Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38322e302f32332d3233203d3e20323632333532.roa
File:                     3137372e3132362e38322e302f32332d3233203d3e20323632333532.roa (raw, json)
Hash identifier:          GAMRevHS5siD0+vaSratjeGb2SMGEuwkVRapT3WaCKs=
Subject key identifier:   29:97:1A:A0:94:AB:59:39:0B:58:06:3B:C8:8E:F8:16:94:77:13:76
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       14B8741188992A5C9DF858CB5B3681B766D9C416
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38322e302f32332d3233203d3e20323632333532.roa
Signing time:             Thu 04 Apr 2024 15:23:29 +0000
ROA not before:           Thu 04 Apr 2024 15:18:29 +0000
ROA not after:            Thu 03 Apr 2025 15:23:29 +0000
asID:                     262352
IP address blocks:        177.126.82.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b8:74:11:88:99:2a:5c:9d:f8:58:cb:5b:36:81:b7:66:d9:c4:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Apr  4 15:18:29 2024 GMT
            Not After : Apr  3 15:23:29 2025 GMT
        Subject: CN=29971AA094AB59390B58063BC88EF81694771376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9f:90:0a:72:c4:26:08:fe:28:76:06:b2:6d:
                    09:34:5a:71:2c:d5:dc:ba:9a:aa:d3:30:68:1b:08:
                    eb:af:16:fb:1c:79:47:31:7e:43:1f:64:03:30:40:
                    37:10:a5:06:95:b4:44:80:e1:bb:6d:bb:a1:07:65:
                    c9:0f:05:ff:ed:1b:d7:52:90:c6:77:9a:b2:2a:82:
                    02:11:ac:0d:a7:8d:d3:51:57:01:ff:9e:bf:1c:77:
                    b8:4c:b9:36:3e:36:d1:3c:fc:ea:b7:0f:24:9b:d5:
                    f8:f6:c7:b0:d6:9c:fc:46:04:4a:cd:f3:58:cc:71:
                    a3:a1:a1:4c:03:5a:2a:a9:a3:33:a1:d3:17:23:e4:
                    49:20:68:3f:87:3d:99:b5:29:c3:e3:eb:78:ae:06:
                    bf:9c:7f:59:3b:ac:50:c9:84:0e:af:a3:ea:74:72:
                    f5:62:c0:7f:2a:cd:cb:ef:f1:5e:e7:0e:7c:b8:83:
                    7b:fd:dc:79:80:f4:5f:00:b4:af:f4:3b:37:3a:75:
                    cd:36:9f:c6:db:9b:37:82:63:7e:55:b8:7e:b7:73:
                    eb:23:e1:f5:3f:bd:d0:ef:ac:5d:7c:b2:d9:2b:35:
                    6b:0b:0d:bc:b9:44:be:0f:3e:fe:67:60:34:45:41:
                    b5:82:03:ba:2b:34:65:99:91:af:a8:a0:13:3e:7d:
                    38:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:97:1A:A0:94:AB:59:39:0B:58:06:3B:C8:8E:F8:16:94:77:13:76
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38322e302f32332d3233203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:ce:0e:36:09:61:e0:1a:1c:fc:10:83:1b:43:83:e6:ca:91:
         10:af:8a:37:f7:47:2e:af:16:07:45:d7:57:fb:8c:1a:fa:c4:
         e0:9b:7e:d9:24:b8:66:56:fb:fd:db:47:39:46:d6:79:63:73:
         9b:28:2b:3b:18:01:97:3e:41:e3:1f:37:43:66:20:b9:d7:8c:
         04:13:0a:89:2a:3a:01:4f:1f:af:6b:b8:62:02:fc:e3:18:3d:
         1b:8e:4a:6a:a2:01:1a:f2:23:33:88:8f:3b:39:a4:ef:3c:b3:
         0c:c9:f3:94:62:82:1a:16:28:15:7b:c0:97:c0:1f:79:29:84:
         7e:48:01:7f:7f:2b:a3:dd:de:7f:44:d9:2e:0e:ea:4c:8e:19:
         83:56:00:4a:83:f1:4f:1d:4f:45:28:f1:f0:af:f3:7d:85:be:
         66:33:c9:99:1b:70:03:bf:77:95:76:2f:ea:bb:c1:2b:0e:dd:
         83:0a:65:28:a5:03:fd:68:2e:41:8e:17:04:94:34:0e:3e:fa:
         53:22:fb:82:53:94:2c:4c:5d:54:29:fe:e8:cf:ff:7d:59:8f:
         62:12:e3:ed:d8:3b:d4:de:90:aa:b4:33:c0:71:f1:85:72:b9:
         44:22:8e:fb:d3:04:12:2e:22:39:42:10:4b:ac:9e:d2:8d:35:
         ae:ce:5f:6d
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUFLh0EYiZKlyd+FjLWzaBt2bZxBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE3MEM0MDg1QTIwQ0Q2QUE0NTFGQkNBQzJDQjhGMkND
REJBM0U5NzAeFw0yNDA0MDQxNTE4MjlaFw0yNTA0MDMxNTIzMjlaMDMxMTAvBgNV
BAMTKDI5OTcxQUEwOTRBQjU5MzkwQjU4MDYzQkM4OEVGODE2OTQ3NzEzNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwn5AKcsQmCP4odgaybQk0WnEs
1dy6mqrTMGgbCOuvFvsceUcxfkMfZAMwQDcQpQaVtESA4bttu6EHZckPBf/tG9dS
kMZ3mrIqggIRrA2njdNRVwH/nr8cd7hMuTY+NtE8/Oq3DySb1fj2x7DWnPxGBErN
81jMcaOhoUwDWiqpozOh0xcj5EkgaD+HPZm1KcPj63iuBr+cf1k7rFDJhA6vo+p0
cvViwH8qzcvv8V7nDny4g3v93HmA9F8AtK/0Ozc6dc02n8bbmzeCY35VuH63c+sj
4fU/vdDvrF18stkrNWsLDby5RL4PPv5nYDRFQbWCA7orNGWZka+ooBM+fTi5AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUKZcaoJSrWTkLWAY7yI74FpR3E3YwHwYDVR0j
BBgwFoAUgXDECFogzWqkUfvKwsuPLM26PpcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby8xbjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1
LzUvODE3MEM0MDg1QTIwQ0Q2QUE0NTFGQkNBQzJDQjhGMkNDREJBM0U5Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84MTcwQzQwODVBMjBDRDZBQTQ1
MUZCQ0FDMkNCOEYyQ0NEQkEzRTk3LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8x
bjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1LzUvMzEz
NzM3MmUzMTMyMzYyZTM4MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzIz
MzM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAGxflIwDQYJKoZIhvcNAQELBQADggEBACPODjYJYeAa
HPwQgxtDg+bKkRCvijf3Ry6vFgdF11f7jBr6xOCbftkkuGZW+/3bRzlG1nljc5so
KzsYAZc+QeMfN0NmILnXjAQTCokqOgFPH69ruGIC/OMYPRuOSmqiARryIzOIjzs5
pO88swzJ85RighoWKBV7wJfAH3kphH5IAX9/K6Pd3n9E2S4O6kyOGYNWAEqD8U8d
T0Uo8fCv832FvmYzyZkbcAO/d5V2L+q7wSsO3YMKZSilA/1oLkGOFwSUNA4++lMi
+4JTlCxMXVQp/ujP/31Zj2IS4+3YO9TekKq0M8Bx8YVyuUQijvvTBBIuIjlCEEus
ntKNNa7OX20=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:04 2024 by rpki-client on console-fra.rpki-client.org