Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32392e302f32342d3234203d3e203532373036.roa
File:                     3137372e3132362e32392e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          zBPYD7lTxRv9xJtzWLqB0aoHmxHZ2F2LNgkACx0viIw=
Subject key identifier:   17:07:A7:4E:E5:A6:B9:A3:F3:52:C0:51:B6:6B:84:24:C4:44:19:34
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       3993B0F121E5ADCA8036E32D571B65205EE095B3
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32392e302f32342d3234203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:29 +0000
ROA not before:           Thu 04 Apr 2024 02:23:29 +0000
ROA not after:            Thu 03 Apr 2025 02:28:29 +0000
asID:                     52706
IP address blocks:        177.126.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:93:b0:f1:21:e5:ad:ca:80:36:e3:2d:57:1b:65:20:5e:e0:95:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:29 2024 GMT
            Not After : Apr  3 02:28:29 2025 GMT
        Subject: CN=1707A74EE5A6B9A3F352C051B66B8424C4441934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ab:92:fa:25:3d:83:d4:5a:98:de:53:42:99:
                    0e:6d:6b:80:44:3a:f7:a0:a1:6e:0e:8c:80:75:66:
                    11:3d:2d:39:62:a4:49:e5:a2:ab:4b:6f:5f:a4:1c:
                    c9:87:ef:c3:75:0d:bb:2a:e9:0b:6d:ac:36:08:92:
                    b3:d0:e6:a1:a6:68:67:67:ff:ca:6c:b6:80:bc:d0:
                    ab:b5:f5:8a:9e:24:f0:e2:cc:00:0b:44:1b:c4:5d:
                    7e:4c:62:1d:27:67:35:a4:27:f9:01:4e:9d:4f:eb:
                    5c:a9:70:0e:d1:74:25:57:50:21:ab:37:3d:96:6b:
                    30:c7:01:a6:be:c2:36:6d:db:85:33:43:7e:f6:01:
                    f6:11:87:15:e4:d8:f6:52:2c:fe:81:ef:af:b3:f5:
                    9f:6f:9a:fd:68:d9:36:33:9e:e3:ad:29:81:64:a5:
                    a4:ca:80:46:3c:c7:e7:1c:08:45:be:c0:25:0b:72:
                    8b:78:38:b0:56:a7:ce:bc:da:c8:89:33:ab:2b:b7:
                    8d:a5:08:e3:0e:3d:2d:a6:58:e8:d4:26:26:82:02:
                    06:59:6d:aa:0b:62:ad:c7:fa:1b:d6:08:64:e8:c4:
                    5c:7e:fd:4f:3e:2b:3e:e6:8e:ab:80:91:82:eb:a8:
                    be:5b:9e:22:e0:42:88:64:68:2f:f5:c5:06:ac:3f:
                    b2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:07:A7:4E:E5:A6:B9:A3:F3:52:C0:51:B6:6B:84:24:C4:44:19:34
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32392e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:00:66:87:e0:ce:8b:fc:61:20:bd:0c:49:4a:3c:ea:28:6a:
         5e:df:b9:27:6f:73:e8:7f:73:bf:b9:5b:e2:5a:ad:8f:f2:02:
         d8:28:d9:81:8b:f1:5d:9e:77:15:67:7c:b8:d7:d3:83:f5:70:
         f2:13:92:27:43:26:f4:23:63:66:34:17:7a:d7:08:cc:f4:e2:
         cf:e3:50:03:34:cf:ca:db:e4:79:d6:de:1a:52:1c:e5:cd:8b:
         f8:c8:37:64:02:bc:de:d8:d7:9c:a6:45:3f:34:ac:59:0c:48:
         34:76:aa:1d:fd:89:c9:a7:76:7f:12:f0:44:05:6c:77:c5:8a:
         c9:32:cc:96:94:26:99:39:80:39:62:2b:02:65:62:ca:47:76:
         8d:a8:ca:cc:b6:71:8e:c0:4b:7d:95:fc:ed:d1:c2:b6:f8:da:
         d5:50:65:d0:82:ce:29:7f:bd:2d:36:64:a5:52:f4:e2:7f:45:
         2b:2e:b3:13:f2:c6:67:5b:9f:35:50:e0:65:33:50:56:14:29:
         ba:ef:85:b8:45:d5:84:94:ae:84:2b:ed:6f:2f:d6:87:bd:d3:
         f4:a4:32:73:7b:07:9c:62:2b:fb:b5:10:45:cf:6e:13:f4:af:
         75:ef:a9:24:4c:cb:ba:26:af:b6:25:cb:0a:53:2b:c9:04:85:
         1d:91:f8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 05:27:57 2024 by rpki-client on console-ams.rpki-client.org