Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32362e302f32332d3233203d3e203532373036.roa
File:                     3137372e3132362e32362e302f32332d3233203d3e203532373036.roa (raw, json)
Hash identifier:          +o8b66abn89rjnQ3NXodYyb811bx4fKpyn7ul44TZII=
Subject key identifier:   27:29:5A:1D:C2:F9:23:C5:64:6E:B4:D4:8B:F6:E9:A1:C1:01:0C:A3
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       0D335C7BCFD65D1399879E9CC51546B820C0E3AE
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32362e302f32332d3233203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:33 +0000
ROA not before:           Thu 04 Apr 2024 02:23:33 +0000
ROA not after:            Thu 03 Apr 2025 02:28:33 +0000
asID:                     52706
IP address blocks:        177.126.26.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:33:5c:7b:cf:d6:5d:13:99:87:9e:9c:c5:15:46:b8:20:c0:e3:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:33 2024 GMT
            Not After : Apr  3 02:28:33 2025 GMT
        Subject: CN=27295A1DC2F923C5646EB4D48BF6E9A1C1010CA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:86:05:ad:59:15:7c:ec:62:a0:12:d0:8f:3d:
                    11:a9:b7:36:91:53:6c:c7:c2:ed:70:12:32:be:88:
                    0c:29:9d:38:04:a1:41:0f:77:1e:2a:8f:eb:d8:f5:
                    fe:be:67:d7:ff:6f:f3:7f:db:ba:38:f2:fb:49:38:
                    43:9b:0b:ce:e9:0f:9e:de:f0:11:f0:d8:93:f8:b7:
                    9a:da:43:4f:e2:44:ef:7a:6a:90:eb:d3:d2:d6:83:
                    95:f9:1a:22:e9:08:17:cb:58:1c:63:70:19:71:75:
                    68:b7:db:98:3b:04:57:4c:06:74:7d:e7:07:26:ee:
                    95:35:c1:a9:30:da:2c:3b:45:16:ee:eb:11:42:e5:
                    44:16:5b:e1:6d:4c:1a:13:1f:22:ee:b0:29:8e:cc:
                    b6:cb:1c:aa:03:ca:d4:d5:74:94:a2:f9:81:87:29:
                    bc:96:93:fd:76:6d:fa:ed:67:ef:11:7f:05:9e:88:
                    7e:9c:bc:53:d2:77:9e:a1:b1:cb:a7:82:b3:ab:23:
                    d7:60:ca:e2:4c:af:88:c7:51:3c:f3:f2:eb:1b:41:
                    d7:06:7b:aa:b0:f6:71:11:20:e9:d7:0e:c3:ea:05:
                    81:47:2e:40:9a:1c:4d:e9:fc:f5:ec:b0:20:f0:52:
                    13:9a:55:5e:86:02:2f:0c:4a:ec:da:a0:c3:87:40:
                    6f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:29:5A:1D:C2:F9:23:C5:64:6E:B4:D4:8B:F6:E9:A1:C1:01:0C:A3
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32362e302f32332d3233203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:65:d1:e6:b9:de:5f:75:f8:27:9a:89:54:8a:e3:31:bb:5b:
         bc:66:65:d1:2f:f0:f1:2c:96:86:46:55:c9:a7:30:9a:b1:63:
         82:a3:40:bd:d9:e1:58:56:ff:2c:00:b8:c9:b4:fd:8f:98:95:
         e0:c9:46:53:ae:ac:1a:fe:0c:44:df:97:f7:d4:ca:50:15:ba:
         81:1f:1d:a5:3a:f2:e7:bb:15:d9:b7:b6:ec:c6:73:bf:04:b6:
         21:90:0d:ba:4b:18:8f:fb:d8:aa:59:b4:c6:43:12:e4:e0:86:
         4d:90:1c:25:73:23:4c:7a:78:68:69:03:f2:10:cd:fd:f9:c6:
         26:22:f9:e7:86:9d:b8:00:85:81:7c:5a:db:98:37:91:43:8e:
         73:0e:d0:dd:a6:f4:7a:24:e5:47:91:a8:44:2c:55:09:93:0d:
         7e:d6:b9:24:e2:e7:ab:53:32:72:b4:69:56:42:64:0b:a9:30:
         bb:76:86:05:d3:e7:e3:0c:23:74:70:f0:da:67:e6:b9:5f:ab:
         5e:ff:47:36:7a:7f:d6:f3:4c:49:ad:a4:13:f0:1d:44:53:81:
         00:a8:8f:8f:f2:eb:ff:f3:ad:b6:0a:c1:2f:a5:65:94:0b:97:
         9c:67:43:88:40:83:22:a4:02:18:02:ce:dd:0a:50:e0:10:07:
         8b:8b:65:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:05 2024 by rpki-client on console-ams.rpki-client.org