Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3132342e3133302e302f32332d3233203d3e20323633363132.roa
File:                     3137392e3132342e3133302e302f32332d3233203d3e20323633363132.roa (raw, json)
Hash identifier:          Whs5hw27UcymTLlhQ/ahxIOJ24ivvqD0wLD5Hh1Gvrc=
Subject key identifier:   35:2E:28:17:73:C3:24:C2:66:A6:91:16:BE:C7:AD:B7:9F:B3:18:3E
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       16869C2D7B9EED74EE205348F786DBC8FA789376
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3132342e3133302e302f32332d3233203d3e20323633363132.roa
Signing time:             Fri 31 May 2024 23:29:13 +0000
ROA not before:           Fri 31 May 2024 23:24:13 +0000
ROA not after:            Fri 30 May 2025 23:29:13 +0000
asID:                     263612
IP address blocks:        179.124.130.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:86:9c:2d:7b:9e:ed:74:ee:20:53:48:f7:86:db:c8:fa:78:93:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: May 31 23:24:13 2024 GMT
            Not After : May 30 23:29:13 2025 GMT
        Subject: CN=352E281773C324C266A69116BEC7ADB79FB3183E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:dd:0e:53:a2:ea:04:d4:c9:29:dd:b8:b9:52:
                    15:87:71:69:25:6b:32:86:53:1b:06:87:92:7d:ea:
                    aa:34:bc:d7:0f:b8:c8:93:98:d6:53:76:fc:b0:62:
                    ed:ab:78:8c:84:e0:c1:e5:a0:1a:7b:cb:6a:96:d6:
                    f1:d9:95:bd:7e:5c:5b:1d:d2:0c:b4:11:51:9f:1d:
                    00:dd:be:a0:f5:e1:9e:24:9d:b9:aa:62:00:b9:43:
                    b7:fe:58:35:4f:0d:dc:09:06:db:6b:8c:62:ff:fe:
                    9b:1b:3d:90:19:41:03:4e:9c:b5:fe:3a:af:4a:7a:
                    03:f5:59:97:16:94:43:a5:59:6c:11:9e:b7:a4:af:
                    26:35:a4:71:70:18:10:83:44:c1:4c:20:20:e4:9a:
                    0d:e6:85:17:79:55:e0:1d:17:d2:00:99:ad:05:7e:
                    1e:8f:85:28:cb:34:3d:42:69:80:72:ab:11:e9:91:
                    a1:00:a0:8d:a9:af:6c:e0:ae:1c:a8:3b:3a:da:7a:
                    7d:a8:81:21:ef:09:40:99:87:fd:d4:b9:5c:ed:60:
                    38:88:28:d8:28:05:1a:89:f0:fa:4b:f2:49:04:35:
                    3d:d5:98:f7:d7:5f:ad:71:49:aa:72:35:80:77:c4:
                    9b:6a:f7:c2:9e:7c:b5:f3:2e:f8:71:50:9a:6a:f1:
                    cd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:2E:28:17:73:C3:24:C2:66:A6:91:16:BE:C7:AD:B7:9F:B3:18:3E
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3132342e3133302e302f32332d3233203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:e1:bf:5f:8e:3e:75:fc:13:3b:fa:ee:12:77:62:f0:77:c4:
         81:49:4e:e6:22:61:8b:07:23:c4:33:4a:86:8f:3e:9c:3a:87:
         b4:26:68:34:3c:e4:04:4d:c8:15:c6:37:61:61:bf:c4:73:40:
         7c:3e:4a:6b:9c:80:92:4e:62:5e:72:54:03:df:9a:65:7e:52:
         12:ea:ef:97:b4:fc:29:e9:17:11:af:ad:59:85:0c:c4:6a:38:
         fa:58:d8:e0:25:f2:3b:bf:7c:26:fe:27:72:d1:19:cc:06:90:
         a7:d2:65:e7:bf:73:9c:fb:fb:57:79:0a:4c:11:8d:35:71:b9:
         e3:c8:64:b7:57:a6:57:4b:a2:a0:51:f7:0f:07:58:ac:51:48:
         60:ad:d0:5a:81:00:10:f1:b5:f8:43:cf:ab:ed:f3:60:f3:f4:
         2f:11:04:9d:01:6e:13:4b:42:5f:9c:b7:3f:17:99:69:f6:d3:
         36:27:17:4c:fe:58:15:18:9d:85:69:b0:d9:98:0e:95:e5:c5:
         36:5a:2e:d8:d6:e3:35:ed:f3:c8:ac:fe:be:ee:f0:ed:22:d3:
         cb:d7:69:93:1e:7e:98:ce:55:e3:2f:ae:20:99:3c:1e:21:4c:
         4e:57:dd:3e:e5:7a:65:f1:0d:ac:d8:aa:b2:22:f5:ff:69:eb:
         1a:83:c7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:11:20 2024 by rpki-client on console-fra.rpki-client.org