Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32302e302f32342d3234203d3e203532373036.roa
File:                     3137372e3132362e32302e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          Q0VzZ8CTsCDXbO1AUm2o99Ou0S8lIDapsHX9i0BlN7w=
Subject key identifier:   60:4A:90:99:26:7D:FC:4F:A6:2A:91:C3:C5:B2:49:40:64:AD:D1:7D
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       29DFB2845612D1712F9D95CB634231E9E6F27C4E
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32302e302f32342d3234203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:32 +0000
ROA not before:           Thu 04 Apr 2024 02:23:32 +0000
ROA not after:            Thu 03 Apr 2025 02:28:32 +0000
asID:                     52706
IP address blocks:        177.126.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:df:b2:84:56:12:d1:71:2f:9d:95:cb:63:42:31:e9:e6:f2:7c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:32 2024 GMT
            Not After : Apr  3 02:28:32 2025 GMT
        Subject: CN=604A9099267DFC4FA62A91C3C5B2494064ADD17D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:da:74:ab:26:3e:7d:98:e1:03:23:d1:b5:e0:
                    4a:85:04:16:4c:77:6a:a4:04:5b:14:b7:62:6c:14:
                    11:f6:4a:ce:5b:81:b1:5b:b6:0d:37:c4:bf:88:a8:
                    74:90:18:62:d6:30:68:40:ba:01:15:57:f7:e2:00:
                    fe:5a:b8:3a:74:89:aa:fe:76:d7:9c:56:ee:9f:57:
                    21:a2:a6:f1:4b:d1:2a:01:0c:ea:68:f7:77:bc:c1:
                    14:c1:f6:7b:03:4c:d2:16:30:4d:04:50:cc:bb:48:
                    7c:c4:9e:c8:70:0a:a1:74:b4:d9:79:3b:3f:c4:74:
                    bf:d8:11:7e:f2:86:54:8d:39:8d:be:83:97:79:ef:
                    87:2f:69:6d:3f:27:77:0c:19:e8:90:2f:bc:bc:d0:
                    83:e8:b8:60:e3:bb:52:b0:39:f7:d9:ae:8e:d0:78:
                    bb:0f:19:d1:4d:96:c3:42:d3:56:45:b1:5f:28:2e:
                    16:e0:d8:ed:63:10:db:6c:b0:ee:5b:ab:c9:65:3f:
                    c3:d3:60:12:cf:4a:63:d4:d5:b6:90:4a:7f:51:9e:
                    ff:20:81:b2:d6:47:ae:87:40:ea:5f:21:a0:6d:15:
                    5f:b7:2e:b3:c6:f6:84:9e:07:ab:40:19:6e:77:fb:
                    f4:4c:91:c1:eb:14:ef:c2:62:8c:5a:4d:c8:0f:3a:
                    b0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4A:90:99:26:7D:FC:4F:A6:2A:91:C3:C5:B2:49:40:64:AD:D1:7D
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32302e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:d2:3e:b0:52:7e:82:e4:49:07:cb:57:48:78:b6:47:0a:9f:
         bd:7e:06:33:bc:08:12:e5:d3:7d:3e:f0:01:41:29:dd:3f:b2:
         ff:ba:cf:9a:ef:eb:fb:5d:b6:82:e4:af:1f:78:3b:ec:41:95:
         26:c0:63:51:72:14:e2:6b:59:b1:9a:b9:a4:e0:14:8e:79:81:
         58:a5:ef:db:03:31:55:89:f3:20:0e:03:d2:0e:ae:b5:7d:b4:
         31:31:b2:63:6a:5e:c6:81:76:cc:5f:4e:12:a8:b7:67:73:48:
         9d:93:9b:2b:a4:f1:12:98:6f:74:62:73:cd:28:a0:38:e2:8c:
         c0:60:39:4a:08:2a:c8:5e:aa:68:65:73:21:80:6d:06:bc:d8:
         4a:11:01:d1:44:c8:38:60:3d:73:d2:a5:8a:71:16:5e:81:80:
         08:6f:11:9d:70:1c:df:49:61:3b:c1:6d:50:7d:a8:48:c6:38:
         16:7d:c4:14:63:de:c1:83:57:2f:26:cf:52:f2:dd:ce:1d:45:
         93:f7:43:34:d6:40:ba:46:3c:5a:99:02:74:8a:9d:77:6d:a1:
         ed:7e:54:64:3b:dc:05:3b:8f:d3:ed:ca:34:4b:b2:f2:0e:e4:
         88:e2:19:92:bf:a5:87:ba:48:79:0a:b1:e2:fd:b9:ba:22:5e:
         65:7c:2a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 05:27:57 2024 by rpki-client on console-ams.rpki-client.org