Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32332e302f32342d3234203d3e203532373036.roa
File:                     3137372e3132362e32332e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          Uc0MWFs6CHYQ0kv8Kq3+UYgoVJK36bnP8o0SRlmVf8A=
Subject key identifier:   24:DF:49:6B:F7:D5:76:55:B6:E5:F4:83:63:97:79:1C:77:21:54:E9
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       1521B68F3B41E8535F9F321F2DCA99CB37DACCF2
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32332e302f32342d3234203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:36 +0000
ROA not before:           Thu 04 Apr 2024 02:23:36 +0000
ROA not after:            Thu 03 Apr 2025 02:28:36 +0000
asID:                     52706
IP address blocks:        177.126.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:21:b6:8f:3b:41:e8:53:5f:9f:32:1f:2d:ca:99:cb:37:da:cc:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:36 2024 GMT
            Not After : Apr  3 02:28:36 2025 GMT
        Subject: CN=24DF496BF7D57655B6E5F4836397791C772154E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:69:4d:ec:b0:01:99:3c:79:a9:42:0e:25:29:
                    5f:24:c9:07:d4:cd:84:90:54:0d:29:a3:69:85:2e:
                    c5:de:c7:c5:7a:40:ba:ff:6e:b2:a2:38:7c:7c:e1:
                    cc:bb:26:8b:06:ae:95:46:76:f6:d3:12:83:66:28:
                    a5:58:7b:8b:67:5d:00:f7:1b:09:c3:c5:42:5d:ae:
                    4c:79:ee:99:0e:e7:25:ae:e7:97:59:6e:14:64:b4:
                    49:46:98:f7:ac:91:23:bc:b0:eb:5a:1d:f0:64:5a:
                    4f:cd:48:36:82:73:f6:c8:a7:78:a1:b3:bb:a1:2f:
                    04:1a:6d:9a:29:0a:32:7c:71:16:3c:54:9d:36:ac:
                    8b:a9:05:26:9f:cb:14:66:d5:01:c6:4f:cf:04:81:
                    c0:86:b9:d1:81:24:19:fa:8e:59:e7:01:4c:24:2b:
                    1d:18:2c:e3:00:86:95:13:67:a8:dc:79:de:62:ed:
                    5b:0f:23:65:d4:e5:c0:15:e4:01:fa:68:33:47:8b:
                    41:82:96:fb:29:17:98:cd:28:7a:ac:1b:8c:f0:89:
                    ae:39:45:b8:6d:98:15:53:e4:9d:71:26:e3:66:e3:
                    9d:18:8d:29:16:33:60:ef:18:58:2d:78:b5:7d:ce:
                    75:a3:61:9a:35:67:4e:fb:78:2c:ca:b0:2d:c6:93:
                    6e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:DF:49:6B:F7:D5:76:55:B6:E5:F4:83:63:97:79:1C:77:21:54:E9
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32332e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:69:83:56:c8:6c:be:4c:b4:0a:44:92:97:0a:cb:ac:c9:c3:
         f6:f4:bb:65:6a:77:03:82:b1:a7:c3:2f:0a:38:89:3b:8a:95:
         3e:d9:30:b0:c4:92:b7:f5:cd:49:f4:f3:ef:00:f0:dc:eb:fa:
         c6:7a:e2:82:ce:99:84:05:d3:e0:55:f6:77:94:7e:f4:85:55:
         bd:9d:6c:ca:d1:b5:56:8f:7a:33:e8:cc:04:80:06:00:e9:35:
         ed:18:c4:fb:f4:a4:f3:32:a6:a4:be:1b:ff:29:42:48:a4:80:
         18:ba:62:db:1a:90:0e:e1:53:3e:5d:7e:7d:b6:eb:a4:4b:4b:
         3b:ef:ae:2d:04:25:42:13:62:37:8b:44:1e:db:84:df:a7:4a:
         09:bb:ca:f3:15:c8:de:8d:9d:b2:bb:c8:b9:e6:29:e2:c9:bc:
         c6:0e:76:48:ed:70:2e:06:09:e0:23:31:04:1e:ca:36:92:43:
         ad:e4:4c:25:91:65:fc:28:43:91:37:cd:08:a0:2e:29:b8:ea:
         22:07:97:33:39:53:32:e3:10:b1:6a:e6:65:25:de:1e:97:28:
         95:54:ef:ff:98:ef:f8:41:19:41:bc:22:2c:be:a8:a0:ee:05:
         8f:3a:5c:0a:fe:84:f1:2b:77:f6:f5:f9:cf:fb:bc:23:8d:9e:
         22:36:0d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:05 2024 by rpki-client on console-ams.rpki-client.org