Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38372e302f32342d3234203d3e20323632333532.roa
File:                     3137372e3132362e38372e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          /ly6MQLwTiaKazKrAUwTfjUiw2xNfEolfWwXxLWmglA=
Subject key identifier:   A3:29:80:19:69:BD:EA:E8:CB:35:B7:82:FB:6B:63:7D:F8:50:18:9D
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       6E5D88D3181FBDB0B7ED5EC627A1BEBBD1F67028
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38372e302f32342d3234203d3e20323632333532.roa
Signing time:             Thu 04 Apr 2024 15:23:28 +0000
ROA not before:           Thu 04 Apr 2024 15:18:28 +0000
ROA not after:            Thu 03 Apr 2025 15:23:28 +0000
asID:                     262352
IP address blocks:        177.126.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:5d:88:d3:18:1f:bd:b0:b7:ed:5e:c6:27:a1:be:bb:d1:f6:70:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Apr  4 15:18:28 2024 GMT
            Not After : Apr  3 15:23:28 2025 GMT
        Subject: CN=A329801969BDEAE8CB35B782FB6B637DF850189D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1b:31:f0:9e:5a:c5:da:ee:3d:20:5f:eb:23:
                    50:8d:2c:29:a9:f5:aa:c1:47:75:87:e3:71:0a:ea:
                    4d:5f:85:3e:82:00:b7:8f:bf:f2:3a:db:df:72:99:
                    9b:dc:31:7c:77:3f:28:a8:ca:fb:ac:75:ee:82:ae:
                    b7:c3:aa:a0:fd:b2:6c:51:01:74:2b:77:3c:67:01:
                    cd:d9:0d:07:0a:d9:b3:25:e6:94:57:ca:5b:64:91:
                    ff:ef:d9:2b:ce:08:ae:74:54:ff:f7:0f:e3:a3:92:
                    16:ed:10:57:cb:d4:0c:e1:9e:55:09:b5:e2:ab:d5:
                    47:3f:d5:38:ca:24:86:6a:e2:90:71:aa:b0:d8:81:
                    58:4e:97:44:c8:f1:43:e2:52:fa:54:40:6b:51:c9:
                    eb:3e:18:b1:b3:87:bd:7c:30:7d:a4:ac:71:58:15:
                    ed:72:1b:81:4d:46:c6:6b:d3:68:d4:bc:01:c9:27:
                    98:3f:2f:08:90:6a:17:0e:f3:09:96:c6:25:d3:43:
                    d4:b1:fe:58:7c:b6:c5:09:7a:c3:c9:b2:eb:79:90:
                    37:e3:d7:fc:a7:8e:78:f8:20:ce:21:49:50:6c:b8:
                    37:cf:48:43:ac:1b:06:96:bf:bc:2d:65:a9:44:89:
                    64:27:02:74:5a:c7:37:5a:97:9f:f2:f3:9c:05:17:
                    97:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:29:80:19:69:BD:EA:E8:CB:35:B7:82:FB:6B:63:7D:F8:50:18:9D
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38372e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:45:61:ef:72:c5:d6:96:54:33:08:d4:fc:46:a6:3e:d9:52:
         c0:11:a0:05:51:a1:70:04:21:09:4c:ff:6b:a5:1c:55:3a:0c:
         f4:50:de:b1:7e:04:6b:f3:d3:90:34:17:5c:7f:e3:df:1f:0a:
         e7:f7:19:c7:2d:c3:57:8b:c9:5f:ce:86:91:c7:77:08:7b:bd:
         b8:63:9b:52:64:20:9d:c8:7c:d5:e5:a9:d9:ad:7e:89:ce:00:
         d7:45:e5:ac:b0:fe:10:64:53:7d:be:62:82:7e:b0:b3:a9:cc:
         57:f3:0e:48:aa:e5:02:15:36:79:50:07:d6:81:51:38:23:6d:
         e5:2f:62:7a:f4:f1:a4:66:10:c3:09:d9:28:60:04:99:94:de:
         61:0c:5d:1a:e2:8a:ec:1d:01:d3:bc:52:74:f2:78:30:ec:ee:
         c6:64:cf:b3:3d:02:6b:74:91:f8:63:ed:0c:10:5f:48:7e:0f:
         40:94:b9:f7:2b:af:b6:2b:72:c7:99:a2:e5:6f:22:43:e2:6a:
         86:16:f5:d6:eb:e5:ad:91:af:e3:a4:cc:01:8d:97:df:10:ac:
         dc:32:4d:28:f4:4d:0b:f1:2d:01:b9:a8:ec:1d:0a:9f:5b:b0:
         80:7a:7b:e5:9f:d7:42:4f:ce:ea:67:19:54:0e:d4:b4:31:93:
         ea:e5:4b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:50:52 2024 by rpki-client on console-ams.rpki-client.org