Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39302e302f32342d3234203d3e20323632333532.roa
File:                     3137372e3132362e39302e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          nzYk2mqbdI1ZPJF47XtXpKDXqGN4FjhMxuTx9/AkXZk=
Subject key identifier:   5E:C4:85:CA:27:1F:7C:E2:70:7B:EB:EE:06:89:FD:44:6A:CC:CA:79
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       25E1163684C324582BA36A49A0D892A47A54B01C
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39302e302f32342d3234203d3e20323632333532.roa
Signing time:             Mon 28 Oct 2024 13:55:09 +0000
ROA not before:           Mon 28 Oct 2024 13:50:09 +0000
ROA not after:            Mon 27 Oct 2025 13:55:09 +0000
asID:                     262352
IP address blocks:        177.126.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e1:16:36:84:c3:24:58:2b:a3:6a:49:a0:d8:92:a4:7a:54:b0:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Oct 28 13:50:09 2024 GMT
            Not After : Oct 27 13:55:09 2025 GMT
        Subject: CN=5EC485CA271F7CE2707BEBEE0689FD446ACCCA79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8a:5b:37:0a:9c:e2:23:0b:7e:e9:2c:d8:5e:
                    c0:d2:47:74:e4:a3:6b:73:43:fe:a2:33:92:fb:c9:
                    a0:b9:34:81:de:72:6e:81:7f:44:2a:aa:c4:5d:3d:
                    34:12:e6:7a:e1:e1:cb:ab:78:50:e1:66:25:57:2f:
                    60:22:22:6b:75:63:fc:95:86:19:d6:4d:1a:90:43:
                    a5:03:7d:f8:db:a8:68:ad:18:35:7d:68:5c:b9:3a:
                    41:08:ef:1e:cf:42:b0:ca:a0:1f:d6:ff:c4:08:89:
                    48:d0:90:6d:3b:a5:a4:e1:3a:b0:44:7d:bb:67:79:
                    a3:bf:24:54:28:c8:14:dc:42:92:11:d9:b8:22:17:
                    f6:d6:a4:79:3a:5c:f8:83:06:e4:76:e0:e8:34:75:
                    33:35:f0:1a:80:7a:ed:cc:a6:e1:e6:88:05:51:4a:
                    cd:81:07:2b:aa:e2:1a:ed:30:ae:57:f5:dd:65:a2:
                    d6:d3:28:1b:73:e9:be:d0:5b:b2:ac:56:00:77:f6:
                    20:22:d4:45:eb:dd:d2:9f:40:20:b7:e8:68:52:c5:
                    a2:43:1f:f5:be:83:5a:cd:02:92:a0:2e:b8:84:5c:
                    68:06:2e:e0:b7:96:5e:22:09:23:e5:04:96:bb:6e:
                    08:e0:d7:34:42:b8:0b:da:bb:93:74:81:a2:bc:88:
                    58:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C4:85:CA:27:1F:7C:E2:70:7B:EB:EE:06:89:FD:44:6A:CC:CA:79
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39302e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:85:c1:d8:58:b4:34:59:19:d0:2e:5d:91:11:8d:0b:09:dc:
         55:44:e5:45:fe:40:5f:e9:ac:28:6e:b5:77:0b:b3:67:7b:9e:
         ea:7f:6b:9b:f6:41:54:a6:87:e5:79:ff:eb:b5:60:6a:82:e4:
         b1:30:b2:3f:c5:9c:5b:e6:0a:33:5f:f0:33:c8:57:9a:66:91:
         f1:43:d7:6e:80:e8:bf:d8:d9:94:c0:c4:3b:88:8f:d2:77:83:
         df:5b:ae:13:ba:62:b3:43:49:5a:1f:00:bf:b9:58:01:5d:5c:
         31:d9:94:71:0d:25:f3:54:11:c1:be:b2:d6:11:f9:0b:af:72:
         bd:cd:94:be:e4:eb:2a:59:12:2d:85:34:42:45:e9:4d:d5:11:
         1c:51:9f:d7:5e:54:74:ad:a5:d3:05:f8:d8:c0:1e:d2:98:c7:
         9d:58:4b:38:3a:9f:23:46:2b:af:25:b3:84:10:58:fc:cf:59:
         00:a7:36:c7:e9:6d:29:82:b2:8b:ad:d0:54:9d:7c:98:88:a6:
         0c:e5:49:37:05:09:38:6f:e2:88:d9:b1:3f:98:98:e8:a4:79:
         89:4b:ba:33:ce:c2:b1:27:50:20:9d:c1:85:ac:e8:04:5f:64:
         9c:f3:56:49:85:03:38:9c:f6:72:a3:7d:9d:1d:4e:bb:f3:f1:
         3b:b4:82:3a
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUJeEWNoTDJFgro2pJoNiSpHpUsBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE3MEM0MDg1QTIwQ0Q2QUE0NTFGQkNBQzJDQjhGMkND
REJBM0U5NzAeFw0yNDEwMjgxMzUwMDlaFw0yNTEwMjcxMzU1MDlaMDMxMTAvBgNV
BAMTKDVFQzQ4NUNBMjcxRjdDRTI3MDdCRUJFRTA2ODlGRDQ0NkFDQ0NBNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ils3CpziIwt+6SzYXsDSR3Tk
o2tzQ/6iM5L7yaC5NIHecm6Bf0QqqsRdPTQS5nrh4cureFDhZiVXL2AiImt1Y/yV
hhnWTRqQQ6UDffjbqGitGDV9aFy5OkEI7x7PQrDKoB/W/8QIiUjQkG07paThOrBE
fbtneaO/JFQoyBTcQpIR2bgiF/bWpHk6XPiDBuR24Og0dTM18BqAeu3MpuHmiAVR
Ss2BByuq4hrtMK5X9d1lotbTKBtz6b7QW7KsVgB39iAi1EXr3dKfQCC36GhSxaJD
H/W+g1rNApKgLriEXGgGLuC3ll4iCSPlBJa7bgjg1zRCuAvau5N0gaK8iFg3AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUXsSFyicffOJwe+vuBon9RGrMynkwHwYDVR0j
BBgwFoAUgXDECFogzWqkUfvKwsuPLM26PpcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby8xbjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1
LzUvODE3MEM0MDg1QTIwQ0Q2QUE0NTFGQkNBQzJDQjhGMkNDREJBM0U5Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84MTcwQzQwODVBMjBDRDZBQTQ1
MUZCQ0FDMkNCOEYyQ0NEQkEzRTk3LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8x
bjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1LzUvMzEz
NzM3MmUzMTMyMzYyZTM5MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIz
MzM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACxflowDQYJKoZIhvcNAQELBQADggEBAAuFwdhYtDRZ
GdAuXZERjQsJ3FVE5UX+QF/prChutXcLs2d7nup/a5v2QVSmh+V5/+u1YGqC5LEw
sj/FnFvmCjNf8DPIV5pmkfFD126A6L/Y2ZTAxDuIj9J3g99brhO6YrNDSVofAL+5
WAFdXDHZlHENJfNUEcG+stYR+Quvcr3NlL7k6ypZEi2FNEJF6U3VERxRn9deVHSt
pdMF+NjAHtKYx51YSzg6nyNGK68ls4QQWPzPWQCnNsfpbSmCsout0FSdfJiIpgzl
STcFCThv4ojZsT+YmOikeYlLujPOwrEnUCCdwYWs6ARfZJzzVkmFAzic9nKjfZ0d
Trvz8Tu0gjo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:51 2024 by rpki-client on console-ams.rpki-client.org