Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131362e302f32342d3234203d3e20323633363132.roa
File:                     3137392e3138392e3131362e302f32342d3234203d3e20323633363132.roa (raw, json)
Hash identifier:          WEJontMFi71IG0UAFhoE+MQ9smgIXCO0hPXrmGgg0ns=
Subject key identifier:   CC:B2:EF:41:4A:1E:02:0B:9C:20:FF:FA:43:5C:B5:26:C4:4E:34:26
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       22F2E4339A0EB13DFF73AE5963EC210AF9AC7916
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131362e302f32342d3234203d3e20323633363132.roa
Signing time:             Fri 31 May 2024 23:29:47 +0000
ROA not before:           Fri 31 May 2024 23:24:47 +0000
ROA not after:            Fri 30 May 2025 23:29:47 +0000
asID:                     263612
IP address blocks:        179.189.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f2:e4:33:9a:0e:b1:3d:ff:73:ae:59:63:ec:21:0a:f9:ac:79:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: May 31 23:24:47 2024 GMT
            Not After : May 30 23:29:47 2025 GMT
        Subject: CN=CCB2EF414A1E020B9C20FFFA435CB526C44E3426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cd:2e:4a:c9:ce:79:e1:16:f6:a2:63:cb:cd:
                    8c:cf:75:8a:c6:d4:8a:9d:80:5b:3b:d6:91:15:64:
                    40:83:fd:68:aa:cf:d1:6b:08:49:a7:20:65:21:d6:
                    42:12:d9:1d:36:66:8c:25:04:f4:87:49:ba:9a:97:
                    82:77:5c:fd:47:d7:d8:e8:fa:3d:ff:c8:ac:01:93:
                    d8:7c:0f:fc:bb:48:fa:a1:75:7c:8f:6e:38:c7:3d:
                    11:6b:91:f5:c8:4f:b1:ee:e1:85:83:a1:b5:c7:eb:
                    b3:cf:63:8e:e8:68:a5:4b:2b:d7:ab:0c:d9:87:96:
                    18:e8:5b:9a:90:69:2d:52:5a:55:75:20:9a:00:08:
                    58:30:d1:69:94:83:7f:9d:4c:90:12:c7:cf:dc:6f:
                    26:88:e8:06:21:cc:90:59:97:e6:db:ba:17:2f:8b:
                    d6:df:5c:b9:f2:79:10:49:ad:23:15:2d:22:6e:dc:
                    d4:cf:1f:28:db:95:20:18:6a:37:b7:29:d3:53:33:
                    45:a8:7e:c8:01:a0:63:c6:72:9a:8f:4c:23:93:17:
                    2c:49:60:94:d0:c0:2c:c4:23:3a:a0:48:f9:d1:0e:
                    45:6a:d6:4b:bd:37:30:5a:66:14:e7:9b:12:7a:c8:
                    e3:b3:c3:20:f4:bb:5c:47:2e:71:6c:cf:05:04:cc:
                    ce:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B2:EF:41:4A:1E:02:0B:9C:20:FF:FA:43:5C:B5:26:C4:4E:34:26
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131362e302f32342d3234203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:24:53:4d:67:47:d6:c6:ca:e2:a4:38:e4:e5:51:c0:f8:bc:
         99:09:9e:1c:5e:b8:85:88:77:2a:22:9f:2a:cc:38:76:08:67:
