Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/3137372e3132392e3132362e302f32342d3234203d3e203532353430.roa
File:                     3137372e3132392e3132362e302f32342d3234203d3e203532353430.roa (raw, json)
Hash identifier:          ovProb7JnP4gZRZPUg31A5gk4FTeEL2nsA8ukCzQLLA=
Subject key identifier:   47:98:D1:8A:3C:54:74:2A:5C:3D:49:6B:F1:40:C2:EE:60:7F:9C:63
Certificate issuer:       /CN=B1A2287CEAA131778218645B379857543955CA06
Certificate serial:       5DB8340BB21AB219005DBD73D6B19990EFE79C6E
Authority key identifier: B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/3137372e3132392e3132362e302f32342d3234203d3e203532353430.roa
Signing time:             Wed 29 May 2024 12:21:17 +0000
ROA not before:           Wed 29 May 2024 12:16:17 +0000
ROA not after:            Wed 28 May 2025 12:21:17 +0000
asID:                     52540
IP address blocks:        177.129.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.crl
                          rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 14:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:b8:34:0b:b2:1a:b2:19:00:5d:bd:73:d6:b1:99:90:ef:e7:9c:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A2287CEAA131778218645B379857543955CA06
        Validity
            Not Before: May 29 12:16:17 2024 GMT
            Not After : May 28 12:21:17 2025 GMT
        Subject: CN=4798D18A3C54742A5C3D496BF140C2EE607F9C63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:72:3e:38:5d:ba:96:ca:f6:62:68:a5:7c:13:
                    c3:3e:e9:43:a8:88:39:a9:71:71:44:b8:62:08:1d:
                    97:67:28:05:a2:4b:fb:cd:86:eb:a8:38:2d:02:dc:
                    98:0a:27:44:72:d2:84:91:d7:99:22:05:23:93:b0:
                    71:ca:2d:5d:c9:6e:ce:8f:7b:0e:08:d9:90:a5:de:
                    2e:78:88:d1:c0:20:95:38:d0:0c:57:d4:58:cc:cd:
                    60:c6:f6:ab:63:e5:1d:5f:e9:7f:22:11:d3:59:10:
                    e9:ba:24:62:00:09:d8:25:23:f3:25:72:10:b9:ce:
                    32:cb:cf:4d:d8:9c:4e:64:0a:3f:42:f7:43:d6:40:
                    d9:32:5d:63:e8:c6:12:e6:1e:3a:91:1b:6b:f4:56:
                    93:3b:81:a0:49:9e:48:8f:2e:0c:24:b6:af:ff:4f:
                    f7:ce:bd:20:36:94:d9:92:3c:1d:a9:64:f5:67:94:
                    95:be:85:4f:7f:a3:d2:60:61:5e:17:40:44:58:24:
                    f5:d3:12:ea:d5:98:45:2f:23:f1:1a:e1:de:4b:19:
                    3f:62:cf:98:ef:3a:fb:b5:0d:00:48:e5:cf:f9:97:
                    6e:1b:1d:dc:b8:f1:7f:13:9d:a1:36:b9:65:4b:5e:
                    c4:31:e8:25:d0:71:55:1a:0a:e2:c6:bb:1d:df:12:
                    48:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:98:D1:8A:3C:54:74:2A:5C:3D:49:6B:F1:40:C2:EE:60:7F:9C:63
            X509v3 Authority Key Identifier:
                keyid:B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/3137372e3132392e3132362e302f32342d3234203d3e203532353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:6f:95:8f:28:25:8d:5b:56:b0:ad:fb:94:e0:9d:c6:16:36:
         43:3e:f0:33:d3:1b:2f:47:71:48:c4:df:f7:c9:01:1d:03:b1:
         4f:46:77:08:65:64:46:75:55:9b:90:c5:e4:c0:60:aa:bd:a5:
         12:d0:61:49:cf:6e:cd:57:04:39:61:91:76:11:85:ce:58:dc:
         58:d0:53:cf:24:89:a0:ae:c5:65:35:b9:7b:6f:63:1f:7e:bf:
         63:96:08:1c:48:09:53:78:83:b5:f9:01:f3:fe:cf:60:54:98:
         96:9e:31:ec:58:b3:6c:45:cc:22:f6:67:e5:86:3a:ef:27:5c:
         53:b8:e7:0c:d4:81:58:06:d6:81:d9:56:13:f2:61:8d:76:6b:
         4e:9f:cc:d9:de:8f:70:66:0d:02:32:65:dd:36:46:31:1f:d4:
         fd:5e:e8:16:28:13:80:2a:9d:02:e5:f4:9d:72:af:58:b7:ca:
         ea:a5:0d:7e:5f:97:f2:6f:ed:c5:70:35:88:13:af:f4:ee:19:
         68:8b:70:ed:e8:43:47:a0:48:73:ee:7c:5d:49:ec:90:9d:7a:
         7e:9c:58:2b:d4:ac:91:00:1b:da:0d:d8:30:c7:ab:2b:b5:f1:
         12:d2:88:f8:c3:24:17:25:33:11:b9:28:3f:a6:d9:23:19:0b:
         7f:dc:8b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:19 2024 by rpki-client on console-fra.rpki-client.org