Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132302e302f32342d3234203d3e20323633363132.roa
File:                     3137392e3138392e3132302e302f32342d3234203d3e20323633363132.roa (raw, json)
Hash identifier:          5fXwJ/gdBv1wzc03S+3ueqgDEMiN1hpdC4wWR2RgK/w=
Subject key identifier:   7E:69:5A:8F:FE:64:39:5E:5F:EE:01:B2:FA:05:88:4D:7B:75:02:20
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       657EE74BC48BEC3218D32EC74B1EE9BA0A16B61E
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132302e302f32342d3234203d3e20323633363132.roa
Signing time:             Fri 31 May 2024 23:30:16 +0000
ROA not before:           Fri 31 May 2024 23:25:16 +0000
ROA not after:            Fri 30 May 2025 23:30:16 +0000
asID:                     263612
IP address blocks:        179.189.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:7e:e7:4b:c4:8b:ec:32:18:d3:2e:c7:4b:1e:e9:ba:0a:16:b6:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: May 31 23:25:16 2024 GMT
            Not After : May 30 23:30:16 2025 GMT
        Subject: CN=7E695A8FFE64395E5FEE01B2FA05884D7B750220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8a:90:da:fd:94:fd:e2:d9:d5:b6:bb:82:53:
                    48:b6:f4:23:f5:39:44:97:97:18:ea:1f:9f:32:ea:
                    92:7b:36:56:9b:1f:ca:77:de:09:9d:02:8c:b4:5c:
                    6b:66:59:44:6d:9b:28:de:c2:e8:32:12:48:e1:3f:
                    3b:6e:70:73:55:4d:46:2e:4a:68:f4:d6:f2:0a:4c:
                    f6:9e:82:01:27:e3:b3:c0:8b:67:ff:77:be:be:3e:
                    8e:33:07:c5:aa:f0:e4:0a:a3:df:cd:ea:ff:8d:a1:
                    62:45:31:ae:81:03:70:b4:46:65:17:89:cb:e5:11:
                    c4:a5:76:f5:88:73:d1:2f:af:ac:63:5e:b5:42:8b:
                    27:2d:a4:d4:8b:74:a0:c2:ae:f7:a3:3a:2f:d1:b8:
                    02:6b:ae:67:18:aa:02:6a:c1:dd:6c:ec:26:c2:46:
                    d0:03:c0:40:ea:7c:57:c5:9f:ab:bb:ba:d6:3a:6e:
                    ee:35:8f:8f:a6:85:0f:11:78:9a:07:21:59:94:85:
                    22:5f:53:e6:6f:c3:1b:91:be:3c:8a:38:01:56:7c:
                    5a:4e:aa:35:e9:ef:6d:03:fb:e2:06:a0:7d:3c:6e:
                    30:4c:ba:20:dd:14:a0:ea:5f:9c:1a:51:43:aa:88:
                    d4:97:10:7d:31:2f:53:94:60:c3:49:7c:32:72:5e:
                    94:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:69:5A:8F:FE:64:39:5E:5F:EE:01:B2:FA:05:88:4D:7B:75:02:20
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132302e302f32342d3234203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:f4:be:93:9e:75:c9:76:54:91:a6:5a:6f:3f:ec:e6:68:06:
         85:71:4c:52:b8:8b:9d:37:b4:60:92:fe:63:24:7b:8e:4f:e7:
         ad:3d:0a:ff:a0:ea:8a:e8:5a:52:58:13:b4:f2:40:5a:f2:60:
         37:66:08:0e:3e:82:38:91:3f:80:9c:92:3b:fc:5f:89:78:c6:
         f6:6f:26:ff:16:ad:cd:97:25:e4:d7:0c:18:29:17:2b:8e:28:
         81:df:32:4f:01:22:b1:e3:91:0d:ba:3a:79:e0:3f:5c:ff:bd:
         bb:e1:da:27:a2:dc:cb:84:db:02:3f:ca:fa:70:d9:2a:84:c6:
         cb:97:cf:df:72:f1:3c:a0:d7:9f:35:42:4a:fe:aa:96:47:b0:
         90:25:aa:27:cb:58:34:28:f5:05:71:44:c2:02:0a:cb:ca:93:
         42:cc:e9:8b:f5:36:50:7b:c9:d5:4d:55:44:74:cf:c2:68:07:
         1e:97:94:fb:52:10:25:80:29:bc:00:30:34:ff:aa:a2:51:ff:
         5b:36:8c:14:f9:4e:99:0e:d9:ee:30:f7:95:77:49:d4:78:11:
         2d:1e:d0:50:f3:c1:dd:d1:48:8c:a2:ef:32:7a:99:c5:f8:19:
         78:e3:08:5b:0e:05:fa:a0:a1:e7:53:4f:09:5a:3c:2c:1e:8f:
         a2:e6:4c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:11:20 2024 by rpki-client on console-fra.rpki-client.org