Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e37352e302f32342d3234203d3e20323632333338.roa
File:                     3137372e3132362e37352e302f32342d3234203d3e20323632333338.roa (raw, json)
Hash identifier:          RvzJO+nT/ySRKvYvzO3a6xrX/p4Ac9MrSThBGEtDRI4=
Subject key identifier:   EE:36:BE:9F:AA:CC:A7:2E:D1:0F:C1:3F:2A:8A:4A:C7:98:96:09:FB
Certificate issuer:       /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Certificate serial:       74A515BE0512DB6A4A9287D5BDCA8F07C2ABA876
Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e37352e302f32342d3234203d3e20323632333338.roa
Signing time:             Wed 24 Apr 2024 12:46:45 +0000
ROA not before:           Wed 24 Apr 2024 12:41:45 +0000
ROA not after:            Wed 23 Apr 2025 12:46:45 +0000
asID:                     262338
IP address blocks:        177.126.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl
                          rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a5:15:be:05:12:db:6a:4a:92:87:d5:bd:ca:8f:07:c2:ab:a8:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
        Validity
            Not Before: Apr 24 12:41:45 2024 GMT
            Not After : Apr 23 12:46:45 2025 GMT
        Subject: CN=EE36BE9FAACCA72ED10FC13F2A8A4AC7989609FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f3:88:d0:ae:38:cc:47:93:08:94:d5:d6:cf:
                    ac:63:b0:03:c0:18:50:ee:53:0f:2e:97:75:a2:e0:
                    98:e7:e3:3a:9a:71:42:ae:30:85:ec:67:46:f7:51:
                    72:d8:2f:28:2e:a4:b3:d2:5a:2c:f2:cc:90:19:c7:
                    51:ee:ae:38:98:a2:2d:36:d2:9b:d1:f8:4e:7c:ea:
                    74:50:3c:be:cc:e3:73:bc:ea:05:df:b2:67:aa:80:
                    04:68:bb:9b:03:39:a1:42:0b:58:31:c0:33:84:f4:
                    16:df:d9:7b:14:8a:3b:11:e9:8a:74:6a:57:55:a2:
                    dc:98:a3:ca:87:54:90:55:e7:e6:a1:4e:bc:98:c5:
                    c4:05:19:6b:3e:93:e6:61:8e:75:29:69:33:59:09:
                    5f:eb:cb:32:42:ad:5c:63:8b:bb:c9:2c:d1:5d:67:
                    bd:de:2e:ed:48:9b:59:7d:6b:c7:7b:f2:be:aa:21:
                    e3:3f:78:e4:16:f9:27:5c:77:6e:34:12:7a:f9:7b:
                    a0:77:46:ec:82:db:a7:2c:35:ca:42:51:64:09:34:
                    bd:ce:9d:63:f7:27:70:83:d8:5e:08:31:a2:83:26:
                    d1:19:01:30:e0:70:dc:16:3a:66:4a:b2:45:9a:5e:
                    4b:75:4a:86:27:b2:af:a9:06:c9:a4:4f:ba:d5:52:
                    87:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:36:BE:9F:AA:CC:A7:2E:D1:0F:C1:3F:2A:8A:4A:C7:98:96:09:FB
            X509v3 Authority Key Identifier:
                keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e37352e302f32342d3234203d3e20323632333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:e5:79:c4:cc:f6:53:24:c1:cc:22:89:4c:75:a8:0f:de:f6:
         04:da:fc:fa:95:88:a7:f6:d3:75:30:e2:fe:c2:e6:81:70:b4:
         47:bb:69:f5:ff:fb:71:56:75:73:80:d0:93:e5:f9:ce:17:77:
         bb:f8:12:44:44:f3:40:23:99:2e:05:27:31:ec:53:32:a2:4b:
         55:57:fd:a7:42:16:2e:09:26:97:aa:57:86:72:c0:e2:0b:a0:
         42:15:87:af:c7:24:73:7e:b2:c9:0d:01:39:0c:f3:19:3d:d5:
         a7:b6:44:fa:27:53:b3:77:83:e5:c6:e9:0e:11:b3:f2:2d:02:
         63:0b:8e:8a:ee:f3:d7:aa:5e:b8:ee:a9:3a:3e:ed:fa:54:d9:
         c4:54:1f:9d:1d:02:eb:20:00:c4:c2:70:6f:6b:27:20:29:63:
         59:be:ac:ad:b0:a8:01:e8:d7:c7:38:14:a4:19:94:56:da:3f:
         9c:22:1c:5b:cc:e2:0f:03:35:01:9d:6b:79:5e:f3:fb:e8:1a:
         11:3e:b4:2f:53:84:d3:11:31:af:81:78:f8:22:a7:95:4e:e5:
         cb:87:bd:0a:17:63:7e:c7:d2:98:a7:17:51:6d:4a:23:5e:d3:
         d5:76:df:88:0e:7d:b4:8d:b0:6a:91:1a:ab:fa:00:1f:7f:3e:
         4a:c0:38:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 00:22:06 2024 by rpki-client on console-fra.rpki-client.org