Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e36362e302f32332d3233203d3e20323632333338.roa
File:                     3137372e3132362e36362e302f32332d3233203d3e20323632333338.roa (raw, json)
Hash identifier:          j4WSwIPcqQSJKc6wRmoxq64YcTHjH3Vqq4OqstulhVg=
Subject key identifier:   9E:68:4D:9F:7D:7E:53:0C:6D:4B:BC:CB:E1:A2:48:53:66:72:26:33
Certificate issuer:       /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Certificate serial:       47CDE70DC886C358E73CC9F909791FC8FA36C80C
Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e36362e302f32332d3233203d3e20323632333338.roa
Signing time:             Mon 06 May 2024 11:45:49 +0000
ROA not before:           Mon 06 May 2024 11:40:49 +0000
ROA not after:            Mon 05 May 2025 11:45:49 +0000
asID:                     262338
IP address blocks:        177.126.66.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl
                          rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:cd:e7:0d:c8:86:c3:58:e7:3c:c9:f9:09:79:1f:c8:fa:36:c8:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
        Validity
            Not Before: May  6 11:40:49 2024 GMT
            Not After : May  5 11:45:49 2025 GMT
        Subject: CN=9E684D9F7D7E530C6D4BBCCBE1A2485366722633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5c:08:97:55:ff:93:88:32:96:81:4a:8c:4b:
                    90:59:90:4e:7d:12:7c:a0:4b:dc:8a:3b:d7:60:fc:
                    e7:d9:38:4e:99:e5:7c:a1:ac:11:f0:0b:c8:83:55:
                    38:d7:9c:1d:9f:d6:d1:6a:c0:d8:d7:51:92:b1:fa:
                    6c:da:b2:b8:64:39:11:ea:c1:f5:2a:44:5e:1e:0d:
                    7b:15:b4:f6:33:09:67:92:4b:dc:00:72:1f:26:40:
                    d7:cc:4f:00:62:a8:6f:b7:af:63:90:c1:25:7d:8f:
                    3a:25:bd:b6:c2:2f:25:7b:5d:d8:be:b3:4f:ff:c6:
                    bd:d5:3a:6a:a1:76:70:f1:90:97:d1:cc:2e:4c:3c:
                    3c:18:58:9d:e5:4f:5f:cc:27:ee:9e:d1:be:a3:66:
                    c8:c1:88:f8:7b:f2:d5:ec:a1:8d:16:62:b7:ba:02:
                    87:fd:57:e3:85:b9:83:ee:1e:e4:91:11:42:b6:a9:
                    20:72:52:fa:f6:7b:b7:f6:c4:37:bb:b4:ca:09:29:
                    17:48:9f:ec:57:df:2a:83:f4:f2:c3:63:5a:bf:c3:
                    a2:7f:0c:ba:c1:46:7a:7d:25:b6:4c:d2:08:ab:81:
                    b2:76:b3:62:f6:b6:29:81:bd:cc:76:7a:64:60:c8:
                    eb:3d:64:1a:78:03:67:dc:a1:81:99:77:af:ea:7e:
                    eb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:68:4D:9F:7D:7E:53:0C:6D:4B:BC:CB:E1:A2:48:53:66:72:26:33
            X509v3 Authority Key Identifier:
                keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e36362e302f32332d3233203d3e20323632333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:19:98:1e:1e:7f:40:45:56:ee:ce:9a:8e:c3:07:16:72:8e:
         85:3d:d9:b7:da:47:a8:0e:c6:c4:61:d9:05:f1:89:32:bf:3f:
         95:08:d6:59:a0:c4:82:f7:eb:16:f5:91:1f:78:f4:ea:d1:7e:
         5b:94:c7:17:68:71:df:c7:2d:18:30:dd:84:e7:68:49:87:9f:
         91:c8:11:37:63:a5:a2:1f:0a:ec:a0:41:8e:fe:41:b7:5f:97:
         61:9b:9f:30:cf:e9:86:a1:11:29:7f:b0:63:90:dc:a1:a3:ee:
         80:d7:e0:30:7f:7f:23:b1:b4:8c:4d:8d:14:d9:23:6c:22:d4:
         10:0c:b8:2b:22:e8:44:81:d5:1e:48:59:5f:d0:4a:1d:9c:ab:
         cb:95:63:67:6a:0c:34:37:5b:b6:f8:a9:9a:b5:69:e0:68:7d:
         32:ec:96:6e:b6:8f:dd:d8:eb:e2:12:12:40:40:ed:5e:da:19:
         ff:c8:b5:c6:81:af:a9:33:90:3e:c2:83:b4:49:cb:82:c6:39:
         87:3e:6f:e0:bb:eb:f3:90:52:89:96:08:54:b2:87:ee:c4:69:
         fa:5e:65:0d:bf:66:7c:85:bd:a9:e9:bc:17:f8:d5:e0:c1:7a:
         69:c7:21:20:a9:e9:62:7e:25:40:b7:1a:32:bc:e7:f2:08:d4:
         83:bc:93:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 00:22:06 2024 by rpki-client on console-fra.rpki-client.org