Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e37342e302f32342d3234203d3e20323632333338.roa
File:                     3137372e3132362e37342e302f32342d3234203d3e20323632333338.roa (raw, json)
Hash identifier:          uAeZYi1QPZU0xHXuam5QBtFNpvGw2T5nOvTB49/qRnE=
Subject key identifier:   0D:36:D0:F2:25:7E:F2:D2:A9:4B:05:B5:58:C2:10:1F:5C:33:BD:4B
Certificate issuer:       /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Certificate serial:       3FDDF381A7297FEBFF6354769FD5D41A6BF8D43D
Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e37342e302f32342d3234203d3e20323632333338.roa
Signing time:             Wed 24 Apr 2024 12:46:52 +0000
ROA not before:           Wed 24 Apr 2024 12:41:52 +0000
ROA not after:            Wed 23 Apr 2025 12:46:52 +0000
asID:                     262338
IP address blocks:        177.126.74.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl
                          rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:dd:f3:81:a7:29:7f:eb:ff:63:54:76:9f:d5:d4:1a:6b:f8:d4:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
        Validity
            Not Before: Apr 24 12:41:52 2024 GMT
            Not After : Apr 23 12:46:52 2025 GMT
        Subject: CN=0D36D0F2257EF2D2A94B05B558C2101F5C33BD4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bc:da:d5:84:76:30:c3:bf:d4:2b:ed:33:41:
                    d8:97:c3:0e:ad:9d:c4:f0:f8:87:79:a8:f2:79:e6:
                    10:d3:fb:b7:14:3f:86:7a:95:97:4b:98:ed:15:64:
                    1a:dd:e0:65:78:cc:c4:41:27:e1:d6:6c:cd:18:f4:
                    ee:50:47:63:56:2b:49:e1:f9:96:57:f6:02:99:3b:
                    3e:85:54:50:9a:8a:bb:a6:72:f9:35:69:e6:02:d6:
                    35:57:a7:e5:84:26:57:ff:76:a7:7a:4d:2d:d8:b1:
                    ec:28:be:fe:cf:bd:81:56:8c:f3:5a:95:66:19:9c:
                    ac:74:51:6c:99:93:38:c8:1e:5f:4e:8e:1b:80:bb:
                    cb:e2:27:29:8f:5a:6a:9b:82:b0:96:42:dd:eb:96:
                    a4:14:f7:73:94:d1:4b:33:48:6b:54:bc:55:a2:4a:
                    bf:bd:76:2b:7b:23:9b:ab:c6:2d:a9:b9:8e:66:78:
                    63:4c:e9:4a:5b:f9:a5:bd:24:c7:d3:e1:04:9f:65:
                    02:95:21:1f:ec:2e:2c:d3:1e:1e:c5:b6:a2:d1:81:
                    6f:e9:ab:ef:16:79:1a:d1:97:d0:b0:ae:71:b7:d0:
                    55:6c:c8:35:2e:4b:7d:2f:63:66:40:fa:ac:24:6d:
                    9e:53:18:14:44:d3:c7:7f:43:4d:31:b0:a2:30:ae:
                    ea:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:36:D0:F2:25:7E:F2:D2:A9:4B:05:B5:58:C2:10:1F:5C:33:BD:4B
            X509v3 Authority Key Identifier:
                keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e37342e302f32342d3234203d3e20323632333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:c6:10:86:af:bd:47:ba:69:3a:11:cc:72:8c:82:9d:64:1b:
         d7:bb:5d:10:ad:55:97:69:f4:7b:42:89:03:ba:b8:b4:e2:bd:
         95:d5:f2:62:05:23:64:16:8c:31:74:8b:28:99:82:97:07:8b:
         cd:0e:b7:7d:93:7a:83:0a:97:88:d8:ed:50:c4:84:e1:c6:6b:
         77:2d:39:9c:d9:e9:a1:d1:c1:de:da:94:d1:08:c1:8e:c4:6f:
         f5:7e:e3:77:e6:85:32:0a:e9:20:28:83:8a:87:1c:66:6a:75:
         89:ca:44:8b:bf:e8:22:96:6e:3c:69:aa:d8:91:7d:3b:03:b3:
         26:4f:55:6d:7c:b2:29:82:30:28:33:88:88:25:80:23:d2:5e:
         56:e8:3e:7b:97:79:e0:4c:f6:33:92:0d:e5:60:df:0f:ff:a9:
         3e:f7:ce:c9:cb:f1:c5:ab:af:d4:99:d2:9c:2a:6b:fd:0c:eb:
         00:ab:2d:da:53:4c:81:44:99:c7:8b:8e:54:e3:86:05:33:e2:
         fe:90:05:dc:1a:cf:ab:2a:c6:69:2c:0a:ec:55:5b:b2:03:96:
         d1:b6:7a:33:e0:99:d2:73:7d:46:0c:c1:d3:d4:17:3e:fa:04:
         5d:7c:54:85:3a:ed:5e:6d:0e:6e:4c:41:70:fd:74:f2:ae:39:
         3e:d9:bb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 00:29:02 2024 by rpki-client on console-ams.rpki-client.org