Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/3137372e3132392e3132372e302f32342d3234203d3e203532353430.roa
File:                     3137372e3132392e3132372e302f32342d3234203d3e203532353430.roa (raw, json)
Hash identifier:          jilusBRyBOkNzEXCJMcdtrqh2VAoZHefiF3uDVi/1GQ=
Subject key identifier:   59:A8:F4:3F:F6:F3:71:54:D7:94:A6:3E:8B:DF:2C:99:6A:E2:E0:52
Certificate issuer:       /CN=B1A2287CEAA131778218645B379857543955CA06
Certificate serial:       2399AE8CB1BD2FA4419E6C04F4CD117651B7868D
Authority key identifier: B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/3137372e3132392e3132372e302f32342d3234203d3e203532353430.roa
Signing time:             Wed 29 May 2024 12:21:19 +0000
ROA not before:           Wed 29 May 2024 12:16:19 +0000
ROA not after:            Wed 28 May 2025 12:21:19 +0000
asID:                     52540
IP address blocks:        177.129.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.crl
                          rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 13:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:99:ae:8c:b1:bd:2f:a4:41:9e:6c:04:f4:cd:11:76:51:b7:86:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A2287CEAA131778218645B379857543955CA06
        Validity
            Not Before: May 29 12:16:19 2024 GMT
            Not After : May 28 12:21:19 2025 GMT
        Subject: CN=59A8F43FF6F37154D794A63E8BDF2C996AE2E052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d2:6c:d2:07:9c:3f:6a:14:c9:1e:81:40:a8:
                    95:b4:2b:ab:2c:6f:d7:09:6a:c0:0c:91:52:66:2e:
                    c6:93:bc:14:07:ec:12:84:74:8b:1f:be:f6:a0:8b:
                    0e:99:17:7d:02:da:84:bc:8f:4a:56:79:a8:d5:0c:
                    d8:b1:ff:c6:f8:48:a7:3f:bc:8d:5f:8b:b7:2f:f5:
                    62:6b:55:27:83:85:25:5c:7c:54:9c:46:ac:fd:7d:
                    31:b1:bc:21:1c:1c:1b:e2:f6:38:f9:5f:fe:47:28:
                    83:f9:e8:e4:fb:1b:95:d1:1e:31:f0:2e:93:35:f6:
                    cf:bd:86:cc:52:9a:af:cf:2b:34:06:d8:57:c5:62:
                    79:67:0a:70:da:0d:cd:98:b5:74:e8:58:e0:08:48:
                    70:d9:e7:78:50:ca:6c:5b:55:56:6b:6b:fe:3b:7c:
                    1f:2b:20:7d:3b:d6:33:01:d2:f5:1f:dd:f1:34:8f:
                    e2:40:6d:f4:3f:5e:7f:a4:35:ca:2e:50:8a:43:8e:
                    ef:b6:fb:b0:e8:57:24:4f:15:8a:e3:af:8e:ed:97:
                    da:30:07:04:ed:11:a4:10:0f:03:4d:c5:fb:c4:e9:
                    eb:c8:1d:4a:5a:39:2c:e5:2b:f3:8e:03:79:b4:1e:
                    cf:74:f5:51:4d:ac:93:f9:08:06:54:64:a3:a7:21:
                    15:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A8:F4:3F:F6:F3:71:54:D7:94:A6:3E:8B:DF:2C:99:6A:E2:E0:52
            X509v3 Authority Key Identifier:
                keyid:B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/3137372e3132392e3132372e302f32342d3234203d3e203532353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:4e:dd:09:39:6a:22:7c:df:92:b4:9c:cb:6b:f7:75:17:f3:
         d5:f4:67:6b:3f:63:7e:bd:fa:0c:b6:de:d3:3a:23:7c:08:f5:
         92:ea:e3:f4:42:2d:d7:cf:3f:56:57:0e:35:9c:cc:f3:60:0a:
         89:6a:a2:44:91:17:fe:11:42:5e:7b:24:72:f5:79:05:60:ea:
         c3:7e:19:bf:9e:76:51:17:a6:39:23:c8:03:af:5d:8f:0e:07:
         bd:0e:75:ac:34:c1:c1:8d:65:67:e2:2d:a7:dc:09:1a:54:03:
         7e:0a:d4:53:3d:3e:91:86:40:22:1f:a1:7a:93:ad:0c:4f:72:
         e2:91:7c:ea:46:cf:2c:a6:0e:64:fa:1c:95:b3:e5:36:20:78:
         b8:c8:47:bb:f8:4d:c1:79:19:48:0b:de:4d:f2:59:2c:46:bd:
         6e:72:dc:eb:dd:fa:4f:71:53:0f:e4:b4:00:d7:17:cc:26:42:
         7b:a2:6f:b7:90:54:5d:3e:bd:cd:1f:48:5b:bd:f6:15:3c:20:
         73:22:ce:99:5f:93:29:6a:3b:df:c4:2e:62:cb:ef:26:52:79:
         98:6b:bf:cd:10:ac:1c:e0:0f:b0:a0:b9:05:bb:8c:f3:1d:56:
         e3:87:94:fb:b8:5c:30:96:d0:72:5c:d5:a4:73:22:32:c0:db:
         30:06:fa:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 15:36:56 2024 by rpki-client on console-fra.rpki-client.org