Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131372e302f32342d3234203d3e20323633363132.roa
File:                     3137392e3138392e3131372e302f32342d3234203d3e20323633363132.roa (raw, json)
Hash identifier:          gZseasVv3BaF7YWd+jtL+qGs5rtcAi7LeXw1XAsbwQ4=
Subject key identifier:   1F:A1:1C:B5:D9:9B:A1:89:CF:8C:D8:88:E8:80:FA:C9:F2:17:88:55
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       6FAC82722A4F99446A95360E096E96896B8F7D10
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131372e302f32342d3234203d3e20323633363132.roa
Signing time:             Fri 31 May 2024 23:29:50 +0000
ROA not before:           Fri 31 May 2024 23:24:50 +0000
ROA not after:            Fri 30 May 2025 23:29:50 +0000
asID:                     263612
IP address blocks:        179.189.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ac:82:72:2a:4f:99:44:6a:95:36:0e:09:6e:96:89:6b:8f:7d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: May 31 23:24:50 2024 GMT
            Not After : May 30 23:29:50 2025 GMT
        Subject: CN=1FA11CB5D99BA189CF8CD888E880FAC9F2178855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f4:f1:30:49:49:f6:42:eb:51:de:81:21:16:
                    12:75:19:2b:99:0e:49:b0:60:d0:ee:5e:86:82:4d:
                    bb:4d:fe:82:87:d2:42:c5:f9:a6:ce:9c:6f:23:ed:
                    14:85:82:05:47:48:9d:c5:4e:c1:ef:91:0d:ca:98:
                    3a:3e:1d:09:1d:bf:c8:66:ae:6d:b6:7f:34:a6:de:
                    e0:a7:f7:7e:1f:a8:7b:5f:0d:5b:13:41:e8:8d:b4:
                    bd:3d:88:47:fb:81:39:71:cb:2a:e8:59:cd:29:2d:
                    5a:bc:1e:01:62:c3:d3:a9:f4:4f:94:e4:cf:88:7a:
                    5c:8c:45:bd:bb:05:5c:05:19:65:06:fc:2f:17:5f:
                    74:c0:53:83:85:8e:b2:7a:ed:28:e4:09:14:74:26:
                    b1:49:78:57:9e:a1:90:c5:ab:7f:fc:e7:0f:4e:3f:
                    18:8a:82:b2:2c:16:bb:df:04:7b:4e:80:75:d1:05:
                    0a:ec:be:cb:12:c0:58:55:a1:83:b0:d4:cd:c3:4b:
                    3e:d4:83:f7:f3:55:27:d5:61:da:f2:8f:fc:eb:44:
                    1f:fd:fe:48:43:71:8d:27:ea:76:35:fd:19:09:e9:
                    2e:21:b5:78:1c:9b:24:02:34:8a:65:b2:19:8d:5f:
                    5b:e8:cf:0c:b0:5b:12:f1:14:74:3a:92:6f:f9:6b:
                    30:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A1:1C:B5:D9:9B:A1:89:CF:8C:D8:88:E8:80:FA:C9:F2:17:88:55
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131372e302f32342d3234203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:4f:b4:53:d1:57:ac:29:85:ea:67:8c:26:6d:7d:45:1a:40:
         ad:91:28:5e:12:b3:32:dd:98:98:ef:71:6e:75:08:a2:51:92:
