Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39312e302f32342d3234203d3e20323632333532.roa
File:                     3137372e3132362e39312e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          Ghrrb2wH9iMKJHHh2mOJCTrfozB1s9bxqxqWZdnkyGg=
Subject key identifier:   CD:A6:5D:7C:A9:DF:82:36:98:AE:D6:95:85:E9:CF:A7:72:3E:29:9F
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       6D214FEB5E8914298FA26E9519C8C8E278BCDBFC
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39312e302f32342d3234203d3e20323632333532.roa
Signing time:             Thu 04 Apr 2024 15:23:27 +0000
ROA not before:           Thu 04 Apr 2024 15:18:27 +0000
ROA not after:            Thu 03 Apr 2025 15:23:27 +0000
asID:                     262352
IP address blocks:        177.126.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:21:4f:eb:5e:89:14:29:8f:a2:6e:95:19:c8:c8:e2:78:bc:db:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Apr  4 15:18:27 2024 GMT
            Not After : Apr  3 15:23:27 2025 GMT
        Subject: CN=CDA65D7CA9DF823698AED69585E9CFA7723E299F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:64:a2:79:74:54:f5:bd:31:97:64:87:fd:38:
                    cb:54:8c:40:01:d3:e9:22:42:e6:0b:ab:f0:0f:e2:
                    0e:bf:f6:f6:46:e5:0f:f4:ab:ef:0c:86:98:e7:82:
                    2c:8e:cf:06:42:5d:66:ff:5a:fe:62:3d:68:f6:48:
                    d8:83:0f:51:ec:df:d3:28:92:e9:b1:b4:83:d9:03:
                    a8:a8:44:01:bf:b5:27:7c:a4:e7:28:91:c6:35:ef:
                    53:92:d1:69:bf:e6:7a:be:7e:78:84:55:06:24:ec:
                    39:5f:7e:d4:98:cd:2e:01:af:f2:39:52:8e:6d:3d:
                    7f:00:ae:c0:00:87:21:f1:20:20:d0:9a:97:57:e7:
                    14:e5:ae:e4:c3:8d:8e:d9:23:b6:b4:12:90:0b:d1:
                    5c:d8:70:a4:b1:32:10:3a:0c:d8:91:95:71:bb:00:
                    ee:a8:ce:8d:20:9a:f0:5f:58:20:ab:1f:2f:a2:81:
                    b1:ab:18:17:ea:f5:ea:3b:03:22:08:d1:e2:16:ea:
                    5d:ca:46:98:cf:ab:ed:64:30:85:22:66:01:3e:cb:
                    f6:59:95:e7:44:38:54:4a:aa:f6:68:f4:37:5b:87:
                    1a:fe:0a:5b:18:57:be:4c:96:50:99:21:a4:4a:66:
                    e5:df:3f:20:74:b8:3d:c9:ee:d8:19:48:52:2e:fa:
                    b8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A6:5D:7C:A9:DF:82:36:98:AE:D6:95:85:E9:CF:A7:72:3E:29:9F
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39312e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:a0:ea:65:3d:4a:88:85:6c:53:c2:36:0b:0d:b3:58:51:3d:
         06:bf:d1:c4:b7:af:00:97:f4:7c:12:93:b3:14:eb:f2:46:c9:
         b2:e0:4c:6c:59:62:ef:6d:e3:f3:68:42:6e:88:56:49:dd:2e:
         f7:b6:dc:b6:8a:f9:b9:ce:05:22:ca:35:dc:f0:78:82:b3:a1:
         db:f7:37:6e:1d:42:07:f1:a6:ee:10:0b:ea:2c:fe:3e:69:f7:
         c8:f7:b2:88:08:4a:af:25:a7:3f:76:2d:1a:3d:cc:e0:96:46:
         f8:13:3a:bb:64:c6:ce:54:fe:7c:51:97:b9:84:8b:25:58:83:
         50:dc:76:de:01:13:13:01:59:e9:20:37:a2:b1:51:e3:28:58:
         f2:49:c0:07:f8:e6:07:f5:d4:74:09:31:f6:80:6f:ae:a0:b9:
         50:2c:fa:17:d8:10:09:ed:f7:7a:ff:74:d4:f7:f9:0c:19:92:
         e2:ca:7f:4e:48:c6:86:fe:90:af:3c:08:63:7b:f5:5e:59:f7:
         84:3e:70:dd:09:93:aa:f0:27:cf:5c:5a:c9:97:e8:55:67:ff:
         0d:3f:23:20:2d:d8:99:4e:09:80:f4:24:f7:0b:96:05:7b:5f:
         3a:b6:a6:1e:d3:b9:d6:19:48:8c:c1:23:d4:5f:ac:10:d0:93:
         e0:ea:97:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:50:52 2024 by rpki-client on console-ams.rpki-client.org