         8b:c7:ac:fb:82:96:35:d7:bb:08:68:fd:a4:83:d0:8c:9d:2d:
         7c:98:a6:87:40:e5:4c:d6:e8:46:77:66:0c:e8:8c:82:d7:aa:
         e7:29:42:b0:3d:ff:74:a1:eb:36:64:8e:79:44:21:6f:80:d0:
         5c:5d:58:c1:87:fe:7e:0d:e1:9e:4c:3b:4e:bd:e8:2e:65:ef:
         af:07:22:f7:77:57:61:0f:fc:b7:60:7d:65:8a:5c:7f:f8:28:
         c4:e4:a2:95:49:8f:6a:30:1d:4d:d3:96:49:88:3c:20:d6:d0:
         76:54:13:79:31:98:25:c7:1c:13:28:ce:5b:b7:ed:95:ab:2e:
         e6:7c:9f:dc:32:26:cf:93:a0:a2:33:41:ea:6a:aa:0b:67:0f:
         78:06:75:7c:0e:89:77:4b:c5:e5:47:a1:56:04:71:79:22:d7:
         df:b7:d9:59:86:93:56:a2:57:62:64:0f:16:b2:a5:c9:68:00:
         76:fb:4e:1a:68:60:29:b2:f8:e3:68:e6:6b:e4:55:c0:07:b8:
         b7:9d:8f:0f:bd:98:47:6f:98:2e:bd:5f:cc:79:6f:98:5a:cd:
         44:37:94:0c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUIvLkM5oOsT3/c65ZY+whCvmseRYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc4QkUzRENBRTJFRUI0ODk1Q0YxNjRFMURDM0JCQTM2
MDIzQTlBMTAeFw0yNDA1MzEyMzI0NDdaFw0yNTA1MzAyMzI5NDdaMDMxMTAvBgNV
BAMTKENDQjJFRjQxNEExRTAyMEI5QzIwRkZGQTQzNUNCNTI2QzQ0RTM0MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCozS5Kyc554Rb2omPLzYzPdYrG
1IqdgFs71pEVZECD/Wiqz9FrCEmnIGUh1kIS2R02ZowlBPSHSbqal4J3XP1H19jo
+j3/yKwBk9h8D/y7SPqhdXyPbjjHPRFrkfXIT7Hu4YWDobXH67PPY47oaKVLK9er
DNmHlhjoW5qQaS1SWlV1IJoACFgw0WmUg3+dTJASx8/cbyaI6AYhzJBZl+bbuhcv
i9bfXLnyeRBJrSMVLSJu3NTPHyjblSAYaje3KdNTM0WofsgBoGPGcpqPTCOTFyxJ
YJTQwCzEIzqgSPnRDkVq1ku9NzBaZhTnmxJ6yOOzwyD0u1xHLnFszwUEzM7vAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUzLLvQUoeAgucIP/6Q1y1JsRONCYwHwYDVR0j
BBgwFoAU54vj3K4u60iVzxZOHcO7o2AjqaEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHF4ZWFYd3htdlRkckJ3MkZVaDI1TTc5OEdTMkdzRVY2Z1JIYzZRZDI0
WEMvMC9FNzhCRTNEQ0FFMkVFQjQ4OTVDRjE2NEUxREMzQkJBMzYwMjNBOUExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3OEJFM0RDQUUyRUVCNDg5
NUNGMTY0RTFEQzNCQkEzNjAyM0E5QTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hxeGVhWHd4bXZUZHJCdzJGVWgyNU03OThHUzJHc0VWNmdSSGM2UWQyNFhDLzAv
MzEzNzM5MmUzMTM4MzkyZTMxMzEzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM2MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALO9dDANBgkqhkiG9w0BAQsFAAOCAQEAaCRT
TWdH1sbK4qQ45OVRwPi8mQmeHF64hYh3KiKfKsw4dghni8es+4KWNde7CGj9pIPQ
jJ0tfJimh0DlTNboRndmDOiMgteq5ylCsD3/dKHrNmSOeUQhb4DQXF1YwYf+fg3h
nkw7Tr3oLmXvrwci93dXYQ/8t2B9ZYpcf/goxOSilUmPajAdTdOWSYg8INbQdlQT
eTGYJcccEyjOW7ftlasu5nyf3DImz5OgojNB6mqqC2cPeAZ1fA6Jd0vF5UehVgRx
eSLX37fZWYaTVqJXYmQPFrKlyWgAdvtOGmhgKbL442jma+RVwAe4t52PD72YR2+Y
Lr1fzHlvmFrNRDeUDA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:11:20 2024 by rpki-client on console-fra.rpki-client.org