Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39332e302f32342d3234203d3e20323632333532.roa
File:                     3137372e3132362e39332e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          yDRh5CHKPOm3YG3UTcAT3J5EBwGJAl4aFp14U98ocrQ=
Subject key identifier:   A0:FA:EB:AE:C9:E1:7F:42:8E:AC:B0:EC:18:EF:27:25:A2:99:63:22
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       3FF9733DCBC518033A516DD368A0D5FAA496554C
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39332e302f32342d3234203d3e20323632333532.roa
Signing time:             Thu 04 Apr 2024 15:23:29 +0000
ROA not before:           Thu 04 Apr 2024 15:18:29 +0000
ROA not after:            Thu 03 Apr 2025 15:23:29 +0000
asID:                     262352
IP address blocks:        177.126.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f9:73:3d:cb:c5:18:03:3a:51:6d:d3:68:a0:d5:fa:a4:96:55:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Apr  4 15:18:29 2024 GMT
            Not After : Apr  3 15:23:29 2025 GMT
        Subject: CN=A0FAEBAEC9E17F428EACB0EC18EF2725A2996322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:06:fb:e6:7f:c4:66:09:b3:00:63:aa:89:9f:
                    2a:82:67:34:60:c9:a3:ee:53:d4:f1:d0:4e:ee:65:
                    16:a8:66:9e:1f:02:26:69:86:1a:18:8e:de:d6:b1:
                    40:6a:ee:b2:25:d6:a8:58:b0:60:ea:66:35:2e:d5:
                    2b:0f:9d:2e:f4:38:8a:31:4a:8e:ba:81:95:51:34:
                    7c:92:83:71:f0:01:00:40:99:57:fb:92:2a:8f:ff:
                    54:1f:2a:3c:9e:fd:dc:be:2a:36:75:d1:a4:c3:d1:
                    aa:42:65:a7:aa:7c:13:2c:bd:9b:da:1a:b7:0b:dc:
                    5d:0c:12:ec:a2:1f:84:95:9b:de:2b:ac:dc:61:fb:
                    db:9f:78:04:f1:a7:66:cc:7c:34:32:42:db:9f:6a:
                    fd:29:be:4f:35:87:e6:f7:65:c6:04:10:68:0a:90:
                    b8:ff:05:2e:e8:67:85:b4:28:1f:59:9a:34:9c:55:
                    0d:5a:65:6f:ed:b8:4b:fd:b5:b1:85:97:5e:5f:75:
                    b0:09:63:4b:cf:63:2c:ac:1f:44:7a:c7:08:2c:fb:
                    b7:16:ee:ee:c7:d3:ea:73:4c:03:91:05:14:68:e9:
                    aa:00:a8:38:a3:e4:f6:c8:b8:ba:94:cc:3d:c6:c7:
                    ba:38:ec:3d:ef:f4:06:5d:fd:c4:f9:3e:78:51:61:
                    33:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FA:EB:AE:C9:E1:7F:42:8E:AC:B0:EC:18:EF:27:25:A2:99:63:22
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39332e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:45:72:ec:82:f5:de:53:25:f0:06:4a:4d:cd:eb:9f:e9:8e:
         b9:23:56:dc:9a:75:11:f6:a3:84:1a:8b:e3:17:e4:67:ff:e0:
