Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38322e302f32342d3234203d3e20323632333532.roa
File:                     3137372e3132362e38322e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          V7ElN4JTvj3Uh1rQRMbKIanULaD2fHGOK+UqVU4ydHc=
Subject key identifier:   E8:04:E7:90:BB:58:C1:5E:EA:51:AE:14:FA:07:9C:6D:92:09:AC:30
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       390BC9CFAF60369A52EB2AC86A2B5FE3B82994D8
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38322e302f32342d3234203d3e20323632333532.roa
Signing time:             Mon 28 Oct 2024 12:50:42 +0000
ROA not before:           Mon 28 Oct 2024 12:45:42 +0000
ROA not after:            Mon 27 Oct 2025 12:50:42 +0000
asID:                     262352
IP address blocks:        177.126.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:0b:c9:cf:af:60:36:9a:52:eb:2a:c8:6a:2b:5f:e3:b8:29:94:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Oct 28 12:45:42 2024 GMT
            Not After : Oct 27 12:50:42 2025 GMT
        Subject: CN=E804E790BB58C15EEA51AE14FA079C6D9209AC30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b2:35:9b:a7:a5:5a:10:85:72:98:e2:c2:55:
                    6d:57:04:9e:3e:cc:fb:74:59:57:c5:9f:cd:2e:55:
                    52:55:c8:b2:3c:fa:f0:be:a5:b8:73:86:a6:39:a6:
                    12:a2:d1:32:d3:b2:8f:a9:f0:7c:d1:dd:bf:f6:19:
                    b1:2c:8a:c8:2f:24:f5:15:9d:f2:9a:31:e6:76:8f:
                    d2:0c:be:05:20:33:4f:f9:fb:45:ad:ec:28:95:25:
                    8c:b6:34:a0:d3:79:f9:9d:67:c1:5e:b2:c3:91:73:
                    ae:d3:61:4a:7b:0c:50:23:4e:dd:79:bf:95:b3:ff:
                    e0:5d:62:84:ca:21:41:a7:74:ca:79:db:01:6c:14:
                    17:48:29:d6:40:38:fb:16:10:e6:71:7a:e8:9f:90:
                    a7:67:7b:db:34:98:2d:3d:cf:44:a0:54:ab:37:5f:
                    5b:73:ed:23:34:e9:63:3a:31:c8:87:b3:d4:03:18:
                    11:ed:19:a2:a0:e3:f6:2b:a6:9d:29:6b:f0:10:c2:
                    89:28:8b:22:0c:3e:96:91:5d:68:2a:63:b9:88:c5:
                    a7:e6:81:02:7a:06:16:29:f7:52:90:32:22:d7:4d:
                    e4:5c:a6:57:d3:e6:2b:66:e1:ed:b5:f0:58:78:60:
                    7b:e1:22:b9:ee:8e:8b:f0:67:8d:77:08:b7:02:fc:
                    99:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:04:E7:90:BB:58:C1:5E:EA:51:AE:14:FA:07:9C:6D:92:09:AC:30
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38322e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:39:d5:56:ea:e1:cc:48:1b:92:21:c0:66:5c:f3:86:1e:81:
         b9:64:75:19:98:5c:ef:af:ea:c1:7c:3f:1c:3c:dc:0f:0b:11:
         90:03:7d:da:4f:49:b0:98:4d:b8:e2:5c:5a:dd:1d:72:c2:5b:
         b7:8e:89:40:9b:3b:b9:80:27:87:bf:c6:0d:6e:6f:ac:1f:7b:
         a2:f3:9f:6c:47:a6:52:13:75:68:57:dd:b8:2a:49:4b:46:d1:
         b7:d0:20:5a:1e:80:85:8e:ed:f5:97:ec:b1:27:9a:5c:1d:c3:
         be:8a:eb:86:40:96:0e:33:fd:67:ca:fb:5f:d8:66:79:ab:e0:
         e3:4f:4b:c8:08:cd:28:e2:ed:d3:53:a2:8a:e7:02:16:48:35:
         9c:0c:cf:13:43:e2:8e:c8:91:49:93:2f:7d:90:2e:c7:bf:de:
         1a:64:b5:cc:f4:19:5e:26:c2:8c:e7:af:e8:08:b6:fe:ea:1d:
         34:f4:48:78:71:84:8f:70:79:d3:f4:21:55:cc:9b:e8:6a:47:
         cc:f5:a7:29:5d:71:62:cd:c5:f1:43:5c:a3:ad:a4:61:6a:94:
         3f:ad:44:17:8b:71:5e:a1:14:8a:8d:43:6a:4e:73:8f:b5:90:
         d9:25:3a:34:61:0b:9f:5f:1b:f8:8d:83:70:35:a3:8a:13:bd:
         7f:7b:74:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:51 2024 by rpki-client on console-ams.rpki-client.org