Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38362e302f32332d3233203d3e20323632333532.roa
File:                     3137372e3132362e38362e302f32332d3233203d3e20323632333532.roa (raw, json)
Hash identifier:          s0mq4H6XnfmPPKLmKzQUBzvlr8D14zyc8u+rHijuIHM=
Subject key identifier:   E4:FF:FE:ED:8A:9D:31:99:4D:9A:DB:66:D3:6A:61:79:03:A5:FA:4C
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       4B550071C55ED8245DD529EE31141D438EBD0E51
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38362e302f32332d3233203d3e20323632333532.roa
Signing time:             Thu 04 Apr 2024 15:23:25 +0000
ROA not before:           Thu 04 Apr 2024 15:18:25 +0000
ROA not after:            Thu 03 Apr 2025 15:23:25 +0000
asID:                     262352
IP address blocks:        177.126.86.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:55:00:71:c5:5e:d8:24:5d:d5:29:ee:31:14:1d:43:8e:bd:0e:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Apr  4 15:18:25 2024 GMT
            Not After : Apr  3 15:23:25 2025 GMT
        Subject: CN=E4FFFEED8A9D31994D9ADB66D36A617903A5FA4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dd:16:bf:6c:70:b3:63:94:6e:d7:9f:9f:26:
                    ae:72:1f:9e:a9:ca:9e:0f:11:43:49:58:7b:60:84:
                    43:f2:24:20:ec:1d:47:64:17:c4:c9:68:58:e4:59:
                    e3:5b:ff:8d:e2:5c:73:8a:2f:fa:0b:e3:76:51:8d:
                    d0:ec:ff:45:15:be:eb:79:b7:91:03:7d:28:8d:49:
                    06:b3:73:8b:31:ad:e3:a2:e4:4c:85:39:d5:5a:0a:
                    9d:bc:e5:f8:5b:b8:f9:71:48:c1:04:2b:8d:c9:fa:
                    fa:6e:3b:92:1d:04:3c:7a:a3:fb:4a:78:42:bc:28:
                    71:14:95:cf:5c:8d:4d:b5:ab:3f:2d:2c:67:9e:14:
                    70:3e:8c:7c:3b:a0:0b:90:92:ed:3d:a2:32:a4:7a:
                    24:7f:75:66:15:16:6f:c7:89:be:7f:b8:5c:08:f9:
                    6d:a4:fd:55:f3:47:b9:cf:51:7c:25:c6:08:6e:67:
                    e5:58:a7:b8:24:7f:59:9f:60:ae:b6:51:de:a4:4d:
                    a3:dc:07:b3:fd:50:2f:c4:0e:62:c4:ee:2b:2c:ec:
                    44:30:14:59:ba:06:16:0d:8a:cc:1c:f5:07:35:2b:
                    f6:fa:5e:14:69:7b:0f:51:d6:8f:4b:83:c7:27:5e:
                    81:50:45:91:6f:16:df:e9:ae:ac:04:5c:13:52:1e:
                    46:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FF:FE:ED:8A:9D:31:99:4D:9A:DB:66:D3:6A:61:79:03:A5:FA:4C
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38362e302f32332d3233203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:3b:32:8d:5f:42:77:67:fa:0e:a3:13:c8:62:9b:35:42:ff:
         f6:8c:f5:2e:63:a9:2c:2f:2c:93:c0:45:19:d4:d3:f3:ba:7b:
         03:ba:6e:e3:41:6f:73:2a:00:8b:ae:12:85:20:19:29:bd:38:
         b7:61:3a:84:cf:06:3a:2b:c5:25:75:ef:55:db:a0:18:de:ce:
         f7:22:54:a2:11:77:e4:99:02:ea:39:bd:7d:f7:6e:c4:ab:9e:
         fa:99:db:1a:6f:1a:e8:97:d2:8f:b4:9b:9b:d6:47:ab:24:26:
         4c:e3:23:21:81:f8:df:a3:82:72:7c:54:d8:80:27:33:4b:61:
         4f:88:9c:d9:05:dc:d4:d6:a4:f8:85:67:1a:46:cf:81:db:11:
         8d:85:d1:42:a8:9f:5a:c8:10:6c:c3:8b:2d:e6:87:6b:57:3c:
         09:68:5a:9c:1e:fa:d5:67:e9:c8:d0:66:35:4d:72:ee:0f:8b:
         6c:93:d1:8d:d8:39:6d:88:f3:00:72:67:90:9a:25:34:57:0c:
         47:8e:73:04:57:b0:13:28:ec:45:66:4e:f1:da:09:dc:34:05:
         21:0c:d5:ff:d6:6d:aa:77:4c:04:6d:39:ee:0b:01:95:da:2f:
         9b:b8:f2:f4:5d:50:f0:94:2d:fa:05:92:5f:bb:7a:47:4e:04:
         83:4a:1f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:19 2024 by rpki-client on console-fra.rpki-client.org