Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131322e302f32342d3234203d3e20323633363132.roa
File:                     3137392e3138392e3131322e302f32342d3234203d3e20323633363132.roa (raw, json)
Hash identifier:          Dj6Wu0ksi2I/p44o0oHb18+mE1Ca+UPyNbzkG9ESbSc=
Subject key identifier:   BA:E5:9E:5E:2B:09:EB:0B:0F:11:5A:64:31:F1:DB:FC:94:55:66:77
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       45D624D6D3AF6E812F5334350D54A444FA4B5EC6
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131322e302f32342d3234203d3e20323633363132.roa
Signing time:             Fri 31 May 2024 23:29:31 +0000
ROA not before:           Fri 31 May 2024 23:24:31 +0000
ROA not after:            Fri 30 May 2025 23:29:31 +0000
asID:                     263612
IP address blocks:        179.189.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d6:24:d6:d3:af:6e:81:2f:53:34:35:0d:54:a4:44:fa:4b:5e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: May 31 23:24:31 2024 GMT
            Not After : May 30 23:29:31 2025 GMT
        Subject: CN=BAE59E5E2B09EB0B0F115A6431F1DBFC94556677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1c:ff:19:a7:99:07:b5:0f:c2:ca:9f:81:d1:
                    c4:c2:b1:22:25:73:c7:c0:f0:f4:6c:66:36:c5:c3:
                    80:27:92:60:0d:c9:b3:20:0a:f6:9a:31:14:58:2b:
                    8a:f7:21:60:4d:21:f0:f4:2e:40:a5:e2:15:4a:ec:
                    e0:62:4f:ac:12:c4:8b:87:c8:77:2d:9b:9d:d4:63:
                    0a:43:46:a5:75:1d:fc:26:0c:21:40:87:6e:e2:b0:
                    4b:fa:ae:40:22:08:5d:ab:c8:98:a2:af:e1:ef:03:
                    65:00:dc:a6:74:df:1e:4b:3d:4e:15:fd:3a:93:89:
                    c6:47:72:90:c2:ef:eb:30:eb:c8:90:55:d9:29:0b:
                    a3:67:1c:c3:ba:d4:d4:ff:fd:84:75:52:79:b8:61:
                    57:48:4e:72:64:1d:39:ff:f6:1c:8d:a6:44:59:f8:
                    29:69:1e:36:42:61:5b:40:6e:ba:a3:a6:4a:da:e1:
                    8f:c7:e7:db:fb:4b:a1:94:a7:20:7d:6f:bc:d6:41:
                    8e:b3:59:1f:d8:fd:6a:ee:0b:51:a8:cd:1d:0c:79:
                    03:59:2a:49:30:41:b7:3c:f3:26:22:a3:57:f4:a5:
                    51:e0:a2:ac:90:0e:2f:68:3a:89:55:4e:0b:92:2d:
                    d9:0d:e8:ac:5d:7f:1e:21:19:65:80:db:da:17:52:
                    ee:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E5:9E:5E:2B:09:EB:0B:0F:11:5A:64:31:F1:DB:FC:94:55:66:77
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131322e302f32342d3234203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:bc:cb:17:5c:ce:da:d6:a7:1b:9f:76:85:eb:11:8f:8d:be:
         6f:fc:8b:05:0a:08:de:83:1c:d8:e4:ab:3f:ba:77:3f:e1:ba:
