Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38302e302f32332d3233203d3e20323632333532.roa
File:                     3137372e3132362e38302e302f32332d3233203d3e20323632333532.roa (raw, json)
Hash identifier:          ZtBhZ6vgch17YUZF4wzuF/BkRbGGfcflkO2XGOE3Oeo=
Subject key identifier:   B3:F0:D8:F9:DC:54:80:32:C7:39:03:15:A5:17:8D:95:2C:17:38:F4
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       1430B99B67D625F4B2CEF63837F54F25B395E9D4
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38302e302f32332d3233203d3e20323632333532.roa
Signing time:             Thu 04 Apr 2024 15:23:25 +0000
ROA not before:           Thu 04 Apr 2024 15:18:25 +0000
ROA not after:            Thu 03 Apr 2025 15:23:25 +0000
asID:                     262352
IP address blocks:        177.126.80.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:30:b9:9b:67:d6:25:f4:b2:ce:f6:38:37:f5:4f:25:b3:95:e9:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Apr  4 15:18:25 2024 GMT
            Not After : Apr  3 15:23:25 2025 GMT
        Subject: CN=B3F0D8F9DC548032C7390315A5178D952C1738F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:4f:16:85:12:9e:31:1b:02:da:ba:4a:e5:fd:
                    1d:38:19:7f:15:26:16:b4:d8:2c:cb:18:96:56:94:
                    b8:0d:69:f5:df:3c:d8:37:51:5c:46:c8:e2:f5:f5:
                    98:03:a0:0b:63:af:f7:e3:ff:fb:9b:7e:42:36:17:
                    43:6b:4a:c6:e3:62:53:2b:06:86:c3:0e:be:9a:d1:
                    d9:87:0f:5b:7f:b6:5b:0d:e9:04:95:96:08:92:f2:
                    69:3d:f2:4f:a0:6e:fd:97:6f:55:b3:d5:5e:6e:1c:
                    58:5d:23:44:ab:76:22:b0:e0:e9:4e:e9:69:db:21:
                    69:c8:6e:7c:f5:b6:f5:12:50:8e:21:c6:b0:18:56:
                    b4:b7:0b:e6:68:0e:9d:be:03:3f:77:ac:15:b6:c2:
                    ed:4b:59:04:76:9e:c8:5c:05:27:c8:15:b7:19:b9:
                    6f:21:fb:7c:9b:f4:25:b6:e0:68:86:04:88:4d:b2:
                    a1:b7:c5:bc:f8:75:33:13:3e:67:54:c3:b2:04:47:
                    a4:57:e8:d7:f3:96:34:a6:96:18:c9:7b:21:4c:69:
                    31:2b:25:e4:fb:22:4e:fb:27:8a:d2:b0:1f:2d:3c:
                    61:6b:b2:9a:81:cb:1e:78:1d:91:04:c3:c9:5b:01:
                    66:67:5b:b3:21:dc:d9:d7:0e:9e:20:92:16:20:8b:
                    0f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F0:D8:F9:DC:54:80:32:C7:39:03:15:A5:17:8D:95:2C:17:38:F4
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38302e302f32332d3233203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:85:3b:54:4e:fa:cc:3c:4c:2f:46:8c:17:86:7c:cd:ed:67:
         9f:c1:39:c1:d5:9d:54:a3:22:5a:38:f0:60:4e:28:41:08:81:
         6d:ae:cc:36:5f:12:97:62:a2:4f:df:da:66:0d:8d:a8:34:e7:
         71:ab:5b:ef:b8:a9:1a:3a:db:5c:95:17:40:10:b7:59:86:61:
         15:eb:43:d6:8f:7b:7e:a3:dc:b3:3d:55:bc:8a:11:40:f1:47:
         ab:1e:de:e2:4a:53:e6:0d:3f:3a:fd:ef:e8:1a:ca:c0:44:69:
         1c:71:5a:30:c1:16:a8:89:63:d5:ec:a4:85:01:54:f0:25:a9:
         2c:8d:93:39:c1:fa:52:1d:b4:f9:e2:78:25:8d:57:5c:8d:d8:
         82:90:13:e1:0d:b8:78:47:a8:a6:4d:32:e7:20:bd:67:5e:44:
         10:99:1b:1b:77:c5:08:97:62:22:13:e9:60:1f:98:6e:1d:8b:
         29:0f:7c:c0:9c:73:b2:1b:d5:93:79:9b:fe:e3:a4:34:79:44:
         15:c2:39:1e:70:51:fc:8d:d8:86:25:fa:b0:02:43:21:ee:44:
         0e:3c:ee:9b:47:0f:3d:46:6e:5d:5d:da:a5:f4:ad:37:e1:7f:
         97:39:58:56:31:fb:13:57:f5:ce:58:cf:b7:53:2e:b3:94:d3:
         30:79:60:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:19 2024 by rpki-client on console-fra.rpki-client.org