Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39322e302f32322d3232203d3e20323632333532.roa
File:                     3137372e3132362e39322e302f32322d3232203d3e20323632333532.roa (raw, json)
Hash identifier:          gGMIrpBXmoKBxUk0mnoxy1D7bm2xhroH2aKZ0QWASkc=
Subject key identifier:   9F:F8:76:19:A7:58:26:5B:1C:4A:DD:FB:98:C7:7B:9A:74:B6:4B:23
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       1969B440BA50ED4008F6CEE382B24E1CDA84E335
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39322e302f32322d3232203d3e20323632333532.roa
Signing time:             Thu 04 Apr 2024 15:23:27 +0000
ROA not before:           Thu 04 Apr 2024 15:18:27 +0000
ROA not after:            Thu 03 Apr 2025 15:23:27 +0000
asID:                     262352
IP address blocks:        177.126.92.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:69:b4:40:ba:50:ed:40:08:f6:ce:e3:82:b2:4e:1c:da:84:e3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Apr  4 15:18:27 2024 GMT
            Not After : Apr  3 15:23:27 2025 GMT
        Subject: CN=9FF87619A758265B1C4ADDFB98C77B9A74B64B23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a5:d1:3c:03:ef:46:42:8e:e8:86:5f:d7:99:
                    51:2c:dc:a6:e7:e6:4f:7c:c3:7a:55:f4:7a:ba:94:
                    ab:82:bf:f8:5e:ec:3d:08:6a:7d:e1:c2:73:28:e7:
                    38:95:e6:64:0d:a3:7e:0d:2d:9b:32:2e:83:be:a3:
                    b7:eb:24:0f:45:f7:58:89:10:e1:17:8b:46:2e:d5:
                    9f:6f:fa:e9:ba:78:19:bc:88:21:1b:c9:74:cd:fd:
                    cf:65:0a:e1:df:04:46:e8:a2:19:1a:5e:88:f7:2b:
                    47:d0:ab:fc:ac:53:79:13:4f:b4:15:a1:97:64:bc:
                    dc:ee:04:38:4e:d3:2c:f0:fb:64:b9:01:f6:21:87:
                    0d:1d:3f:fe:b5:0b:04:8f:dc:87:16:53:ce:1d:0e:
                    b7:07:e5:cf:74:c7:c7:f5:b4:d9:7d:2b:6e:a3:23:
                    06:51:23:42:7c:63:f8:08:4b:27:6f:be:29:19:48:
                    32:80:df:29:22:c4:2d:22:ea:2d:30:24:a0:6a:27:
                    e3:5e:d3:7a:cd:bb:f2:a8:37:44:bf:3e:2e:f8:e1:
                    fa:56:cf:04:ac:7c:3b:8c:44:9d:c9:4b:cd:d4:bb:
                    72:8e:25:53:2e:1d:6c:d1:7f:26:26:db:9a:cf:55:
                    99:36:9e:a7:6a:ca:c9:49:11:cf:9f:40:37:91:5b:
                    91:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F8:76:19:A7:58:26:5B:1C:4A:DD:FB:98:C7:7B:9A:74:B6:4B:23
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39322e302f32322d3232203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:cc:39:31:1b:5a:83:d8:d4:66:ec:e2:ac:47:aa:59:0f:63:
         ce:06:cf:43:87:e8:21:02:07:82:f4:22:73:59:b3:21:64:77:
         a3:f0:ab:a7:a8:05:e2:97:e3:c2:86:cf:06:e4:78:16:c1:e3:
         fe:4d:bc:f8:53:84:c4:ab:29:64:da:0f:88:45:d6:47:09:76:
         68:c5:95:a1:1e:d7:d6:01:75:0f:12:aa:02:88:c7:6e:46:97:
         ee:9e:a2:50:3f:9d:71:31:3d:d7:ca:71:a7:20:de:18:74:12:
         bd:45:58:36:18:d7:af:d9:10:72:7b:08:55:ec:fe:4a:e4:a7:
         2a:94:49:ef:b6:65:a2:b8:ea:97:b4:2b:84:d0:2d:4e:b5:40:
         ef:8b:59:5c:9f:c8:20:24:95:53:bf:ec:14:30:19:79:ff:c6:
         97:e8:86:04:76:39:f2:e9:f6:e2:e3:9d:90:68:70:51:42:27:
         dc:8b:55:69:0b:fd:42:ce:1f:e1:f2:de:12:b6:98:8b:aa:b6:
         4f:42:71:82:07:0d:93:41:46:f6:ac:5b:b8:20:88:3c:21:20:
         cf:fb:09:f4:fc:2c:f3:e4:f0:bc:fb:a8:6a:bc:76:22:a0:51:
         8f:6e:33:5d:f6:c4:ee:fd:d6:a7:36:f6:a9:af:50:83:57:d6:
         cd:bf:8a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:04 2024 by rpki-client on console-fra.rpki-client.org