Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38352e302f32342d3234203d3e20323632333532.roa
File:                     3137372e3132362e38352e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          JajsO8eGMmFy+AgNnCixz0TnoKA6uz8j8WKRrSqHohc=
Subject key identifier:   BE:39:6D:3A:A6:BD:AE:6C:DF:4E:A9:B9:DB:E9:F5:41:AF:51:EE:21
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       3335B249FC5994E2C3D2EDA294DA181EF576ACB1
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38352e302f32342d3234203d3e20323632333532.roa
Signing time:             Thu 04 Apr 2024 15:23:28 +0000
ROA not before:           Thu 04 Apr 2024 15:18:28 +0000
ROA not after:            Thu 03 Apr 2025 15:23:28 +0000
asID:                     262352
IP address blocks:        177.126.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:35:b2:49:fc:59:94:e2:c3:d2:ed:a2:94:da:18:1e:f5:76:ac:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Apr  4 15:18:28 2024 GMT
            Not After : Apr  3 15:23:28 2025 GMT
        Subject: CN=BE396D3AA6BDAE6CDF4EA9B9DBE9F541AF51EE21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1a:88:fe:a3:57:1d:a1:3c:6c:e8:ee:98:d2:
                    d3:fb:60:86:eb:b2:80:c6:01:39:81:b7:36:54:31:
                    b8:4e:9f:17:71:a7:de:3c:a5:63:9d:a3:7c:ba:f6:
                    de:de:24:ec:18:53:ef:26:15:86:de:17:78:de:be:
                    a4:9a:3b:89:99:84:6b:55:a3:8b:9a:6f:86:67:24:
                    01:e0:6a:53:fa:cc:c9:50:66:cc:fa:d7:33:28:4d:
                    ce:b5:cf:fa:7b:02:81:bc:1f:05:1e:37:f3:f6:e2:
                    6c:9c:dd:a3:9b:03:b0:9c:3b:b0:48:a3:d4:0b:2f:
                    9b:b5:1e:69:af:d7:c8:30:21:0a:8e:9b:14:2e:01:
                    11:b0:42:a3:1f:59:f2:ed:e3:0e:40:9e:aa:a8:89:
                    0b:59:e5:eb:7f:c3:30:ea:a6:ec:a0:d8:91:12:38:
                    91:d6:e3:e9:d7:33:af:7f:e2:32:f9:31:9f:eb:cf:
                    a8:4e:29:6a:ac:42:f0:5e:5d:06:65:35:e0:28:2d:
                    bf:d5:08:a7:7a:fc:48:35:6c:0c:2f:97:dd:d6:4a:
                    4e:30:3a:ab:87:a7:10:ac:5a:7a:fe:60:ed:db:b9:
                    70:80:b5:cc:09:ad:89:68:f1:74:af:5e:0b:c3:22:
                    07:04:7b:db:6c:93:35:8e:80:c0:c6:09:81:17:57:
                    cb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:39:6D:3A:A6:BD:AE:6C:DF:4E:A9:B9:DB:E9:F5:41:AF:51:EE:21
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38352e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:69:90:43:72:1f:a3:59:30:ac:a1:bf:82:d2:58:93:f6:fa:
         86:e3:ba:3c:08:28:87:d5:ac:74:8b:c6:82:09:92:b0:d7:f5:
         b9:e6:0f:da:15:fc:71:40:e4:44:81:24:c5:6d:dd:52:55:97:
         41:e5:6a:94:94:dc:d9:07:2b:5c:f8:5e:a7:cb:80:e1:1b:36:
         f5:e2:d5:44:ac:b3:23:eb:5d:df:8b:a2:c0:cb:02:ea:82:a8:
         21:a8:1c:ea:06:30:ad:82:94:0e:ce:54:0e:15:9a:b4:28:d0:
         25:b9:9b:74:cb:94:88:9b:ee:73:e1:d4:ab:bb:97:58:06:bb:
         ba:68:43:07:18:17:b1:3a:d0:9a:52:9c:72:ce:d6:3e:b4:ba:
         62:e5:50:cf:cc:5c:bc:7a:ad:fa:b5:d7:fb:ef:d9:35:a6:59:
         f7:7d:bf:3c:ec:2c:01:eb:70:a5:a3:52:83:7c:f2:1c:8f:1c:
         0a:b1:1b:cd:5f:f9:f3:e7:69:bf:b6:57:76:05:27:55:9d:27:
         61:c9:d8:b4:57:67:5e:78:ad:62:b3:b5:2f:85:07:88:e2:08:
         7e:38:e0:39:ee:75:93:94:49:e7:09:c0:86:1e:1a:95:92:5b:
         7c:ee:09:91:eb:ff:20:80:2a:ea:21:2f:66:70:84:a5:0b:ce:
         bc:8d:a5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:19 2024 by rpki-client on console-fra.rpki-client.org