Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39302e302f32342d3234203d3e20323632333532.roa
File:                     3137372e3132362e39302e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          RN9grIpz4LSfnHpxN3DobVr4Qwcq8dMzCOQx0qcvXTE=
Subject key identifier:   55:58:0E:79:11:97:65:55:12:50:E2:97:A8:D2:51:21:10:15:F7:A9
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       7D7F86EE155FE5F2F635DA36DD9A5782E5480867
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39302e302f32342d3234203d3e20323632333532.roa
Signing time:             Thu 04 Apr 2024 15:23:29 +0000
ROA not before:           Thu 04 Apr 2024 15:18:29 +0000
ROA not after:            Thu 03 Apr 2025 15:23:29 +0000
asID:                     262352
IP address blocks:        177.126.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:7f:86:ee:15:5f:e5:f2:f6:35:da:36:dd:9a:57:82:e5:48:08:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Apr  4 15:18:29 2024 GMT
            Not After : Apr  3 15:23:29 2025 GMT
        Subject: CN=55580E79119765551250E297A8D251211015F7A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ac:44:b4:b6:a5:76:9b:17:24:08:3f:fa:1c:
                    59:e9:83:c9:4c:4f:5f:be:94:1e:8b:ec:04:b3:e6:
                    a6:5e:c7:0f:a0:e0:f0:1c:14:79:6e:cb:36:3f:79:
                    20:82:01:5e:ad:7f:91:42:6d:87:4f:06:7c:30:b0:
                    df:e4:61:51:b2:35:9d:5e:45:d1:b6:4d:bf:f0:44:
                    24:7c:f4:48:21:35:e4:75:00:e8:3b:7a:9c:49:41:
                    a4:5c:6a:e0:6d:d6:a5:59:d7:89:d1:72:00:8e:91:
                    b1:48:a5:6c:7b:b8:16:1c:d2:2c:a9:8b:24:00:22:
                    08:a9:32:04:33:b2:a3:fe:a0:4c:32:31:ac:0e:9a:
                    c0:22:da:fd:80:b3:b2:f9:4f:46:28:74:09:61:72:
                    b1:7b:14:9b:e4:82:21:dd:22:57:7c:5e:34:47:f8:
                    3d:97:c5:4e:94:37:2d:14:c1:15:1a:0d:c4:0e:bb:
                    fe:52:09:a3:73:b3:b9:6b:6c:90:f9:0b:a4:bb:38:
                    f8:ff:1b:9e:f6:47:cf:6a:64:a5:a6:d9:f3:d4:7e:
                    06:af:e3:4b:97:d5:a9:30:6a:2b:1d:2f:f6:d1:ed:
                    47:fd:9b:5d:19:b5:04:1b:76:96:3d:ee:fb:5d:fc:
                    2e:34:76:24:6c:f4:21:74:79:6d:96:6f:c1:78:84:
                    2a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:58:0E:79:11:97:65:55:12:50:E2:97:A8:D2:51:21:10:15:F7:A9
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39302e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:e0:ed:2b:ac:0d:15:88:bc:23:7d:df:f0:f8:1f:ba:7e:06:
         cc:2a:22:29:e5:dc:01:f5:8e:ff:e4:cd:ec:bf:4e:43:b6:a5:
         f1:29:6d:1e:cd:e7:b7:27:66:05:08:1d:11:1c:36:09:4f:2a:
         82:cc:1b:21:40:5e:e3:78:06:cc:c3:02:30:a0:f2:01:7a:0b:
         4b:86:fd:15:0e:36:a3:b3:22:39:f3:e4:fa:1b:89:b5:76:f6:
         0a:ec:e6:18:87:65:09:a4:b7:b0:bf:20:7c:17:13:37:99:55:
         ae:23:11:ef:c9:34:ff:5a:f7:fc:63:5f:c6:72:d0:bc:03:8c:
         2b:2d:e1:6d:5b:8a:f7:e8:98:ea:94:61:fa:4f:e2:6c:e9:b0:
         03:04:f5:f4:46:98:f5:25:55:ee:91:83:15:b5:80:fc:0e:69:
         77:cb:4a:8f:b6:74:95:b3:1e:8c:04:68:e7:5a:19:8c:51:10:
         1e:57:de:b5:1a:46:7e:fc:3e:65:76:05:69:20:16:44:36:01:
         73:f6:bc:8f:c2:75:56:93:06:e7:cd:63:6c:ea:5b:f6:e6:6f:
         4a:4a:34:0b:c8:37:25:71:41:2d:2b:fa:ca:61:07:97:b3:4a:
         33:e2:a1:5e:71:22:47:71:75:c9:29:1c:7a:59:e0:af:cf:e1:
         23:8f:aa:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:19 2024 by rpki-client on console-fra.rpki-client.org