Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38342e302f32342d3234203d3e20323632333532.roa
File:                     3137372e3132362e38342e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          FGkOKoueaOR7U0790gfaDLr9h7S9FjTaC5b4g9ia/X8=
Subject key identifier:   C9:5F:14:2E:6B:59:E7:8A:59:5A:60:5D:02:C4:86:D2:77:87:EC:94
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       5AF31278C26D23F41B2B5D30958D284361497FFA
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38342e302f32342d3234203d3e20323632333532.roa
Signing time:             Mon 28 Oct 2024 12:51:15 +0000
ROA not before:           Mon 28 Oct 2024 12:46:15 +0000
ROA not after:            Mon 27 Oct 2025 12:51:15 +0000
asID:                     262352
IP address blocks:        177.126.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f3:12:78:c2:6d:23:f4:1b:2b:5d:30:95:8d:28:43:61:49:7f:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Oct 28 12:46:15 2024 GMT
            Not After : Oct 27 12:51:15 2025 GMT
        Subject: CN=C95F142E6B59E78A595A605D02C486D27787EC94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:de:7e:27:30:91:3d:e7:ea:30:26:02:f1:e0:
                    27:83:b6:ad:eb:3d:2e:60:e1:da:77:53:57:2c:c7:
                    e1:31:32:26:91:17:27:14:eb:4f:d9:30:1a:83:6f:
                    ef:72:88:88:74:4f:64:75:97:09:47:7c:36:97:e1:
                    b6:a9:61:15:07:27:ba:70:b9:16:21:41:3a:13:9a:
                    c6:2d:81:cc:a3:b0:7c:2f:3d:d5:f7:e5:04:97:4c:
                    ef:d7:ba:fa:9a:4b:70:c5:51:76:b1:af:91:2c:3c:
                    a0:ea:81:49:ed:77:e9:09:ce:ee:03:9a:53:81:78:
                    94:48:79:64:bd:3f:6e:65:7e:c0:2d:2d:cf:6d:27:
                    f5:84:b1:cc:98:b8:66:09:7b:b8:88:17:06:83:21:
                    4b:77:da:27:23:9c:31:41:ff:83:af:e6:96:19:bd:
                    e0:7c:f4:00:0d:19:7b:9a:4c:dd:a1:c3:87:76:e8:
                    1f:e2:09:d5:05:23:6e:dd:7f:bf:87:32:59:ac:df:
                    8d:62:c8:99:02:3f:2b:91:d3:f1:1e:7c:2a:de:2a:
                    a4:c2:01:e6:b8:f4:3f:f3:b6:ce:c1:c5:e5:01:3e:
                    79:6f:ae:3e:bc:27:c4:73:e4:47:7a:f2:bc:4e:fa:
                    98:42:f9:5c:d8:39:49:55:1d:9a:44:42:c1:16:33:
                    80:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5F:14:2E:6B:59:E7:8A:59:5A:60:5D:02:C4:86:D2:77:87:EC:94
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38342e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:e4:f6:41:a0:c2:70:74:17:ba:0c:41:32:7d:8b:0b:61:05:
         b9:ea:34:ad:66:eb:91:f2:be:9d:39:26:88:c1:71:4b:bc:55:
         28:62:47:62:e6:c2:5c:78:3f:1f:aa:ac:23:87:90:8e:dd:ca:
         53:f0:b6:ba:e6:61:07:1b:64:78:40:54:60:1a:c0:66:39:fe:
         cc:eb:ce:54:8d:e0:04:a6:6e:27:ec:79:14:89:43:64:5b:70:
         b7:f8:d2:66:0c:53:bb:a7:76:77:ea:a3:76:80:0f:40:97:28:
         cb:d0:a0:a5:e6:14:20:b4:22:d3:33:41:d8:23:8f:9a:14:16:
         fe:73:23:ca:8c:b8:38:b8:fc:45:a3:dd:b9:72:b8:6c:a5:78:
         b7:3c:82:8b:52:90:5e:f1:85:ee:82:7a:01:32:98:f3:24:63:
         1a:e4:12:25:a0:58:a1:35:c9:1f:65:8a:3d:c4:6f:8d:c2:66:
         a0:da:8e:ab:1e:82:01:25:03:e4:50:ef:ec:c1:20:f8:4e:f8:
         cc:ea:1e:2d:39:3f:98:dc:34:f6:29:5e:6a:a0:09:e4:6c:79:
         70:5a:aa:e0:0f:d8:03:1b:3e:e8:e0:9c:b5:6e:20:e2:48:14:
         05:3c:85:07:59:30:f2:c3:e4:01:43:cf:00:50:55:41:f2:a7:
         ee:ea:17:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:51 2024 by rpki-client on console-ams.rpki-client.org