMrXsVDP2z
qHGF58K/E00biQHLnw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:30 2024 by rpki-client on console-ams.rpki-client.org