Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e31382e302f32342d3234203d3e203532373036.roa
File:                     3137372e3132362e31382e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          EgqWkXb64UirMjjx6c13QSPYzs529qxoBW0NaFbpM8Y=
Subject key identifier:   26:A2:EB:91:9F:4C:7D:83:CD:91:11:8C:12:A8:20:8C:43:88:D0:8E
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       2240136162B987A8258530B0AD7092BA46335FC7
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e31382e302f32342d3234203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:37 +0000
ROA not before:           Thu 04 Apr 2024 02:23:37 +0000
ROA not after:            Thu 03 Apr 2025 02:28:37 +0000
asID:                     52706
IP address blocks:        177.126.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:40:13:61:62:b9:87:a8:25:85:30:b0:ad:70:92:ba:46:33:5f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:37 2024 GMT
            Not After : Apr  3 02:28:37 2025 GMT
        Subject: CN=26A2EB919F4C7D83CD91118C12A8208C4388D08E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:47:37:14:5d:36:d4:3c:d0:99:cc:0b:10:50:
                    3f:ec:a5:94:8f:e7:76:c6:8e:a7:be:5f:4c:1b:00:
                    f6:23:d3:c2:27:ef:dc:a6:2d:68:3a:4a:6d:f1:d4:
                    2e:81:b2:8e:fd:c5:ca:bd:c1:b9:15:57:d3:0e:df:
                    cf:3e:6c:98:bf:b2:70:40:f8:44:5b:ba:a3:10:ca:
                    e5:39:42:82:73:9d:2f:eb:22:22:c3:f6:68:7d:36:
                    82:5e:9f:a4:26:34:24:f1:91:85:3c:52:b0:7f:72:
                    31:db:61:2b:8f:cc:e8:79:53:1f:c0:de:5d:11:bd:
                    a2:71:c0:8b:69:aa:c5:24:95:7f:f6:ca:58:5c:8a:
                    f1:df:c6:80:2e:fc:85:2f:45:97:90:d8:f1:8e:55:
                    3e:07:ae:e4:92:39:13:bc:96:2f:89:39:f3:8a:70:
                    e6:1e:87:2a:06:bc:58:1f:eb:02:c9:20:b4:8d:47:
                    85:1c:dc:5d:ce:1f:c3:23:3d:e9:d9:df:de:b6:e9:
                    e4:5e:ed:06:21:66:66:9f:8c:10:d8:e3:e2:13:f0:
                    59:46:26:b1:a1:dc:67:4e:46:38:f4:18:1d:b5:cb:
                    57:0b:f1:26:d4:6a:ba:82:d0:56:ad:07:bc:70:2b:
                    22:92:79:8e:08:0b:ff:07:bd:7f:5b:54:fb:df:72:
                    3e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A2:EB:91:9F:4C:7D:83:CD:91:11:8C:12:A8:20:8C:43:88:D0:8E
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e31382e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:b1:bf:39:9c:4c:e0:82:d3:eb:1b:eb:a0:b1:e9:47:87:6d:
         27:fe:48:8a:ef:10:ae:13:b8:e7:9f:54:20:c9:2a:b7:4a:cc:
         bf:e9:f6:f0:25:70:d7:a1:ad:0c:fc:70:54:68:ee:0e:d2:be:
         87:2c:d8:f7:c9:5a:c5:2b:f3:bd:f7:7d:08:4a:e9:cc:3f:12:
         fa:08:97:a7:9c:27:b1:73:07:da:be:c9:15:d8:0d:c6:f6:4a:
         e1:04:f9:42:09:8a:e3:37:d0:23:19:a2:8b:01:f4:e7:90:1b:
         20:13:db:1a:fd:06:c9:c4:27:d9:18:e1:ef:78:cd:1d:82:37:
         1f:a9:06:3c:f4:80:30:06:99:64:35:69:33:13:55:ec:e5:94:
         ce:c1:79:6f:13:95:31:e6:92:50:ea:f4:d5:25:99:ee:3c:1d:
         08:49:81:65:dc:03:65:f9:ac:49:ae:5f:91:f4:41:e1:cf:b1:
         41:4a:ef:d9:7c:f0:5a:57:e3:57:f1:68:08:a3:dc:4f:5a:f5:
         29:8f:08:39:29:5a:28:b7:3e:fa:0d:fb:e5:47:9c:2d:b1:08:
         92:4b:b9:64:d2:c4:44:c3:be:58:6e:1a:0a:39:c6:7d:f6:36:
         a9:b9:6f:e2:f2:51:3d:93:a4:16:51:25:be:bd:f0:d5:f2:07:
         95:fd:57:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:19 2024 by rpki-client on console-fra.rpki-client.org