Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39352e302f32342d3234203d3e20323632333532.roa
File:                     3137372e3132362e39352e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          jHw2YGVnlrhe2R7eIDcepEJp1JTLLW+tp5HRcf+UdaE=
Subject key identifier:   5A:38:E8:FC:3E:81:A5:68:82:DE:C8:FD:BC:78:C2:DE:31:EA:14:35
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       6B838B6CA1DB73F30D5AE42220C822A2992F4BB5
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39352e302f32342d3234203d3e20323632333532.roa
Signing time:             Mon 28 Oct 2024 13:56:20 +0000
ROA not before:           Mon 28 Oct 2024 13:51:20 +0000
ROA not after:            Mon 27 Oct 2025 13:56:20 +0000
asID:                     262352
IP address blocks:        177.126.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:83:8b:6c:a1:db:73:f3:0d:5a:e4:22:20:c8:22:a2:99:2f:4b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Oct 28 13:51:20 2024 GMT
            Not After : Oct 27 13:56:20 2025 GMT
        Subject: CN=5A38E8FC3E81A56882DEC8FDBC78C2DE31EA1435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6c:a6:db:2f:63:1c:13:4a:c6:94:ee:69:85:
                    89:b9:a2:54:a4:07:a6:cc:01:4f:61:c6:66:4d:68:
                    5b:4f:03:21:43:94:57:41:01:a9:4c:c3:20:87:03:
                    c6:e1:f9:7b:40:a6:69:82:9c:35:f1:1a:51:94:b4:
                    80:0d:09:d4:f1:96:5f:99:37:62:9c:6d:0a:e9:30:
                    f1:d9:c7:23:2e:d4:d7:82:14:67:9f:fe:9b:8d:ce:
                    55:6c:ff:77:77:0f:31:9f:6b:64:da:fe:6e:82:01:
                    b6:c4:7b:97:7f:7e:fd:37:75:93:e7:a0:b6:e5:12:
                    bb:68:2b:ab:52:c1:0d:49:a9:3f:72:e7:bf:83:7a:
                    15:8d:f0:28:84:1d:e7:0d:17:6a:7b:1f:1f:49:6b:
                    25:6e:aa:a2:63:5f:c0:ba:24:f3:06:ea:3e:66:f9:
                    69:43:41:27:80:56:43:d5:59:34:53:61:f7:2c:1a:
                    05:dd:45:d1:58:ad:dd:fa:4a:d7:cf:1b:80:a9:3a:
                    3c:c7:ae:df:a0:bc:52:d4:13:c0:9b:c8:07:b3:42:
                    e2:4f:c1:7c:17:0d:98:5b:af:76:3e:d6:25:3e:4d:
                    bd:97:49:66:31:de:96:2c:eb:33:fc:d9:08:a7:ae:
                    9e:51:8f:35:85:a7:6c:ef:0d:35:60:8c:27:4d:42:
                    a3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:38:E8:FC:3E:81:A5:68:82:DE:C8:FD:BC:78:C2:DE:31:EA:14:35
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39352e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:a4:38:c3:81:78:61:e8:94:d8:9b:7b:12:76:e6:11:64:6c:
         b1:02:e8:ad:3a:86:58:14:e8:a8:7a:f9:fe:48:65:c7:02:ac:
         f8:13:57:a5:28:20:86:5c:b4:9e:78:cc:61:b1:69:40:9c:23:
         4c:ac:49:0b:d2:40:d5:76:4d:a2:26:b1:19:7d:1c:a7:80:d1:
         b6:09:ae:41:6a:e3:64:09:00:00:a3:b4:d0:ed:c4:35:59:1c:
         0b:f1:56:01:88:8c:18:34:b7:c4:1f:b6:1c:40:61:cb:66:36:
         48:04:00:b2:58:9b:f0:da:f2:f4:22:6a:44:1a:48:fa:3b:ab:
         6e:0e:11:af:3d:60:90:09:15:e2:e4:67:1e:56:de:4f:4d:1f:
         2f:bb:e4:f3:b4:96:d6:50:53:f0:cc:6a:45:05:67:65:6e:24:
         b8:08:99:53:64:75:00:14:9f:e7:9f:75:35:55:4c:b0:d0:6d:
         cf:58:85:38:2a:b6:8f:71:a0:c4:64:57:a6:7c:da:b5:f5:2f:
         4b:44:cc:62:19:ae:df:44:59:43:47:0d:84:83:b0:85:9f:a8:
         fc:90:f5:c1:f3:a1:10:ca:81:56:df:70:da:84:94:85:f8:51:
         4a:b8:5e:18:ba:42:72:90:aa:7c:e4:66:b8:27:b4:d2:09:8a:
         72:16:35:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:52 2024 by rpki-client on console-ams.rpki-client.org