Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38302e302f32302d3230203d3e20323632333532.roa
File:                     3137372e3132362e38302e302f32302d3230203d3e20323632333532.roa (raw, json)
Hash identifier:          Co3ottKqNUsmMgJKMOAAAco+mFMJhQNSdS4u0Sud2uo=
Subject key identifier:   C8:2C:5E:17:85:33:46:E1:87:40:57:C8:13:46:68:91:64:A9:F1:91
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       4734310F8D1E043A50A3CB249BBD2F8DA14CEBC0
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38302e302f32302d3230203d3e20323632333532.roa
Signing time:             Thu 04 Apr 2024 15:23:26 +0000
ROA not before:           Thu 04 Apr 2024 15:18:26 +0000
ROA not after:            Thu 03 Apr 2025 15:23:26 +0000
asID:                     262352
IP address blocks:        177.126.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:34:31:0f:8d:1e:04:3a:50:a3:cb:24:9b:bd:2f:8d:a1:4c:eb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Apr  4 15:18:26 2024 GMT
            Not After : Apr  3 15:23:26 2025 GMT
        Subject: CN=C82C5E17853346E1874057C81346689164A9F191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8c:5f:3d:a1:9d:7b:ac:aa:99:5c:b0:11:6d:
                    78:80:da:81:6d:c5:ca:ed:fa:f8:02:8f:26:2e:dc:
                    25:8c:b0:d4:88:24:a6:b4:52:03:7a:44:ad:18:27:
                    64:9e:17:0c:83:88:99:04:6d:f9:8a:ac:47:8b:60:
                    e7:81:1d:4a:1e:1b:e9:93:66:24:c7:4e:71:0b:67:
                    3a:fd:a5:ac:47:55:1c:08:15:7e:b9:17:4d:5a:45:
                    ae:6e:c0:2b:c9:06:54:91:60:88:43:24:2c:f7:49:
                    bd:0d:f8:2c:cf:58:43:a9:1a:b9:86:72:88:40:4e:
                    39:17:56:fe:e1:2f:4a:a4:78:5a:2c:50:01:f3:b4:
                    a9:c5:2a:06:08:cc:8a:94:d5:ca:c3:8d:c7:00:11:
                    5b:7f:a6:ef:66:a8:b1:b8:fe:8a:2c:f5:e7:43:61:
                    f5:06:88:9a:95:63:25:68:5b:db:1e:31:d0:82:e2:
                    fb:71:6c:b0:97:e8:26:a2:ae:84:9e:c7:af:4b:19:
                    6d:59:46:19:33:cc:0a:b6:e4:21:5e:83:64:7d:c8:
                    ea:6c:6c:0e:90:59:65:72:0b:10:e9:57:a2:3a:d2:
                    a0:20:96:b2:76:1c:68:31:24:dd:01:9e:c5:72:d4:
                    6e:1e:64:07:3a:69:71:e3:8b:2c:80:84:04:0b:18:
                    6c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:2C:5E:17:85:33:46:E1:87:40:57:C8:13:46:68:91:64:A9:F1:91
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38302e302f32302d3230203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         57:30:c9:59:50:87:34:37:8d:cb:24:eb:43:0b:70:e1:3a:67:
         7c:8c:71:25:35:a0:38:90:a1:f7:96:49:f8:45:5c:6b:4e:8d:
         6c:d3:36:e5:07:9e:c0:a6:3f:f5:45:fe:65:b3:8c:85:31:66:
         09:24:45:4d:9b:0d:1d:03:cf:ec:cb:d9:68:c1:de:05:20:a4:
         62:e3:ff:52:c5:05:69:7f:12:14:05:6b:85:55:4e:10:29:5f:
         54:8f:bb:44:b4:36:eb:25:5a:a1:f2:01:fb:bc:62:0d:10:97:
         64:7b:df:c7:51:db:be:ec:ef:28:2e:a3:45:77:86:5b:e8:c2:
         62:92:a3:b2:51:19:cd:1f:7d:84:99:8b:20:c5:e5:6c:85:45:
         a8:fa:58:dc:ba:85:86:b0:c9:36:28:2d:0a:31:52:e0:58:f8:
         d7:d4:23:3c:d1:c7:f6:63:a2:4b:4f:13:7d:70:0d:ca:67:21:
         a5:67:47:71:67:22:66:af:35:4c:24:50:33:ff:23:70:dd:f8:
         44:a2:47:4d:16:26:bb:ce:64:78:3d:9c:ee:26:2a:1b:1a:bc:
         a0:94:46:17:bf:97:00:05:cd:58:df:95:bb:7a:6e:57:aa:f0:
         bf:57:7b:ae:f2:ac:91:d0:35:27:ab:91:48:21:40:7c:2b:b5:
         97:17:3f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:19 2024 by rpki-client on console-fra.rpki-client.org