Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38382e302f32332d3233203d3e20323632333532.roa
File:                     3137372e3132362e38382e302f32332d3233203d3e20323632333532.roa (raw, json)
Hash identifier:          C2Ait5qReFdcMiKEcPG4ZU2cGm3wtZk1rabjD2nHDQc=
Subject key identifier:   82:9B:0C:CF:59:DB:66:FD:BA:2C:08:F3:31:3E:EF:68:F2:4D:79:47
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       25F5C7B153E1BA110C881224D82D4CED1F2CEDB3
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38382e302f32332d3233203d3e20323632333532.roa
Signing time:             Thu 04 Apr 2024 15:23:27 +0000
ROA not before:           Thu 04 Apr 2024 15:18:27 +0000
ROA not after:            Thu 03 Apr 2025 15:23:27 +0000
asID:                     262352
IP address blocks:        177.126.88.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f5:c7:b1:53:e1:ba:11:0c:88:12:24:d8:2d:4c:ed:1f:2c:ed:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Apr  4 15:18:27 2024 GMT
            Not After : Apr  3 15:23:27 2025 GMT
        Subject: CN=829B0CCF59DB66FDBA2C08F3313EEF68F24D7947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4d:d3:2e:18:eb:88:9f:20:cb:b5:36:30:3f:
                    5f:d8:22:49:60:b9:ce:ac:87:99:91:64:14:b3:54:
                    1e:d5:37:7c:3b:68:87:a2:a2:ae:2c:71:dc:ce:02:
                    6b:ff:e0:92:69:4c:26:e8:09:e2:57:19:a6:8c:eb:
                    fe:03:5d:97:ab:c0:15:c2:cb:09:9d:e5:cd:2f:f9:
                    cb:f8:a4:27:88:05:08:4b:e4:57:6f:26:2d:95:58:
                    bf:0c:51:98:94:18:76:b3:99:3c:71:ce:0d:b4:67:
                    de:44:31:92:69:1f:83:c7:cf:6d:89:fe:de:d1:4b:
                    f6:c7:69:ca:4b:74:dd:25:99:7c:44:b0:93:5f:c9:
                    34:98:d3:89:63:52:d6:29:cb:9f:45:7b:b0:2e:13:
                    1f:70:70:bd:12:36:94:bc:a8:b1:37:26:7f:08:fc:
                    82:e7:25:85:b7:92:b2:c2:30:9a:b2:fc:40:26:5f:
                    6f:c0:fd:c2:e7:34:b1:2e:31:d0:85:a3:f4:30:67:
                    c0:5c:9d:eb:c1:56:8b:57:0c:02:84:ed:89:e4:21:
                    5c:c8:ee:c4:87:0a:e8:fb:8e:e5:52:22:82:3a:64:
                    40:3e:e6:1a:fe:ff:8b:59:5a:93:8c:62:e1:db:a6:
                    fc:59:f5:e5:20:7b:8e:43:2c:15:ef:d9:12:bf:0a:
                    d3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9B:0C:CF:59:DB:66:FD:BA:2C:08:F3:31:3E:EF:68:F2:4D:79:47
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38382e302f32332d3233203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:ed:13:89:65:ae:b1:d1:1b:4a:7b:12:c3:74:7b:bf:56:03:
         66:d3:b0:b1:0c:83:78:e0:be:9a:26:fa:14:6e:bb:7f:8f:14:
         62:cf:94:73:da:96:bd:f5:cf:dc:17:0b:a3:e6:47:7b:73:ab:
         aa:9f:96:71:6d:c2:0e:ef:38:64:cf:2c:cf:2e:c9:3c:9e:f1:
         50:27:1a:1a:cd:58:d4:dd:63:af:ea:9f:dc:a3:d0:a4:16:49:
         47:50:ba:ee:ef:cb:1e:60:66:5a:c1:21:9f:c0:2c:fa:a2:15:
         98:a4:3b:c0:38:2d:6e:b1:38:62:e6:6a:93:d2:7d:18:12:17:
         30:6b:81:d8:44:c2:5a:b3:38:09:58:65:36:fc:2c:30:76:45:
         07:26:b1:93:60:59:36:72:de:bf:61:de:bf:39:54:f4:56:c7:
         8f:7d:6a:33:b8:14:3d:23:50:47:30:3d:90:75:de:97:92:e8:
         76:dc:57:7b:33:06:8a:fc:99:73:40:88:1f:d5:8f:4d:7b:da:
         39:ef:a4:04:62:36:c9:0f:0b:23:77:b3:6a:36:dd:f0:d1:7c:
         e9:6b:06:e9:bd:35:d8:dc:4d:e1:2f:bf:6c:05:9c:a8:e9:87:
         3c:04:d5:84:8e:50:ae:63:7f:83:79:03:ef:2f:d6:a0:4a:d0:
         f1:e3:55:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:19 2024 by rpki-client on console-fra.rpki-client.org