Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39342e302f32342d3234203d3e20323632333532.roa
File:                     3137372e3132362e39342e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          3d4LCyEuqyGbFz8Hh3ddN9fpQoveXi9EIVXZ1MW5wg8=
Subject key identifier:   6E:0E:6F:1A:7E:86:46:04:94:BC:DC:F0:9E:04:00:87:69:2A:2F:B4
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       128BF311F418947CE8AF3D0FE9EE4911CF0277AA
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39342e302f32342d3234203d3e20323632333532.roa
Signing time:             Mon 28 Oct 2024 13:56:02 +0000
ROA not before:           Mon 28 Oct 2024 13:51:02 +0000
ROA not after:            Mon 27 Oct 2025 13:56:02 +0000
asID:                     262352
IP address blocks:        177.126.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:8b:f3:11:f4:18:94:7c:e8:af:3d:0f:e9:ee:49:11:cf:02:77:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Oct 28 13:51:02 2024 GMT
            Not After : Oct 27 13:56:02 2025 GMT
        Subject: CN=6E0E6F1A7E86460494BCDCF09E040087692A2FB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0f:10:72:9a:b5:9a:21:88:12:e0:91:ce:c9:
                    66:d0:0a:db:d7:6f:71:96:f8:e3:b4:41:b7:29:0c:
                    e8:12:4b:a1:8c:11:47:b1:a2:3b:d7:8f:05:62:4d:
                    4e:31:f8:b6:dc:e4:66:d9:13:ce:0a:89:18:1d:58:
                    79:60:f3:e0:78:81:04:55:81:58:17:a2:0a:62:55:
                    87:d4:cc:0f:23:a9:a6:55:78:30:a0:8f:1c:a9:8e:
                    0e:c1:ff:39:51:c8:70:a7:f6:f3:8c:51:5c:ba:27:
                    cd:de:b4:cd:65:f2:94:b3:3b:c6:59:ea:46:3c:43:
                    f3:68:ba:b2:27:7d:0a:0b:b1:fa:ff:9b:62:17:b6:
                    2f:97:94:8a:44:20:a7:c8:82:7b:fc:1c:4a:54:17:
                    1c:ae:6e:e3:21:ab:0b:e5:de:ab:83:e9:cd:72:ff:
                    ed:07:75:33:95:6b:e0:ad:49:a5:dd:bd:c7:95:42:
                    9c:aa:4f:f1:f3:62:d5:b5:2f:5a:44:03:e2:b6:96:
                    3a:db:4d:63:b6:3f:46:e9:7b:9b:72:dd:2a:37:79:
                    ce:80:aa:93:1d:ef:4b:d7:e8:18:e5:04:c2:6f:d4:
                    21:e9:18:88:b5:84:2f:d8:10:a4:8c:8b:46:4c:33:
                    08:f6:07:2f:a6:12:18:5a:30:51:b4:4a:5f:da:5c:
                    dc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0E:6F:1A:7E:86:46:04:94:BC:DC:F0:9E:04:00:87:69:2A:2F:B4
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39342e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:6c:34:14:a1:55:ae:c8:61:51:fd:4c:9a:8c:94:b4:60:d1:
         ee:0e:72:39:3d:2f:fc:10:14:ef:e4:54:b3:a3:76:df:72:01:
         c0:f1:81:96:6b:e8:c8:d0:26:5c:2d:ed:be:a4:b4:a0:3f:ad:
         fe:ef:9f:9c:bc:02:0c:3c:65:1b:0c:36:40:e8:2c:37:50:60:
         9e:c6:c1:b3:83:87:98:07:cd:47:0c:60:da:51:56:b5:2b:65:
         ac:f5:d8:76:ae:f2:58:f2:c4:2e:53:3f:64:6d:88:70:4b:1d:
         68:e3:ea:aa:9b:72:c3:d5:cb:92:db:ab:cd:f6:ea:c2:56:9c:
         4b:8e:5f:fc:af:36:9d:69:cf:d6:3e:f5:f3:42:77:a7:e7:77:
         34:00:a8:7d:67:b6:a9:14:ba:a3:99:31:22:d3:64:e7:d9:ac:
         e0:6e:0b:0e:c2:52:82:44:25:40:6f:7d:eb:98:09:14:27:ef:
         06:7c:8a:a2:9a:55:9d:da:29:45:15:bb:78:a4:ca:8b:b2:e7:
         c6:86:60:81:39:64:c3:7e:71:1a:53:64:e5:69:8e:b2:9c:2b:
         cb:86:2b:ee:3e:56:ca:8d:e4:84:8a:be:5f:67:44:fe:f1:69:
         8c:83:35:e7:37:a2:ce:b8:99:da:77:2d:f3:3b:5c:9d:75:11:
         d1:ef:dc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:52 2024 by rpki-client on console-ams.rpki-client.org