Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132302e302f32332d3233203d3e20323633363132.roa
File:                     3137392e3138392e3132302e302f32332d3233203d3e20323633363132.roa (raw, json)
Hash identifier:          1ErGXLR5nsfDK55p4yaib8Fdu/N3I8pOv3m0oAAHJYQ=
Subject key identifier:   6A:9B:26:D9:73:A6:8F:03:FE:2E:F8:D2:50:80:EE:B3:BA:76:6C:6A
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       2BC3E4D816752D696C42DB0C1ED63561AB93D5FD
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132302e302f32332d3233203d3e20323633363132.roa
Signing time:             Fri 31 May 2024 23:30:09 +0000
ROA not before:           Fri 31 May 2024 23:25:09 +0000
ROA not after:            Fri 30 May 2025 23:30:09 +0000
asID:                     263612
IP address blocks:        179.189.120.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c3:e4:d8:16:75:2d:69:6c:42:db:0c:1e:d6:35:61:ab:93:d5:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: May 31 23:25:09 2024 GMT
            Not After : May 30 23:30:09 2025 GMT
        Subject: CN=6A9B26D973A68F03FE2EF8D25080EEB3BA766C6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ac:e1:cc:db:4c:da:4f:60:71:51:37:09:2f:
                    0f:4a:5a:c2:ed:a9:0c:49:2a:a2:6a:77:61:91:5a:
                    8c:ab:52:9a:c3:de:7e:f9:db:c7:55:f4:f9:2f:d9:
                    41:49:f1:2d:be:af:db:1f:e8:0e:65:30:95:a6:68:
                    b5:1a:66:4f:7d:34:e1:c3:4c:c0:92:88:ef:bf:ac:
                    ea:e4:27:c0:70:03:7a:22:f7:54:3b:6a:a2:8e:04:
                    24:8a:6f:18:a0:ac:3b:3b:e5:8e:47:81:71:fa:64:
                    81:57:3c:4f:c4:53:26:51:ef:7e:15:6c:7d:a9:f6:
                    82:83:03:aa:93:7c:3f:7d:48:e5:cd:b9:33:d5:ff:
                    21:0f:ad:3b:8a:8b:9d:37:67:7f:3d:14:c8:9c:dd:
                    fd:24:83:8b:da:19:bf:a6:f0:66:13:90:ec:e7:ec:
                    07:af:00:e4:d2:aa:ec:54:02:08:5f:45:09:da:e3:
                    77:5d:53:d4:f2:ee:4e:ec:0b:35:f1:b7:3c:9e:9a:
                    10:5c:9e:48:47:b8:1a:22:cb:33:dc:cd:4d:0c:28:
                    20:e7:97:4a:db:ba:07:a0:c6:d0:08:b3:2c:ef:60:
                    7d:d7:79:2a:e0:d0:ef:73:bf:ec:4a:3c:2d:37:29:
                    b6:40:8a:dd:fe:9a:5c:32:19:8e:39:97:bf:6e:19:
                    9d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9B:26:D9:73:A6:8F:03:FE:2E:F8:D2:50:80:EE:B3:BA:76:6C:6A
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132302e302f32332d3233203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:ba:f6:d3:bb:55:fe:d1:a6:f9:4f:33:88:97:81:20:7e:6f:
         61:c2:ea:7b:3d:b6:f2:b0:28:02:29:2f:19:12:55:43:e1:39:
         55:9f:5b:ff:59:04:f9:9b:d8:cc:a2:2f:ef:50:a6:bd:b5:af:
         37:e2:4d:fd:10:ee:59:de:3f:6b:9b:b4:98:86:e6:e7:11:33:
         bc:48:b8:9b:52:a4:0e:ad:0a:bf:4f:11:eb:fa:14:b3:aa:20:
         5e:8a:ec:e6:3b:62:bf:1a:94:47:41:bf:c2:c3:e5:54:18:e0:
         24:e5:eb:38:8f:c7:e5:25:b1:51:69:1b:af:37:92:78:d3:63:
         3f:4b:c7:0b:b1:18:3d:ff:91:29:fd:87:d2:b1:f3:a5:24:a2:
         bc:05:b1:c1:37:6c:df:4a:f6:40:5b:5b:0e:1f:41:ab:9c:ce:
         46:ee:51:fc:4a:62:22:fc:da:09:5a:40:40:26:f3:98:cf:eb:
         a3:c3:07:5e:74:95:22:39:4e:48:34:0a:d2:9f:a9:44:1f:fb:
         a7:b0:dd:75:17:c4:91:cc:95:23:bc:05:3c:cd:27:85:9e:b7:
         e4:bd:2b:b3:e7:67:a1:6f:f1:00:38:93:0b:7e:06:47:64:5d:
         c4:78:05:e0:5f:bf:b1:0a:cb:59:4d:b4:bb:e5:3f:8d:dc:c9:
         f8:54:3c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:11:20 2024 by rpki-client on console-fra.rpki-client.org