Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e31392e302f32342d3234203d3e203532373036.roa
File:                     3137372e3132362e31392e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          5jP0CCxWX1NN8bDoTM5uRLJo05SmFyOpSoB2VbGa7X8=
Subject key identifier:   8F:16:F3:B9:8B:1F:62:59:30:98:CF:B8:52:84:A2:F3:1B:56:CD:73
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       2ED1402DEB7FDFD11134ED314CC12326517B7104
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e31392e302f32342d3234203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:39 +0000
ROA not before:           Thu 04 Apr 2024 02:23:39 +0000
ROA not after:            Thu 03 Apr 2025 02:28:39 +0000
asID:                     52706
IP address blocks:        177.126.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:d1:40:2d:eb:7f:df:d1:11:34:ed:31:4c:c1:23:26:51:7b:71:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:39 2024 GMT
            Not After : Apr  3 02:28:39 2025 GMT
        Subject: CN=8F16F3B98B1F62593098CFB85284A2F31B56CD73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f8:55:a9:7d:b3:24:10:6f:ca:21:cb:b4:af:
                    7b:5d:73:2f:cb:b3:8d:2a:73:72:9e:06:e3:88:7c:
                    b7:97:fc:3f:3d:97:59:4f:7f:f3:7f:d9:2d:83:fe:
                    e9:47:4f:bd:0e:4e:ab:64:dc:ac:d2:cc:25:17:c7:
                    ea:e2:45:7d:eb:07:09:d4:43:70:eb:02:10:a5:dd:
                    4c:ff:96:e1:a9:09:84:df:eb:ba:9d:04:f5:6a:39:
                    e1:f6:53:0b:45:c0:1a:44:8d:09:28:fd:64:fc:53:
                    4d:e8:e2:97:ce:ff:32:6c:c5:f9:46:ca:0e:3d:de:
                    ad:c3:14:82:d6:45:50:c7:5c:31:a9:ce:57:1b:a5:
                    e1:1b:b4:ba:dc:f9:86:38:e8:f1:73:95:97:b0:47:
                    76:64:11:af:2f:52:10:c4:9d:54:09:23:dd:8f:32:
                    69:3a:ab:a7:54:07:27:f8:55:84:65:ec:b7:3f:e6:
                    17:09:84:a5:07:17:3e:5e:ff:f4:11:51:15:04:f5:
                    11:90:21:c7:c3:00:e1:07:e5:ab:61:22:56:2c:31:
                    e2:ba:83:b1:33:25:67:54:d1:b9:f0:78:2d:c3:15:
                    6a:6c:ac:1f:0c:64:df:6e:15:d9:f3:a5:b6:db:e7:
                    b8:45:30:79:c6:34:8d:55:70:ac:ed:15:34:c3:67:
                    6f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:16:F3:B9:8B:1F:62:59:30:98:CF:B8:52:84:A2:F3:1B:56:CD:73
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e31392e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:ff:09:23:bb:83:97:97:e5:c9:04:24:75:37:81:7f:df:c2:
         1f:0c:84:92:b6:4e:4e:41:6a:be:08:ef:d9:cc:ec:40:a8:2f:
         32:1c:ce:87:e7:94:48:4d:7b:12:b2:ea:b0:db:6f:6e:23:65:
         77:e8:92:18:ae:b4:ec:9d:78:07:d6:2f:8a:9c:06:fb:78:78:
         0d:db:8c:d0:0c:54:6d:45:03:1e:0a:c7:ce:73:ad:2a:cb:16:
         66:38:08:a4:b4:6a:77:7b:07:46:67:03:e6:bb:d4:74:02:ed:
         3b:96:19:89:52:84:97:12:43:f0:08:12:46:ed:39:e2:37:97:
         97:2e:23:dc:4d:6a:61:01:8c:72:ac:0d:da:f1:f8:c7:27:f3:
         a3:38:9f:7d:87:92:1c:bb:ab:b1:5c:1f:84:eb:a0:9f:ae:ca:
         c5:56:c3:e0:83:84:4b:64:94:61:b9:dc:3a:f6:a4:8f:93:d8:
         70:ba:f4:d6:42:b4:0a:10:06:bf:38:5e:d4:28:60:d0:4e:56:
         b8:5f:e7:56:0e:39:de:e5:92:59:11:e6:e3:ab:92:b0:6b:58:
         a8:50:c0:af:35:38:79:aa:c6:e8:36:c4:8f:14:e9:f3:55:82:
         f4:68:65:6e:f6:ec:a9:ff:e8:e1:b9:9b:44:dc:ea:47:cc:8d:
         fe:3a:49:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 05:27:57 2024 by rpki-client on console-ams.rpki-client.org