         06:94:d4:ae:b5:d6:88:16:ed:03:21:64:eb:d4:cd:79:c2:f1:
         92:81:31:6a:c8:ca:6b:3d:98:0b:31:d0:5c:60:cc:10:77:93:
         36:df:00:f0:48:b8:67:0b:a6:a4:04:13:5a:58:16:8e:cc:98:
         b6:90:2b:05:c5:ba:87:93:e5:02:74:52:d5:1e:8d:eb:52:ba:
         c4:52:82:44:50:c1:5d:45:a9:9b:71:ac:9d:08:a3:92:f7:f1:
         a8:51:bf:b8:2a:e9:51:26:2f:42:6f:78:54:af:ae:64:5f:01:
         63:a2:aa:dc:43:0e:8f:f3:7c:ab:f0:67:bc:af:bb:e7:4b:3a:
         b7:42:1d:f8:65:25:2a:cb:14:a6:28:dc:ba:e6:7c:6f:16:97:
         47:d7:65:dc:5f:7f:c8:42:3a:e1:89:ce:a8:20:06:8f:f1:9d:
         9b:7f:fb:0f:13:b7:98:ad:8a:ee:55:a2:fc:47:08:01:70:2b:
         89:64:15:28:d8:7a:d6:4f:0d:b6:2a:4c:47:a2:01:c3:4e:ec:
         00:56:31:d2:e2:6e:18:83:fd:f5:e1:8d:89:ea:79:49:62:b9:
         4a:40:e6:17
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUb6yCcipPmURqlTYOCW6WiWuPfRAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc4QkUzRENBRTJFRUI0ODk1Q0YxNjRFMURDM0JCQTM2
MDIzQTlBMTAeFw0yNDA1MzEyMzI0NTBaFw0yNTA1MzAyMzI5NTBaMDMxMTAvBgNV
BAMTKDFGQTExQ0I1RDk5QkExODlDRjhDRDg4OEU4ODBGQUM5RjIxNzg4NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb9PEwSUn2QutR3oEhFhJ1GSuZ
DkmwYNDuXoaCTbtN/oKH0kLF+abOnG8j7RSFggVHSJ3FTsHvkQ3KmDo+HQkdv8hm
rm22fzSm3uCn934fqHtfDVsTQeiNtL09iEf7gTlxyyroWc0pLVq8HgFiw9Op9E+U
5M+IelyMRb27BVwFGWUG/C8XX3TAU4OFjrJ67SjkCRR0JrFJeFeeoZDFq3/85w9O
PxiKgrIsFrvfBHtOgHXRBQrsvssSwFhVoYOw1M3DSz7Ug/fzVSfVYdryj/zrRB/9
/khDcY0n6nY1/RkJ6S4htXgcmyQCNIplshmNX1vozwywWxLxFHQ6km/5azBHAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUH6EctdmboYnPjNiI6ID6yfIXiFUwHwYDVR0j
BBgwFoAU54vj3K4u60iVzxZOHcO7o2AjqaEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHF4ZWFYd3htdlRkckJ3MkZVaDI1TTc5OEdTMkdzRVY2Z1JIYzZRZDI0
WEMvMC9FNzhCRTNEQ0FFMkVFQjQ4OTVDRjE2NEUxREMzQkJBMzYwMjNBOUExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3OEJFM0RDQUUyRUVCNDg5
NUNGMTY0RTFEQzNCQkEzNjAyM0E5QTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hxeGVhWHd4bXZUZHJCdzJGVWgyNU03OThHUzJHc0VWNmdSSGM2UWQyNFhDLzAv
MzEzNzM5MmUzMTM4MzkyZTMxMzEzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM2MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALO9dTANBgkqhkiG9w0BAQsFAAOCAQEAqE+0
U9FXrCmF6meMJm19RRpArZEoXhKzMt2YmO9xbnUIolGSBpTUrrXWiBbtAyFk69TN
ecLxkoExasjKaz2YCzHQXGDMEHeTNt8A8Ei4ZwumpAQTWlgWjsyYtpArBcW6h5Pl
AnRS1R6N61K6xFKCRFDBXUWpm3GsnQijkvfxqFG/uCrpUSYvQm94VK+uZF8BY6Kq
3EMOj/N8q/BnvK+750s6t0Id+GUlKssUpijcuuZ8bxaXR9dl3F9/yEI64YnOqCAG
j/Gdm3/7DxO3mK2K7lWi/EcIAXAriWQVKNh61k8NtipMR6IBw07sAFYx0uJuGIP9
9eGNiep5SWK5SkDmFw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:30 2024 by rpki-client on console-ams.rpki-client.org