Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132352e302f32342d3234203d3e20323633363132.roa
File:                     3137392e3138392e3132352e302f32342d3234203d3e20323633363132.roa (raw, json)
Hash identifier:          YrlYihpzVl36LDjH7JzbDIBxISmBUZDfMnvQ1+Owol4=
Subject key identifier:   DC:04:35:D9:FF:6E:B2:06:0E:4C:03:FE:61:82:D9:1E:10:C0:A3:F5
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       44150F4957401FFC3AA8CC49CD758098DD019ECE
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132352e302f32342d3234203d3e20323633363132.roa
Signing time:             Fri 31 May 2024 23:31:04 +0000
ROA not before:           Fri 31 May 2024 23:26:04 +0000
ROA not after:            Fri 30 May 2025 23:31:04 +0000
asID:                     263612
IP address blocks:        179.189.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:15:0f:49:57:40:1f:fc:3a:a8:cc:49:cd:75:80:98:dd:01:9e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: May 31 23:26:04 2024 GMT
            Not After : May 30 23:31:04 2025 GMT
        Subject: CN=DC0435D9FF6EB2060E4C03FE6182D91E10C0A3F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e9:2f:e0:ea:eb:2e:00:07:5e:a3:9f:17:52:
                    3e:cc:11:6b:b5:fa:64:1a:d6:cb:0f:5b:e9:fb:03:
                    20:52:ef:db:fc:5d:8c:bd:58:7e:1b:7d:85:58:8f:
                    41:f9:e8:c2:fe:43:a2:be:4e:91:7e:b7:73:54:a1:
                    22:c0:ef:a0:a6:16:d0:94:b6:24:9c:b6:a7:62:5b:
                    34:bc:b4:67:4d:a7:e7:50:83:70:70:5b:ba:55:07:
                    23:09:db:30:8a:8c:99:69:3c:a7:30:a7:e0:0f:74:
                    8d:6b:2e:43:ed:37:a6:ee:3e:15:ef:10:05:fd:d3:
                    84:2a:07:c5:30:c0:41:1f:0f:60:f4:35:af:9b:70:
                    b4:f5:bb:01:01:40:04:03:fd:d5:5e:47:6a:82:dc:
                    54:34:e8:99:12:2a:51:0c:ed:e0:44:3b:90:c4:4d:
                    83:a7:16:14:03:4c:25:a2:2c:73:7f:39:7d:67:fd:
                    2b:4c:d9:7f:28:d6:dd:6c:e8:cd:a1:29:23:3c:7d:
                    c7:04:b4:61:f0:39:93:0a:c5:06:e4:cf:da:0f:6a:
                    5b:7c:2d:7d:46:2c:4f:50:7d:84:69:d2:ef:3f:cd:
                    cb:7a:26:c1:0d:cf:c6:6f:30:1f:75:ef:93:dd:68:
                    a7:46:dc:66:9e:68:71:a2:0e:5b:5a:f3:e2:bf:bb:
                    ba:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:04:35:D9:FF:6E:B2:06:0E:4C:03:FE:61:82:D9:1E:10:C0:A3:F5
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132352e302f32342d3234203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:27:61:03:31:e2:76:17:dc:9d:f2:26:7c:47:0d:c8:0c:ae:
         6c:6f:26:05:c1:cb:20:3f:9d:58:dc:38:f3:04:6a:58:46:e0:
         6e:7e:8c:54:1e:0b:48:9c:bb:40:ca:b6:1a:4f:3b:3c:1a:9e:
         9a:4c:ed:0a:5b:e4:a4:ab:ab:70:4d:3f:0f:50:04:91:bd:2c:
         88:fe:9a:47:0c:aa:97:a8:b1:de:02:b4:d7:e1:03:fa:03:4d:
         31:d4:5e:18:a4:08:a5:cb:18:47:8a:04:9f:5c:2d:94:44:a4:
         43:9f:ea:f6:10:62:cf:91:32:4e:49:c6:9d:50:d7:84:e7:68:
         aa:77:3a:e8:c0:13:19:d3:a0:11:c0:ec:5b:49:68:29:a4:6f:
         4c:87:a6:39:20:66:7b:08:56:a1:77:22:6c:14:a5:fc:aa:5f:
         5d:0b:6d:4e:7a:b8:62:33:22:19:63:a7:fd:a3:74:fb:6f:fc:
         02:fe:ec:c2:1b:5c:43:f4:39:e3:93:dd:29:5a:87:92:d5:1d:
         c2:20:f2:ad:c1:8e:48:53:5f:81:fe:d1:09:29:6f:31:63:86:
         df:ae:75:d2:1d:fe:08:9b:ce:46:46:21:fb:86:00:6f:fb:00:
         0b:1c:18:d6:01:3b:35:ba:1a:a0:96:62:df:8e:fb:12:b8:3e:
         d0:45:5d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:30 2024 by rpki-client on console-ams.rpki-client.org