Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e37332e302f32342d3234203d3e20323632333338.roa
File:                     3137372e3132362e37332e302f32342d3234203d3e20323632333338.roa (raw, json)
Hash identifier:          I6oX+RcLHvgNHneFNVVYvoCo+vHriClr3sTP9fVG7H8=
Subject key identifier:   95:8A:8D:84:22:29:59:42:5C:8B:BA:2A:DC:8F:AC:E4:62:27:63:23
Certificate issuer:       /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Certificate serial:       656BF24057DE5BC932E01EC12C700475704ED6A1
Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e37332e302f32342d3234203d3e20323632333338.roa
Signing time:             Wed 24 Apr 2024 12:46:59 +0000
ROA not before:           Wed 24 Apr 2024 12:41:59 +0000
ROA not after:            Wed 23 Apr 2025 12:46:59 +0000
asID:                     262338
IP address blocks:        177.126.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl
                          rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:6b:f2:40:57:de:5b:c9:32:e0:1e:c1:2c:70:04:75:70:4e:d6:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
        Validity
            Not Before: Apr 24 12:41:59 2024 GMT
            Not After : Apr 23 12:46:59 2025 GMT
        Subject: CN=958A8D84222959425C8BBA2ADC8FACE462276323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a8:10:48:c2:0d:7d:e6:e3:87:75:67:9e:2b:
                    d3:8c:52:fb:c2:63:3d:bd:96:77:5a:ee:a4:0a:d9:
                    a9:11:7c:79:bb:86:2e:fd:39:0d:69:01:7f:2a:a1:
                    67:a5:ca:6e:96:66:d5:7d:ef:05:ce:06:08:40:51:
                    ab:0d:25:ff:35:4f:40:26:3b:95:3f:93:b1:f7:47:
                    d6:19:ee:47:fb:f7:bc:f5:cf:ce:9c:4a:68:70:89:
                    b5:e4:36:82:9a:53:e2:62:c9:25:33:5d:0d:31:f2:
                    56:35:f8:31:fc:7f:a4:28:01:ab:3a:eb:29:9f:94:
                    14:14:3c:ed:f4:21:b4:59:c1:0f:80:3b:33:34:3b:
                    91:a6:77:37:24:1a:f3:ff:a3:83:7f:8a:df:0f:ab:
                    05:31:b1:49:c0:1e:8e:d2:21:b9:e3:6a:0c:bd:cc:
                    6e:57:d0:bd:21:83:74:c5:27:fa:d6:bc:9d:d1:fc:
                    3b:6e:05:3f:3c:45:66:e5:e1:f8:68:2b:56:04:7f:
                    ea:0a:74:54:67:e5:59:6d:f8:08:8c:10:80:d6:27:
                    46:fe:23:23:9c:ef:7d:ce:e2:7d:b7:d2:f9:11:52:
                    07:e3:04:e5:7e:8d:e5:49:ed:16:21:71:31:0b:01:
                    d9:39:46:5f:74:62:a1:93:b4:80:e4:ae:91:27:70:
                    32:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8A:8D:84:22:29:59:42:5C:8B:BA:2A:DC:8F:AC:E4:62:27:63:23
            X509v3 Authority Key Identifier:
                keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e37332e302f32342d3234203d3e20323632333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:50:e1:09:61:1b:e2:56:90:cd:35:aa:ff:6c:93:2a:aa:cc:
         97:2f:48:b8:fd:1d:90:ac:37:75:25:cf:a0:e1:66:cb:14:79:
         37:f0:be:b4:a4:06:e7:57:db:47:11:1d:44:3a:ac:e4:4e:95:
         91:01:56:32:8b:9b:52:4d:ca:ea:40:dd:0c:49:b0:13:54:00:
         6a:07:7c:86:58:3a:33:f8:f6:7d:4d:85:04:90:0a:9d:2d:88:
         17:32:f9:b2:03:62:dd:48:27:20:99:e8:5e:be:95:62:d6:be:
         54:4f:89:79:be:83:8a:4b:7b:8d:be:5b:98:05:af:6f:ab:95:
         5e:82:79:e4:3a:cd:50:92:b4:c8:8f:13:b7:04:b0:97:c5:a5:
         16:3e:52:d5:d9:d3:07:46:9b:9f:e9:ea:72:c5:99:17:e5:26:
         d1:47:31:e0:8c:83:b4:9f:06:eb:fb:49:06:ba:28:69:f7:fd:
         0f:4f:c9:97:64:34:a7:33:e6:f2:70:a3:e5:a5:b0:a7:75:53:
         9d:cb:6b:3c:bd:3e:fb:c9:d4:9a:7b:16:97:42:48:1a:55:1e:
         64:a2:5b:d4:29:12:7a:c1:4b:c2:47:42:15:03:50:0c:a9:c6:
         cd:17:d3:ba:db:9c:08:ad:db:b5:f4:4b:4d:7c:99:8a:b4:03:
         1d:fc:f5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 00:22:06 2024 by rpki-client on console-fra.rpki-client.org