         87:09:0b:a9:ed:c3:ca:0d:42:83:e2:e1:33:53:e9:d1:9d:f0:
         cb:77:ab:d3:b0:90:06:90:83:28:61:5e:1a:eb:be:1c:1a:fe:
         3c:8e:f1:85:c3:59:f7:b3:67:5e:9e:f3:7e:14:96:2e:92:83:
         3e:e3:be:1a:57:3f:f8:07:e5:5a:02:8a:a3:c4:45:e0:aa:0d:
         1c:2f:4b:1c:72:8f:61:1f:4b:fc:e3:ef:7c:7f:95:5d:1a:14:
         c9:e8:75:0a:5b:b3:18:08:85:25:4a:00:9e:e2:f2:d1:8f:98:
         61:d9:05:bb:0e:19:47:93:5e:ba:9f:03:12:e3:75:b4:bb:73:
         3c:4f:96:db:82:bd:b9:bc:f1:2f:7a:18:cc:ca:dd:f9:10:d2:
         e0:f3:de:96:63:ec:db:a9:ed:03:cd:96:e8:0b:7c:31:d8:0e:
         27:43:41:d0:ce:d0:e2:5a:35:7d:80:e6:d4:98:44:90:ac:6f:
         6d:b7:19:ea:8c:58:b9:f6:cd:e9:2f:ff:d7:48:e8:b6:87:f6:
         3c:30:e9:73:b0:4b:fb:03:fd:6a:0b:38:fd:46:9b:16:5d:c0:
         e1:2d:d6:d8
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIURdYk1tOvboEvUzQ1DVSkRPpLXsYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc4QkUzRENBRTJFRUI0ODk1Q0YxNjRFMURDM0JCQTM2
MDIzQTlBMTAeFw0yNDA1MzEyMzI0MzFaFw0yNTA1MzAyMzI5MzFaMDMxMTAvBgNV
BAMTKEJBRTU5RTVFMkIwOUVCMEIwRjExNUE2NDMxRjFEQkZDOTQ1NTY2NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2HP8Zp5kHtQ/Cyp+B0cTCsSIl
c8fA8PRsZjbFw4AnkmANybMgCvaaMRRYK4r3IWBNIfD0LkCl4hVK7OBiT6wSxIuH
yHctm53UYwpDRqV1HfwmDCFAh27isEv6rkAiCF2ryJiir+HvA2UA3KZ03x5LPU4V
/TqTicZHcpDC7+sw68iQVdkpC6NnHMO61NT//YR1Unm4YVdITnJkHTn/9hyNpkRZ
+ClpHjZCYVtAbrqjpkra4Y/H59v7S6GUpyB9b7zWQY6zWR/Y/WruC1GozR0MeQNZ
KkkwQbc88yYio1f0pVHgoqyQDi9oOolVTguSLdkN6Kxdfx4hGWWA29oXUu4LAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUuuWeXisJ6wsPEVpkMfHb/JRVZncwHwYDVR0j
BBgwFoAU54vj3K4u60iVzxZOHcO7o2AjqaEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHF4ZWFYd3htdlRkckJ3MkZVaDI1TTc5OEdTMkdzRVY2Z1JIYzZRZDI0
WEMvMC9FNzhCRTNEQ0FFMkVFQjQ4OTVDRjE2NEUxREMzQkJBMzYwMjNBOUExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3OEJFM0RDQUUyRUVCNDg5
NUNGMTY0RTFEQzNCQkEzNjAyM0E5QTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hxeGVhWHd4bXZUZHJCdzJGVWgyNU03OThHUzJHc0VWNmdSSGM2UWQyNFhDLzAv
MzEzNzM5MmUzMTM4MzkyZTMxMzEzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM2MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALO9cDANBgkqhkiG9w0BAQsFAAOCAQEAI7zL
F1zO2tanG592hesRj42+b/yLBQoI3oMc2OSrP7p3P+G6hwkLqe3Dyg1Cg+LhM1Pp
0Z3wy3er07CQBpCDKGFeGuu+HBr+PI7xhcNZ97NnXp7zfhSWLpKDPuO+Glc/+Afl
WgKKo8RF4KoNHC9LHHKPYR9L/OPvfH+VXRoUyeh1CluzGAiFJUoAnuLy0Y+YYdkF
uw4ZR5Neup8DEuN1tLtzPE+W24K9ubzxL3oYzMrd+RDS4PPelmPs26ntA82W6At8
MdgOJ0NB0M7Q4lo1fYDm1JhEkKxvbbcZ6oxYufbN6S//10jotof2PDDpc7BL+wP9
ags4/UabFl3A4S3W2A==
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:11:20 2024 by rpki-client on console-fra.rpki-client.org