Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131342e302f32342d3234203d3e20323633363132.roa
File:                     3137392e3138392e3131342e302f32342d3234203d3e20323633363132.roa (raw, json)
Hash identifier:          11ETiH6swqVw/b2A/U2dmJOl1lQuSrpbiNzKJGCyV5U=
Subject key identifier:   DB:EF:D9:DE:B8:00:E3:56:63:E6:00:30:85:39:A8:E3:B9:96:7D:57
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       176898B40A02C97CE436B63FAECD4AB328F1C598
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131342e302f32342d3234203d3e20323633363132.roa
Signing time:             Fri 31 May 2024 23:29:39 +0000
ROA not before:           Fri 31 May 2024 23:24:39 +0000
ROA not after:            Fri 30 May 2025 23:29:39 +0000
asID:                     263612
IP address blocks:        179.189.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:68:98:b4:0a:02:c9:7c:e4:36:b6:3f:ae:cd:4a:b3:28:f1:c5:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: May 31 23:24:39 2024 GMT
            Not After : May 30 23:29:39 2025 GMT
        Subject: CN=DBEFD9DEB800E35663E600308539A8E3B9967D57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:37:8d:1d:85:79:69:82:b1:5a:14:60:7d:bc:
                    0d:9f:fa:f0:0c:f9:09:d3:a4:5a:4d:41:69:8f:ef:
                    ec:72:d5:b0:cb:0b:b5:ee:a5:68:62:12:f0:b6:1a:
                    30:54:85:1b:63:7c:ff:ea:73:3e:25:18:b0:4b:a5:
                    37:c0:58:50:40:57:02:28:43:30:a3:b6:05:3e:49:
                    e5:fa:13:12:e0:37:7b:21:90:20:2b:08:11:01:46:
                    00:71:cd:30:76:31:62:06:ce:ae:67:6b:ca:23:0a:
                    fa:c2:27:db:bb:bd:5b:e4:53:d2:3f:6c:3a:12:d7:
                    62:69:5d:2f:22:30:8d:39:ef:24:e9:e1:d9:42:aa:
                    4e:15:d9:73:8e:8c:97:a6:3e:f5:ee:d5:c4:32:91:
                    4f:8e:3b:83:4d:2e:56:e8:e7:69:75:b6:92:af:95:
                    66:5a:b7:95:27:46:86:09:47:80:89:34:37:cf:6a:
                    95:25:1f:c6:8a:a7:df:1b:b6:a7:c8:d2:fa:ef:78:
                    bc:e0:8f:2b:51:65:fb:ae:7a:4c:45:a3:66:b7:d1:
                    e8:b3:03:37:45:5f:45:fa:1c:8a:ee:89:ba:68:29:
                    46:67:71:da:f7:1b:3b:08:a5:85:d4:ab:d3:dc:bf:
                    ef:64:69:0e:64:86:08:29:91:e5:03:c7:9e:2e:aa:
                    81:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:EF:D9:DE:B8:00:E3:56:63:E6:00:30:85:39:A8:E3:B9:96:7D:57
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131342e302f32342d3234203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:e8:d4:c1:7f:fe:29:12:39:ee:70:1e:99:6c:3f:01:36:ae:
         1f:77:36:94:5e:9c:bf:d0:2d:64:af:28:35:93:69:93:87:a3:
         8a:56:8c:98:41:ea:fe:8b:f6:fa:e3:85:b2:b4:63:9e:e8:6d:
         5e:8e:47:7e:d8:87:13:9a:5e:86:eb:b8:fa:57:6f:49:ce:59:
         7a:07:b6:de:74:a6:d5:05:74:f5:aa:6a:1d:c1:7b:48:51:17:
         61:a3:49:c0:4c:35:54:61:98:8a:79:60:39:55:4e:49:93:e8:
         f0:36:2d:65:10:93:00:28:55:bd:51:a0:b6:24:0b:e6:32:e7:
         8e:20:a4:5b:87:df:6c:87:b0:13:f7:f3:4a:ca:86:b5:15:df:
         d4:31:25:c6:e6:fe:2d:ca:fb:9a:e1:b3:0e:1b:d7:c2:ff:76:
         f5:c9:92:67:0c:02:f5:6a:7c:da:6d:6a:ee:b1:92:8e:10:1e:
         6c:c1:bc:74:56:cc:92:76:2d:74:d6:1f:31:0a:80:80:57:65:
         44:8b:e3:32:5d:e5:63:d1:f9:65:1d:34:f4:ea:74:b3:0d:07:
         63:37:d7:38:56:af:64:95:dd:43:bc:16:0e:ad:ba:1e:79:be:
         40:ae:b7:7c:bc:a3:1b:78:d6:5c:f0:59:e9:b5:19:f5:a7:bc:
         28:a2:da:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:11:20 2024 by rpki-client on console-fra.rpki-client.org