Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/3137372e3132362e3135382e302f32332d3233203d3e20323633353230.roa
File:                     3137372e3132362e3135382e302f32332d3233203d3e20323633353230.roa (raw, json)
Hash identifier:          Md6j24TqQnVQ/KN/7LjDPLeHROHhNe/3eg+gnk5EJ2Q=
Subject key identifier:   EF:59:6D:E0:DA:56:E5:DB:C9:DC:91:75:B6:E9:15:A3:E7:61:FA:28
Certificate issuer:       /CN=DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72
Certificate serial:       2B1A1D1428CB69AD1743E99ED4A09343E9528AB9
Authority key identifier: DA:B2:62:F1:CD:E0:D6:56:D1:ED:2F:94:95:5B:DA:2B:8C:81:4E:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/3137372e3132362e3135382e302f32332d3233203d3e20323633353230.roa
Signing time:             Thu 15 Aug 2024 18:40:33 +0000
ROA not before:           Thu 15 Aug 2024 18:35:33 +0000
ROA not after:            Thu 14 Aug 2025 18:40:33 +0000
asID:                     263520
IP address blocks:        177.126.158.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.crl
                          rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:46:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:1a:1d:14:28:cb:69:ad:17:43:e9:9e:d4:a0:93:43:e9:52:8a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72
        Validity
            Not Before: Aug 15 18:35:33 2024 GMT
            Not After : Aug 14 18:40:33 2025 GMT
        Subject: CN=EF596DE0DA56E5DBC9DC9175B6E915A3E761FA28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bc:4b:f6:c4:e0:93:d6:d8:7f:a2:04:3f:38:
                    b2:3d:0c:75:a4:11:f6:85:94:cf:dc:32:d2:3c:4c:
                    a2:43:61:59:9b:07:61:ba:0b:3e:9c:e8:d8:88:f8:
                    e2:29:44:0f:2b:b9:54:db:32:87:c7:fc:2d:e7:35:
                    2f:c4:b8:ef:81:3e:35:58:36:2d:b9:fe:fb:84:93:
                    76:c2:7d:a0:65:1c:55:22:b9:37:1f:04:6f:db:9c:
                    99:39:9c:29:26:fb:f6:1a:43:8b:e5:b8:7d:f7:ad:
                    de:c8:7b:d4:4f:a6:dd:c9:db:f8:90:23:51:ef:63:
                    f9:8b:9c:c8:7a:e0:36:de:1c:b5:84:75:c2:bc:73:
                    f7:1e:46:32:9c:8a:2d:08:e9:ac:1e:8b:be:aa:09:
                    17:7e:fd:ea:59:a6:2e:d9:04:ce:71:a1:4c:88:7f:
                    ff:5b:d6:0f:96:5d:d9:88:3e:30:96:85:be:d6:a8:
                    fa:44:29:45:3c:3e:e9:22:56:9a:10:d7:a0:35:d5:
                    b4:c0:9e:92:b4:70:a4:4e:62:46:9c:7f:6f:61:bf:
                    c3:f9:f0:db:c0:3b:ed:9c:43:ba:27:d3:1f:84:8a:
                    5c:0c:a0:a7:c2:bd:da:10:84:b8:40:d8:e1:57:83:
                    d5:12:fe:e2:f6:32:12:18:bf:0b:44:74:22:39:02:
                    18:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:59:6D:E0:DA:56:E5:DB:C9:DC:91:75:B6:E9:15:A3:E7:61:FA:28
            X509v3 Authority Key Identifier:
                keyid:DA:B2:62:F1:CD:E0:D6:56:D1:ED:2F:94:95:5B:DA:2B:8C:81:4E:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/3137372e3132362e3135382e302f32332d3233203d3e20323633353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:08:31:a0:1b:c8:f8:19:4d:12:1b:36:a5:57:bd:a8:e8:91:
         1b:b2:7b:67:c1:85:5d:3f:33:e8:f0:d2:68:02:c7:6a:8c:6c:
         8e:6e:ac:58:40:6e:0f:4a:f9:b1:aa:c0:27:61:90:0c:63:96:
         f4:df:34:6a:a6:16:50:ad:38:c6:54:91:90:e5:a3:70:a5:8c:
         27:fb:7d:1e:52:5d:8d:e7:4b:78:45:94:7e:c3:ed:7d:07:5e:
         6e:01:df:18:db:02:ad:0f:4a:d4:4a:2e:b8:62:5d:de:25:81:
         40:14:0f:f2:dd:c8:8e:42:ce:05:a8:7d:6d:b7:59:bd:ca:2f:
         4d:db:a1:db:84:c9:81:9b:5e:93:00:57:c2:ee:f0:5f:cd:b1:
         e7:f7:84:eb:41:53:c1:d3:d0:53:a6:67:1e:03:a3:98:92:c7:
         8b:dc:b5:c6:7b:f4:8a:cc:75:55:d2:61:4f:eb:fa:97:d8:77:
         00:00:3a:34:62:d5:f8:dc:ec:3e:89:9a:4a:f4:cf:de:61:80:
         bd:30:b8:61:3f:da:7a:8a:72:7d:c6:4c:c0:ff:92:75:a0:6a:
         f2:2c:7b:a7:32:0c:17:f4:de:ba:0f:77:bc:08:1e:33:3d:a5:
         1b:9d:67:31:4a:51:49:50:5f:cd:13:c6:32:b8:f0:e8:12:c0:
         4b:9e:9e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:56 2024 by rpki-client on console-fra.rpki-client.org