Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39352e302f32342d3234203d3e20323632333532.roa
File:                     3137372e3132362e39352e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          V6TvLJqmB7cMHmL5NRMH6AsCIGp+Dj4cVmHOYEHa24Y=
Subject key identifier:   07:94:02:82:27:7D:EF:B6:79:87:C9:9B:69:81:F0:85:8E:52:02:8D
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       1E7F2458091A7326C6036D83B7AD04DD47ED7F47
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39352e302f32342d3234203d3e20323632333532.roa
Signing time:             Thu 04 Apr 2024 15:23:30 +0000
ROA not before:           Thu 04 Apr 2024 15:18:30 +0000
ROA not after:            Thu 03 Apr 2025 15:23:30 +0000
asID:                     262352
IP address blocks:        177.126.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:7f:24:58:09:1a:73:26:c6:03:6d:83:b7:ad:04:dd:47:ed:7f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Apr  4 15:18:30 2024 GMT
            Not After : Apr  3 15:23:30 2025 GMT
        Subject: CN=07940282277DEFB67987C99B6981F0858E52028D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e3:51:cc:d0:89:94:5f:a8:91:e5:cb:9b:8f:
                    b6:bb:0b:01:1e:21:67:96:c0:65:2a:7e:d0:3d:37:
                    bd:70:f7:65:93:0b:8b:0a:44:aa:54:82:23:ba:ad:
                    c5:c9:c3:f0:12:90:5c:de:56:5d:1a:b5:cd:43:21:
                    6b:8a:d4:e5:53:d6:02:eb:ae:54:8e:2e:d0:0f:43:
                    8a:e3:b0:f2:26:61:df:41:f5:02:67:f8:aa:33:5b:
                    41:a3:52:9f:e5:e9:88:22:68:3c:49:7a:43:5b:4d:
                    5b:62:e2:b7:c1:fb:39:c8:90:bd:ab:9c:30:52:1f:
                    4f:d0:3b:d2:3b:18:46:19:ce:12:64:9a:65:ae:c9:
                    f8:1e:db:35:2a:0e:a6:c8:2f:44:7c:61:fd:bb:f0:
                    c3:79:a5:6f:1d:36:fe:53:38:c6:be:98:a0:bc:31:
                    97:eb:05:a2:ba:df:fc:3f:f9:0b:e4:ab:77:47:dd:
                    c5:f3:b6:67:d6:47:12:b4:51:3d:04:47:ef:6f:c9:
                    f1:66:24:78:2c:39:55:49:4e:70:2f:55:7b:b8:02:
                    47:1b:1d:ca:eb:c2:7d:a0:e0:9a:36:8d:47:40:4e:
                    32:f9:50:48:47:82:02:cc:f1:69:29:31:be:61:cd:
                    46:1e:3b:fa:15:a7:a6:94:51:93:1e:ef:55:d1:44:
                    0d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:94:02:82:27:7D:EF:B6:79:87:C9:9B:69:81:F0:85:8E:52:02:8D
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39352e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:ae:a8:45:6a:c4:a5:e8:85:1a:2d:1c:18:23:e3:2c:4d:b4:
         7e:d1:50:4e:80:28:4b:1f:d5:ac:24:c5:79:65:77:03:55:6c:
         36:7f:1e:bf:d1:c5:68:2c:a4:85:95:73:b7:6f:86:79:7c:d1:
         dd:1b:89:cc:6e:f1:88:5b:ba:71:68:ab:9a:7f:d8:8c:91:ef:
         9f:22:52:75:19:f7:57:ab:00:5e:94:1a:67:96:51:2b:8f:e8:
         8f:8b:c5:bd:d6:41:5b:2e:35:6b:2b:fd:c8:b8:0c:c9:a6:a8:
         a9:f4:85:4a:ff:f2:e5:7e:bc:53:bb:ae:d5:63:7f:60:c7:27:
         20:a4:7b:e5:65:f5:c2:48:33:dd:e4:1a:dd:d8:a5:eb:7a:be:
         0c:b2:f0:80:6e:50:05:7d:6f:4d:70:c8:7b:47:e9:24:be:c1:
         e9:dd:4e:69:b0:93:07:23:43:fa:99:af:07:48:8b:d5:e7:04:
         d3:d6:a4:ad:38:e8:2f:a4:bf:26:99:fe:34:3e:8f:80:5a:b7:
         f1:2e:1c:92:3e:52:ff:3a:6a:d8:cb:e7:07:ee:ab:a6:18:eb:
         a0:b5:cf:5f:39:30:9c:32:11:70:54:57:cc:7a:a5:02:a1:cc:
         c8:01:29:0e:96:01:95:6c:ae:fb:bd:2b:25:a4:ee:20:8d:f0:
         6a:87:1e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:50:52 2024 by rpki-client on console-ams.rpki-client.org