Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/3137372e3132352e3135322e302f32312d3234203d3e20323632333934.roa
File:                     3137372e3132352e3135322e302f32312d3234203d3e20323632333934.roa (raw, json)
Hash identifier:          hi4p39W9J9ebns9UK9OJtkwJMPBc6wbHjG3YYfFO8gw=
Subject key identifier:   1D:66:79:C0:A3:32:6C:DA:13:BD:7D:DE:63:5F:68:A4:7B:A5:A7:80
Certificate issuer:       /CN=7F262696BA0E69FA1058BEF98B1386A9CCEB7D71
Certificate serial:       755B65CC7DE0C8C9B23B2150756AEE4F1A944E8A
Authority key identifier: 7F:26:26:96:BA:0E:69:FA:10:58:BE:F9:8B:13:86:A9:CC:EB:7D:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/3137372e3132352e3135322e302f32312d3234203d3e20323632333934.roa
Signing time:             Thu 04 Apr 2024 17:16:47 +0000
ROA not before:           Thu 04 Apr 2024 17:11:47 +0000
ROA not after:            Thu 03 Apr 2025 17:16:47 +0000
asID:                     262394
IP address blocks:        177.125.152.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.crl
                          rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 00:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:5b:65:cc:7d:e0:c8:c9:b2:3b:21:50:75:6a:ee:4f:1a:94:4e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F262696BA0E69FA1058BEF98B1386A9CCEB7D71
        Validity
            Not Before: Apr  4 17:11:47 2024 GMT
            Not After : Apr  3 17:16:47 2025 GMT
        Subject: CN=1D6679C0A3326CDA13BD7DDE635F68A47BA5A780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0f:4d:10:25:55:19:21:2e:af:40:12:33:2a:
                    31:63:2e:38:eb:13:04:f0:ad:51:62:db:9c:73:17:
                    e2:4d:e1:fd:6d:66:3d:b7:42:83:62:98:d3:6a:19:
                    8f:2b:27:32:c2:9f:19:33:30:80:f4:95:56:a8:3d:
                    9c:0f:3a:d9:ac:1d:e5:20:5c:53:44:eb:b4:96:81:
                    61:bc:39:4e:59:39:e8:b7:2b:15:f3:ae:fb:90:36:
                    82:78:90:95:e5:ef:b0:da:93:21:10:38:f5:ab:8a:
                    5a:72:d3:98:18:11:15:62:b7:fd:33:5e:30:65:a5:
                    d5:fc:ec:15:93:8d:6d:9a:88:a8:bb:19:49:fb:ef:
                    3e:21:7e:e9:35:ea:01:4f:d2:aa:75:66:e0:9e:10:
                    9d:94:be:28:db:25:71:3b:38:b9:c5:25:13:d5:de:
                    8d:3a:60:a0:2c:1a:6f:0a:bc:f7:9c:51:b1:7b:f9:
                    64:99:6a:4c:53:c9:d8:38:18:43:2c:0c:6c:cd:15:
                    b0:92:50:3e:53:97:de:41:c9:d7:d5:70:bd:e2:b3:
                    ae:29:e3:96:1b:4b:9b:c3:d0:74:f9:b0:c7:43:a5:
                    bf:8a:e2:e1:e6:fa:45:3b:01:18:6d:46:72:59:0a:
                    9b:45:ed:9f:9c:de:28:e4:65:52:58:45:f7:a4:8f:
                    14:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:66:79:C0:A3:32:6C:DA:13:BD:7D:DE:63:5F:68:A4:7B:A5:A7:80
            X509v3 Authority Key Identifier:
                keyid:7F:26:26:96:BA:0E:69:FA:10:58:BE:F9:8B:13:86:A9:CC:EB:7D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/3137372e3132352e3135322e302f32312d3234203d3e20323632333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4a:df:20:8e:a2:d8:21:6a:6d:c3:35:9f:ca:ae:ad:a7:e0:2a:
         0c:6b:d8:d4:7a:a8:88:18:0d:c0:b2:fa:90:a3:50:05:e4:17:
         69:07:5a:3c:2d:b1:ee:df:81:64:52:64:0d:eb:f4:00:f7:bb:
         40:98:f1:d2:cd:48:de:e3:82:f0:df:fb:59:a9:6e:0e:d6:ab:
         67:ff:c6:87:f7:55:1d:47:9a:80:f9:30:f4:fd:3b:60:fc:54:
         b4:9a:cd:e3:2f:93:db:1e:cb:0e:2e:9d:a0:01:49:b5:93:59:
         46:c3:92:70:4d:49:b8:50:7a:d2:2f:8c:39:1a:58:18:1b:ce:
         76:be:ad:d8:4b:c8:a7:5d:65:f2:30:e3:48:54:2c:cc:50:fd:
         30:d5:53:db:f6:44:ef:7c:3c:90:16:16:7e:39:d3:5b:af:5c:
         eb:54:e5:e8:16:9c:10:d6:bb:74:a9:9b:52:d0:c9:bd:60:cf:
         1f:b0:6e:51:41:87:29:67:ae:0e:6b:dd:5f:00:6a:07:4a:52:
         73:28:e6:5b:1f:c4:c4:ba:44:45:2b:53:95:f0:94:88:e1:bc:
         15:e9:96:90:68:e1:81:ed:41:a9:ad:05:88:45:71:27:77:1f:
         3b:a4:d1:3a:36:86:73:1c:41:11:94:b4:13:ff:6d:00:52:bf:
         3c:00:5e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:47 2024 by rpki-client on console-fra.rpki-client.org