Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39342e302f32332d3233203d3e20323632333532.roa
File:                     3137372e3132362e39342e302f32332d3233203d3e20323632333532.roa (raw, json)
Hash identifier:          3VNdQyxrownY0oFYbO+EJ7ADMlC77TBTQ0MmmKzfu7Y=
Subject key identifier:   B7:43:E3:79:B5:57:CB:E5:79:FB:B0:C6:07:FD:F5:EC:66:F0:0D:8B
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       20CFD41DE13E4D6DA78A151D5D4562ADCFDC9F98
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39342e302f32332d3233203d3e20323632333532.roa
Signing time:             Thu 04 Apr 2024 15:23:27 +0000
ROA not before:           Thu 04 Apr 2024 15:18:27 +0000
ROA not after:            Thu 03 Apr 2025 15:23:27 +0000
asID:                     262352
IP address blocks:        177.126.94.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:cf:d4:1d:e1:3e:4d:6d:a7:8a:15:1d:5d:45:62:ad:cf:dc:9f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Apr  4 15:18:27 2024 GMT
            Not After : Apr  3 15:23:27 2025 GMT
        Subject: CN=B743E379B557CBE579FBB0C607FDF5EC66F00D8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a4:3e:02:23:70:44:5b:fc:fa:46:dc:dd:26:
                    1d:38:7f:65:c0:24:5f:20:8d:7c:82:23:02:33:a2:
                    f8:d4:e3:8d:13:5e:89:22:4f:b0:55:01:7c:8e:6f:
                    87:4f:41:6e:82:72:2f:e3:ea:f5:a9:5b:27:d7:cb:
                    6d:26:08:6e:f7:67:ec:b6:fd:e5:b1:27:1c:e9:b0:
                    a5:da:54:6b:4c:e6:7a:e5:43:b7:07:19:38:c0:f8:
                    c2:94:ee:08:1a:6e:8f:98:62:af:72:a8:16:9e:2d:
                    5d:80:bc:ff:18:ec:d6:0d:ec:84:21:e4:5b:37:0c:
                    29:f6:15:93:0d:3d:71:71:75:38:be:e3:08:15:3d:
                    79:a1:65:a4:b4:5a:86:c8:27:a4:c8:6e:a4:5f:25:
                    e9:fe:95:a9:d8:ef:cd:fd:fc:1e:d6:8b:c0:7a:d0:
                    9e:5c:76:cc:d0:9a:3e:39:04:30:90:ae:99:9b:05:
                    7e:1b:98:db:c6:bf:07:2c:84:8f:bd:44:9a:31:9a:
                    e6:8e:cc:e1:ef:1b:0a:1c:41:2c:33:9b:8c:c1:b4:
                    d5:cd:d9:15:f9:3c:77:22:d6:e3:b9:21:8f:5e:d1:
                    e4:88:14:1c:68:71:78:a4:00:b4:27:f0:04:75:fa:
                    2b:3b:3e:22:96:3f:b7:2b:cf:42:13:2e:42:c7:98:
                    e5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:43:E3:79:B5:57:CB:E5:79:FB:B0:C6:07:FD:F5:EC:66:F0:0D:8B
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39342e302f32332d3233203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:0c:88:cc:bd:e1:ef:81:9f:85:3c:c9:dd:66:97:30:82:d9:
         77:43:91:b4:df:e1:18:da:b4:cf:9e:b4:67:bd:a6:e1:65:82:
         41:65:d0:b5:35:28:4e:1c:71:c9:25:e9:9e:85:0d:2f:fd:d6:
         33:3e:c8:80:b5:e4:9f:2f:e5:f7:4c:06:93:c3:56:1c:14:5a:
         25:ae:4b:2d:a3:ed:1e:d7:23:be:8f:c0:4c:3b:0a:20:02:5c:
         5a:6c:72:d7:5c:8e:88:31:37:b4:5b:ea:81:09:1c:7a:cc:78:
         19:19:97:29:23:4b:0c:8e:46:30:2b:74:a9:f1:ed:0e:8e:4f:
         a8:89:55:19:3e:a2:5c:ae:eb:f0:84:6b:e7:e6:70:99:8f:df:
         7e:d0:12:7f:42:de:ac:4b:e1:df:88:78:04:95:92:42:88:73:
         4a:68:27:b9:96:a3:f0:fc:71:17:ee:bc:0a:87:56:72:80:67:
         75:b8:97:91:e8:69:29:61:25:1b:75:29:c0:c5:66:77:ae:08:
         4b:73:e2:5d:2b:a1:4e:08:4b:4d:45:03:b9:ff:c8:9e:be:44:
         2e:83:18:5d:36:de:80:f1:44:35:44:df:1c:3c:52:9f:45:1e:
         a1:24:76:18:8f:d0:99:28:f3:31:5d:30:01:3d:fc:1c:66:d2:
         3f:c6:22:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:19 2024 by rpki-client on console-fra.rpki-client.org