Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38302e302f32322d3232203d3e20323632333532.roa
File:                     3137372e3132362e38302e302f32322d3232203d3e20323632333532.roa (raw, json)
Hash identifier:          yx1YR9s7fgRFwzaT3kXg0k0JNrVlngwoiiauim68lwk=
Subject key identifier:   55:6B:D0:D0:22:36:F8:3E:9A:17:FF:E4:1D:80:70:06:25:97:9D:5D
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       738C0A0B8A10130E604EB887F1283895D6B69ACA
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38302e302f32322d3232203d3e20323632333532.roa
Signing time:             Thu 04 Apr 2024 15:23:25 +0000
ROA not before:           Thu 04 Apr 2024 15:18:25 +0000
ROA not after:            Thu 03 Apr 2025 15:23:25 +0000
asID:                     262352
IP address blocks:        177.126.80.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:8c:0a:0b:8a:10:13:0e:60:4e:b8:87:f1:28:38:95:d6:b6:9a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Apr  4 15:18:25 2024 GMT
            Not After : Apr  3 15:23:25 2025 GMT
        Subject: CN=556BD0D02236F83E9A17FFE41D80700625979D5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:40:f5:60:33:39:b1:d6:8a:cb:35:a0:d8:7f:
                    74:8b:77:88:f2:16:bc:4c:3e:c0:9f:d1:b3:7c:f0:
                    1f:30:cb:ef:d1:a8:9b:0c:19:ef:a8:75:c1:93:71:
                    e4:94:63:4b:27:7a:fb:75:46:f5:29:a4:c6:84:41:
                    4e:bd:7a:78:4b:c5:4a:b1:b8:75:b6:ed:aa:1d:55:
                    6e:d2:e9:e3:c0:43:2a:c7:ee:85:62:fa:a6:a1:a4:
                    aa:23:28:8c:a5:b1:b6:3c:8c:25:6b:c9:c9:cb:a6:
                    50:c8:3d:fd:e4:2e:c1:c6:66:77:20:58:66:5a:71:
                    5d:1a:bf:95:02:d3:71:b0:b3:ba:81:ee:85:45:4b:
                    c8:be:3b:d0:37:cc:45:e4:6a:bc:6d:99:1f:42:12:
                    8f:60:fb:15:1b:55:c4:35:a0:e3:87:70:c5:52:60:
                    5e:d6:a7:95:30:78:e6:99:31:20:64:e2:c8:63:67:
                    15:76:5b:1d:3e:7e:a5:9e:fa:aa:12:13:62:72:5e:
                    00:5e:1d:11:a1:9b:6a:be:d8:94:05:72:d9:01:2c:
                    5f:e1:eb:46:48:77:1c:a4:bd:4a:b4:55:5d:8c:a8:
                    c1:40:64:be:0a:6e:1a:53:18:27:e4:d0:56:03:6d:
                    2d:d7:5d:48:7e:9a:28:10:67:b0:48:fb:c7:d5:a3:
                    fb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:6B:D0:D0:22:36:F8:3E:9A:17:FF:E4:1D:80:70:06:25:97:9D:5D
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38302e302f32322d3232203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:c1:ae:e5:3d:67:1a:bd:ed:76:c3:9f:15:3c:c7:85:ba:4b:
         a3:50:6f:e1:a9:2d:52:41:ca:c3:49:81:3a:1e:40:64:f6:6e:
         6f:28:c4:2c:ad:5d:7a:2e:b4:14:80:e4:0e:a0:42:4d:9d:a0:
         da:94:45:a0:95:0f:88:2e:e2:27:38:94:db:7f:20:5a:65:23:
         51:e6:8c:a8:2e:e0:be:33:07:49:c1:a9:ed:68:75:fe:d8:5f:
         74:49:43:44:0b:35:ca:f7:d7:0d:73:16:d2:67:ce:c7:46:54:
         a1:ff:5a:82:de:5c:d3:f8:b8:e5:61:f6:c8:95:8f:d4:4d:c0:
         8e:ab:ee:a0:a4:33:19:96:e9:1a:29:4d:2e:4b:17:8a:eb:20:
         b4:0e:0f:27:a0:b6:39:3e:ad:ef:59:6c:18:bf:8e:c9:9d:ca:
         7f:7f:bd:ef:8a:e3:08:a4:56:ec:8a:eb:21:6a:c8:cc:d8:8f:
         3a:70:a0:ca:6f:b4:7d:9d:dd:c7:52:de:e3:10:ea:30:6b:56:
         e8:1a:1a:83:7c:d8:7f:3f:61:67:dc:63:7b:9c:19:c8:cc:e3:
         09:fa:06:10:d9:09:8c:22:45:8f:33:4d:c4:a1:bb:19:f7:9e:
         c0:0d:02:e4:43:6e:cb:b4:3c:31:72:a5:3d:e4:1e:f3:e1:18:
         4f:e3:b9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:50:52 2024 by rpki-client on console-ams.rpki-client.org