Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132362e302f32342d3234203d3e20323633363132.roa
File:                     3137392e3138392e3132362e302f32342d3234203d3e20323633363132.roa (raw, json)
Hash identifier:          ucEFKb7I6+3vw7QPc8uu58+L/JhMlBTEIE0k35D8cvk=
Subject key identifier:   88:90:76:FF:1F:BD:92:7C:17:48:9B:F0:E6:33:0D:33:65:6A:C1:80
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       37879B0C2C3738A8B40D03BEFDB184D5368B2827
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132362e302f32342d3234203d3e20323633363132.roa
Signing time:             Fri 31 May 2024 23:31:15 +0000
ROA not before:           Fri 31 May 2024 23:26:15 +0000
ROA not after:            Fri 30 May 2025 23:31:15 +0000
asID:                     263612
IP address blocks:        179.189.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:87:9b:0c:2c:37:38:a8:b4:0d:03:be:fd:b1:84:d5:36:8b:28:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: May 31 23:26:15 2024 GMT
            Not After : May 30 23:31:15 2025 GMT
        Subject: CN=889076FF1FBD927C17489BF0E6330D33656AC180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:62:a9:5d:bd:0f:68:7d:2a:4a:d9:97:ee:bf:
                    8e:0b:7c:1b:7f:65:5d:48:ae:cb:14:5d:45:97:7d:
                    9f:0b:49:2f:49:89:48:b1:7f:97:76:97:aa:77:cf:
                    29:38:28:d3:64:68:09:00:28:74:00:44:57:07:62:
                    01:ae:ca:79:5a:7f:98:98:0b:73:61:32:e3:48:3b:
                    d5:92:c5:93:a0:d2:c9:30:6e:ed:07:75:b4:60:9f:
                    e2:ad:0a:ea:b3:53:4b:4b:ed:c9:82:71:3c:1b:ce:
                    35:67:10:33:3a:ea:63:58:ff:e2:32:72:3f:7c:5e:
                    68:45:97:37:c0:43:f0:5e:6c:bc:c1:a6:1e:4e:9f:
                    4c:ef:68:1a:f9:ba:cf:bf:64:c0:d0:3e:ae:d2:21:
                    01:aa:77:e5:3b:7a:60:fa:96:56:1d:04:d1:29:24:
                    71:80:4a:67:1f:a3:75:b3:80:ce:60:b7:5f:ef:0e:
                    68:e9:14:8d:8b:41:bf:17:5f:11:28:39:21:6e:91:
                    e3:fa:75:9f:b5:1c:78:42:98:5b:e6:14:17:4f:27:
                    73:c1:b3:7f:79:02:41:e5:00:f1:d5:05:23:0e:fc:
                    41:38:42:39:61:9a:f8:a0:03:47:d6:2d:2e:df:b6:
                    cc:d8:09:f0:4e:20:a0:c7:29:ad:cd:92:f7:39:65:
                    2a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:90:76:FF:1F:BD:92:7C:17:48:9B:F0:E6:33:0D:33:65:6A:C1:80
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132362e302f32342d3234203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:66:71:ea:4c:46:2d:a0:62:34:98:6e:92:a4:ee:52:ba:22:
         d8:6d:57:c7:55:ef:56:e7:63:39:8f:f2:0b:d0:fe:92:f5:bb:
         38:25:dd:c8:09:3a:42:e5:e5:f4:fa:8b:6c:ef:98:19:f0:99:
         2e:96:6f:24:61:ff:fe:13:9b:0a:a0:97:91:d0:2d:ad:1b:ec:
         08:0a:45:41:0c:9c:82:23:0e:ee:6c:93:b6:50:72:a4:f5:04:
         46:55:04:6f:d9:da:26:b2:40:a6:ad:08:5a:f4:f1:eb:01:53:
         fc:98:73:5e:e9:d1:42:85:67:7d:99:ba:1c:76:e8:83:8e:ee:
         9f:30:1b:76:0f:53:f1:c0:cd:96:d1:b0:5f:df:48:31:f6:70:
         0c:57:6c:2e:2c:92:bc:92:b4:a9:97:80:59:6e:cd:01:59:75:
         77:51:07:94:0e:4a:d4:aa:a1:a6:1a:d1:69:b5:4d:af:b4:1e:
         12:c5:60:fc:7a:2e:71:43:12:95:d6:36:dd:f4:ae:96:1b:93:
         34:fe:3e:9f:cc:93:ce:2a:ca:0d:41:aa:95:b9:a2:e5:96:fd:
         b8:5c:c8:b0:fc:84:d3:4b:6c:54:46:eb:ef:a8:ed:ac:85:87:
         4d:37:e7:93:31:b0:35:32:3d:34:b2:03:65:61:2f:84:e7:e2:
         46:1f:f6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:30 2024 by rpki-client on console-ams.rpki-client.org