Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32352e302f32342d3234203d3e203532373036.roa
File:                     3137372e3132362e32352e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          nGUCnFFCw1oX23SqJHK0ol5g163/KneO2dtEtzL4mdU=
Subject key identifier:   E7:5B:AC:FF:FC:09:01:30:98:13:66:48:36:01:E3:09:20:D3:58:C2
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       759647C2AEB1A3FE362DA4F03376B3EF29A2AF57
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32352e302f32342d3234203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:31 +0000
ROA not before:           Thu 04 Apr 2024 02:23:31 +0000
ROA not after:            Thu 03 Apr 2025 02:28:31 +0000
asID:                     52706
IP address blocks:        177.126.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:96:47:c2:ae:b1:a3:fe:36:2d:a4:f0:33:76:b3:ef:29:a2:af:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:31 2024 GMT
            Not After : Apr  3 02:28:31 2025 GMT
        Subject: CN=E75BACFFFC090130981366483601E30920D358C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fd:cb:27:62:3b:aa:02:d8:63:a6:58:69:d6:
                    b4:b0:7f:bb:eb:0e:99:8b:dd:f3:f1:c5:ef:08:03:
                    f8:a2:9d:41:bf:69:82:6e:90:bc:44:5f:3a:36:f2:
                    2f:26:3b:35:1e:2c:94:97:bd:d5:b5:1b:56:8c:f2:
                    29:41:45:a1:a1:ba:f5:2e:4a:9c:33:5a:86:36:c7:
                    6a:ae:71:90:da:24:0d:46:71:73:2b:25:2c:c9:d5:
                    8b:9e:bf:65:71:bb:1b:be:96:c4:5c:4d:91:a8:51:
                    e5:f7:15:97:ca:81:e0:f5:e8:b7:49:d3:94:3a:6a:
                    4e:0d:35:63:83:af:bf:38:02:a0:ca:27:b4:b1:ef:
                    b9:13:b4:20:1e:70:92:87:96:91:b5:fa:20:b7:46:
                    af:73:a4:c4:ec:cd:e8:62:b5:6b:24:5d:8b:5b:43:
                    47:ce:6d:79:e2:a9:17:23:80:43:63:f3:75:c4:59:
                    56:ab:5b:bd:fe:1a:d9:38:7c:50:64:b0:ec:b9:e0:
                    ef:17:41:ef:03:f0:97:d2:ad:ee:66:a8:87:ae:ad:
                    be:47:e2:2e:d3:48:0a:08:5d:e5:3e:d2:3a:a1:08:
                    20:c8:90:cf:32:c2:a3:86:2a:c4:fc:69:65:66:b4:
                    11:8c:ac:ee:9b:b7:61:cf:bf:d9:1e:48:14:c8:51:
                    61:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5B:AC:FF:FC:09:01:30:98:13:66:48:36:01:E3:09:20:D3:58:C2
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32352e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:6a:4a:28:85:f1:b1:1e:12:70:7d:c2:12:be:b8:c3:f3:72:
         a5:d9:b3:5c:ae:e2:a0:f4:eb:d9:f4:fe:3b:b9:6f:56:20:17:
         f4:b4:ce:c9:5e:d8:ba:42:cb:a5:94:58:aa:34:ee:f9:28:dd:
         46:cf:21:fe:fa:26:47:f5:8d:6f:9e:17:6d:8f:d0:7d:bc:d7:
         80:e0:e4:0c:72:13:e5:eb:6e:ac:19:29:f8:7e:ab:be:23:72:
         40:00:ac:9b:2b:71:98:df:32:ae:95:4f:0f:55:ad:73:91:28:
         ec:61:09:7b:8d:4a:13:47:bb:ba:1f:76:a9:a1:cf:8f:61:4f:
         e5:9a:e5:b5:a7:1f:7e:62:16:44:f4:1f:2b:a4:2f:dc:a9:7d:
         12:68:71:4c:e0:c4:88:97:7c:ce:84:54:98:54:90:22:5b:d6:
         b4:fe:94:5d:c3:c8:6d:2d:8d:44:4a:b8:ad:01:9e:45:5e:cc:
         63:96:da:2e:a7:19:5f:8d:5e:8f:cf:e6:71:80:67:7b:95:c7:
         d8:00:a7:27:99:9d:52:35:e3:22:fd:21:45:87:a2:f4:cf:5e:
         5e:fc:1e:78:fa:32:ac:79:90:85:bc:74:f5:6e:5d:61:72:59:
         e1:15:c7:22:1a:1e:dd:b0:a9:a7:d1:fc:4c:5a:f0:91:e1:c5:
         4e:17:67:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:05 2024 by rpki-client on console-ams.rpki-client.org