         be:e8:a6:6e:5c:08:58:1d:62:24:dd:1d:79:53:d7:9a:52:ae:
         66:cc:70:10:98:59:d3:5d:4f:d6:b1:ec:78:85:6c:29:4f:30:
         41:d8:23:ed:bd:f2:5d:5d:ba:4b:20:23:e6:0c:81:b0:2a:2d:
         a0:9d:c4:2b:d5:37:d9:ab:5a:d5:76:fc:4d:ce:f8:99:7d:ed:
         cb:46:2b:a6:b8:0e:72:2e:d7:39:a9:6a:04:12:b8:3c:16:76:
         79:25:aa:eb:fd:b7:86:73:c7:ba:95:99:8d:25:52:bc:c3:d5:
         63:10:c1:4b:79:ca:f3:fd:e4:2a:39:13:5c:f2:3e:a3:f9:8b:
         69:3c:0a:af:d4:60:da:26:40:29:41:4b:2c:f0:c9:df:7a:4c:
         b4:0b:8a:48:17:50:99:8e:34:2b:ac:41:30:b8:f0:f0:0e:af:
         5f:7c:30:bf:05:15:73:d2:89:fd:af:e0:28:a7:cd:f2:9f:ab:
         da:4e:f3:ff:21:a3:47:e0:57:31:83:32:16:11:c1:79:fe:ac:
         c2:e2:f5:d1:89:a4:13:0d:c6:63:e5:e6:9d:72:7f:6f:91:61:
         0a:d6:3e:83
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUP/lzPcvFGAM6UW3TaKDV+qSWVUwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE3MEM0MDg1QTIwQ0Q2QUE0NTFGQkNBQzJDQjhGMkND
REJBM0U5NzAeFw0yNDA0MDQxNTE4MjlaFw0yNTA0MDMxNTIzMjlaMDMxMTAvBgNV
BAMTKEEwRkFFQkFFQzlFMTdGNDI4RUFDQjBFQzE4RUYyNzI1QTI5OTYzMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkBvvmf8RmCbMAY6qJnyqCZzRg
yaPuU9Tx0E7uZRaoZp4fAiZphhoYjt7WsUBq7rIl1qhYsGDqZjUu1SsPnS70OIox
So66gZVRNHySg3HwAQBAmVf7kiqP/1QfKjye/dy+KjZ10aTD0apCZaeqfBMsvZva
GrcL3F0MEuyiH4SVm94rrNxh+9ufeATxp2bMfDQyQtufav0pvk81h+b3ZcYEEGgK
kLj/BS7oZ4W0KB9ZmjScVQ1aZW/tuEv9tbGFl15fdbAJY0vPYyysH0R6xwgs+7cW
7u7H0+pzTAORBRRo6aoAqDij5PbIuLqUzD3Gx7o47D3v9AZd/cT5PnhRYTPzAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUoPrrrsnhf0KOrLDsGO8nJaKZYyIwHwYDVR0j
BBgwFoAUgXDECFogzWqkUfvKwsuPLM26PpcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby8xbjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1
LzUvODE3MEM0MDg1QTIwQ0Q2QUE0NTFGQkNBQzJDQjhGMkNDREJBM0U5Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84MTcwQzQwODVBMjBDRDZBQTQ1
MUZCQ0FDMkNCOEYyQ0NEQkEzRTk3LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8x
bjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1LzUvMzEz
NzM3MmUzMTMyMzYyZTM5MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIz
MzM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACxfl0wDQYJKoZIhvcNAQELBQADggEBAGRFcuyC9d5T
JfAGSk3N65/pjrkjVtyadRH2o4Qai+MX5Gf/4L7opm5cCFgdYiTdHXlT15pSrmbM
cBCYWdNdT9ax7HiFbClPMEHYI+298l1duksgI+YMgbAqLaCdxCvVN9mrWtV2/E3O
+Jl97ctGK6a4DnIu1zmpagQSuDwWdnklquv9t4Zzx7qVmY0lUrzD1WMQwUt5yvP9
5Co5E1zyPqP5i2k8Cq/UYNomQClBSyzwyd96TLQLikgXUJmONCusQTC48PAOr198
ML8FFXPSif2v4CinzfKfq9pO8/8ho0fgVzGDMhYRwXn+rMLi9dGJpBMNxmPl5p1y
f2+RYQrWPoM=
-----END CERTIFICATE-----
Generated at Fri Jun 28 09:50:52 2024 by rpki-client on console-ams.rpki-client.org