Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38302e302f32342d3234203d3e20323632333532.roa
File:                     3137372e3132362e38302e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          GBPBzdh26NSxfRCcZVWBX3rRDM30kra45i4KdsCk25M=
Subject key identifier:   0E:BC:01:1C:B9:D7:40:8E:29:35:44:6D:17:BE:15:D7:D7:D8:B9:D0
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       08A674D5D27AA2E8B305737E6C7B00FC7F58B752
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38302e302f32342d3234203d3e20323632333532.roa
Signing time:             Thu 04 Apr 2024 15:23:29 +0000
ROA not before:           Thu 04 Apr 2024 15:18:29 +0000
ROA not after:            Thu 03 Apr 2025 15:23:29 +0000
asID:                     262352
IP address blocks:        177.126.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a6:74:d5:d2:7a:a2:e8:b3:05:73:7e:6c:7b:00:fc:7f:58:b7:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Apr  4 15:18:29 2024 GMT
            Not After : Apr  3 15:23:29 2025 GMT
        Subject: CN=0EBC011CB9D7408E2935446D17BE15D7D7D8B9D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:18:24:95:a9:2a:66:ad:a3:f8:c2:c2:af:b1:
                    69:1a:15:e6:04:36:4c:2a:fd:31:16:1c:68:af:d1:
                    31:59:cc:48:d5:4c:07:06:ea:17:89:a4:29:81:31:
                    52:01:78:71:0e:a6:ea:d1:6c:ac:37:fb:a8:4d:cd:
                    74:6d:a5:0c:00:96:71:fa:94:3c:06:0e:9b:04:2d:
                    4c:cc:01:31:f9:1c:56:7c:75:2b:43:97:2a:f3:33:
                    36:c5:02:80:e5:79:cc:33:ab:b1:c0:73:60:d6:ba:
                    e1:94:12:5f:fc:d8:0a:05:39:cb:cd:76:b4:2f:55:
                    ae:48:a4:b8:ca:e0:ed:cb:f0:28:91:3a:cb:a7:79:
                    d0:a2:50:b6:e8:9e:12:12:4a:83:41:fd:b5:06:d9:
                    66:48:3f:0b:ba:64:cf:43:b1:ef:45:89:57:ff:30:
                    2f:82:fd:8a:34:bf:e7:7b:7c:63:69:9d:75:f3:bc:
                    ea:b3:8d:59:28:5c:e5:26:a6:fb:81:a5:5a:c8:f2:
                    ac:da:db:4f:75:ea:6e:84:2d:69:e9:af:1c:77:13:
                    e5:9f:95:20:f1:62:59:48:dd:46:ee:02:38:99:e5:
                    0a:7d:c4:46:e3:0c:07:0e:0c:36:d1:5b:5c:04:54:
                    71:a9:c5:39:e0:9a:97:f7:4c:00:31:7c:a3:a3:97:
                    23:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BC:01:1C:B9:D7:40:8E:29:35:44:6D:17:BE:15:D7:D7:D8:B9:D0
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38302e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:86:c1:aa:a0:a3:88:a5:d1:84:ce:00:9d:63:3b:3e:57:0d:
         54:e9:c9:d9:bd:0e:50:09:1c:11:ff:b7:db:62:2c:2d:86:be:
         c1:9c:f4:37:57:41:f3:6b:48:81:5d:25:50:dc:e5:66:e4:4a:
         c7:5b:6b:0d:76:1d:a7:f9:5c:82:1a:08:6b:d4:b1:95:e9:75:
         61:cf:cd:1f:5b:24:d2:72:24:49:26:bf:3e:4a:e0:ae:0d:bf:
         15:d4:15:3d:b6:31:ac:d1:d0:37:0b:ba:5b:2f:60:52:8e:cf:
         91:07:ab:0b:fd:b8:95:5c:be:ac:19:91:6a:15:aa:86:7e:0f:
         72:a9:e0:6d:22:6b:02:f9:65:95:b5:7c:e0:8d:5f:cc:ca:c3:
         04:7b:e4:52:3a:58:c2:02:a2:07:b9:4a:bc:35:d8:93:7f:43:
         21:73:5c:33:fc:c6:1a:8c:19:18:80:93:aa:de:ca:d6:46:a3:
         49:3e:d1:66:0a:d3:1a:95:08:d2:03:6d:09:36:20:bc:be:8d:
         a0:eb:52:b7:09:10:64:39:cc:c7:da:55:67:3c:fe:b9:5a:20:
         3a:74:22:4f:31:0f:5d:e6:fa:40:da:f9:51:3b:c5:88:b3:85:
         2c:68:b2:18:53:a9:8f:5d:0a:0f:31:20:f1:46:be:7d:4b:f0:
         a2:97:7e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:19 2024 by rpki-client on console-fra.rpki-client.org