Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131322e302f32332d3233203d3e20323633363132.roa
File:                     3137392e3138392e3131322e302f32332d3233203d3e20323633363132.roa (raw, json)
Hash identifier:          CnLxkbMs8rrMxCFVVdxHy1Oo2GFLw6EFCu2367jhY7I=
Subject key identifier:   38:8A:29:0D:BE:96:25:58:CB:C2:5B:EE:7F:F3:55:58:41:90:DC:0A
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       650519E0D6134ADF93052BEB556FD0AC5F29B30B
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131322e302f32332d3233203d3e20323633363132.roa
Signing time:             Fri 31 May 2024 23:29:28 +0000
ROA not before:           Fri 31 May 2024 23:24:28 +0000
ROA not after:            Fri 30 May 2025 23:29:28 +0000
asID:                     263612
IP address blocks:        179.189.112.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:05:19:e0:d6:13:4a:df:93:05:2b:eb:55:6f:d0:ac:5f:29:b3:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: May 31 23:24:28 2024 GMT
            Not After : May 30 23:29:28 2025 GMT
        Subject: CN=388A290DBE962558CBC25BEE7FF355584190DC0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:25:5a:e0:2b:0a:74:3f:30:d8:bd:a8:37:b2:
                    6a:ce:68:db:9a:f0:fa:57:a0:15:7a:a2:e1:d7:48:
                    6e:ab:22:d3:2d:38:96:d3:0f:e2:ca:ca:f1:3b:e7:
                    02:33:0d:71:47:33:1c:1a:08:4a:23:5a:05:0e:e9:
                    f9:82:b6:8c:45:93:69:dc:d4:4c:92:b5:86:ea:48:
                    22:84:14:11:21:18:d8:82:54:6a:76:c7:cc:52:b1:
                    7e:0e:45:35:d8:45:d2:ac:8a:8d:f4:8e:b1:cc:01:
                    86:46:61:2b:70:a5:b0:70:7d:70:9f:b4:e6:1c:07:
                    20:fe:bc:70:7a:61:52:3a:c9:36:70:fb:9d:3f:4c:
                    65:91:b7:ae:9e:06:6b:7b:0a:07:25:5d:a2:a1:64:
                    94:04:fd:17:99:6e:db:2a:35:d0:f6:43:44:e3:93:
                    02:7b:89:9a:44:1f:9a:38:76:27:80:44:b8:3a:b4:
                    44:6d:ca:77:17:67:5f:6a:14:6e:87:86:12:3f:93:
                    85:c8:5a:93:8f:a4:3b:d2:a2:0f:59:80:e3:6a:1e:
                    bf:80:df:4a:a4:ff:14:a3:ca:b2:ec:e5:7e:26:3e:
                    8e:bb:a7:f5:aa:a9:da:ca:de:17:8a:26:d5:ff:6d:
                    77:5c:0b:34:66:41:0a:03:07:15:14:a3:9e:fe:18:
                    2e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8A:29:0D:BE:96:25:58:CB:C2:5B:EE:7F:F3:55:58:41:90:DC:0A
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131322e302f32332d3233203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:7e:3f:f0:5e:ed:7f:c9:06:a5:a2:e0:ad:3b:3b:0e:ee:10:
         19:0e:1c:18:a1:0e:88:c2:7f:7a:31:61:78:2f:cd:32:2e:4b:
         ea:31:74:25:40:65:b3:67:05:ed:d6:d5:01:e9:9e:f7:e6:98:
         61:80:93:7e:df:e8:c9:47:b7:68:aa:ef:13:cb:c9:8c:dc:15:
         f3:71:dc:be:b6:91:01:8b:7b:11:cd:58:cf:ed:64:25:07:69:
         26:fa:f8:3e:97:5c:20:5a:f8:4b:13:f5:8c:87:3a:95:f5:db:
         73:d1:ea:80:0d:c5:14:48:2e:45:0d:ca:f3:42:36:48:41:1c:
         a1:a3:4b:84:0b:5f:d3:ad:06:db:a3:8e:37:22:c2:26:b1:c2:
         98:02:94:9b:25:4d:60:ee:3f:87:81:87:47:9e:e5:e9:85:70:
         f7:ba:ed:36:08:c4:2a:98:99:a0:43:a5:5d:0b:29:94:aa:c9:
         e6:cd:9f:19:4c:23:43:e2:c2:36:32:2d:6e:58:9e:8b:cb:30:
         61:bc:2b:28:b5:eb:54:48:4a:a2:80:4e:10:15:4b:d8:58:59:
         73:14:1c:f8:52:7d:22:5c:3a:86:24:b7:6b:0d:73:fc:8d:6e:
         49:89:a3:20:6f:ff:12:00:a5:6c:b3:54:a4:42:f3:05:40:8c:
         28:0a:35:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:30 2024 by rpki-client on console-ams.rpki-client.org