Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3133312e37322e3231362e302f32332d3233203d3e20323632333532.roa
File:                     3133312e37322e3231362e302f32332d3233203d3e20323632333532.roa (raw, json)
Hash identifier:          p8421BKLCj2JI9imo2QCpG4TrSq1mIosrnBXkbVUNgM=
Subject key identifier:   09:C2:5F:0C:A6:83:DC:D3:DB:B1:36:02:0A:D5:5D:95:F3:F2:42:23
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       36D622B865B564163FB85564034C05AD627933B6
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3133312e37322e3231362e302f32332d3233203d3e20323632333532.roa
Signing time:             Thu 04 Apr 2024 15:23:27 +0000
ROA not before:           Thu 04 Apr 2024 15:18:27 +0000
ROA not after:            Thu 03 Apr 2025 15:23:27 +0000
asID:                     262352
IP address blocks:        131.72.216.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:d6:22:b8:65:b5:64:16:3f:b8:55:64:03:4c:05:ad:62:79:33:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Apr  4 15:18:27 2024 GMT
            Not After : Apr  3 15:23:27 2025 GMT
        Subject: CN=09C25F0CA683DCD3DBB136020AD55D95F3F24223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1e:e5:8c:af:2a:f5:94:dc:72:32:c2:85:0d:
                    b2:0b:1b:1e:05:80:6b:72:27:a1:0b:6f:7f:8c:35:
                    c2:95:4f:00:b2:45:0f:a1:be:b7:c0:9e:72:c1:3e:
                    8a:73:4a:30:74:e1:53:11:be:9f:9e:76:50:75:18:
                    51:e9:8c:7f:52:0a:16:6d:0f:a0:58:26:23:0a:cc:
                    23:01:04:c5:81:99:41:2b:ef:05:cd:e0:04:52:27:
                    cc:6d:4a:e9:b3:72:05:a0:73:6d:82:1b:0d:6b:36:
                    83:5d:af:93:1f:87:d2:39:78:cc:c0:97:48:f6:e0:
                    75:13:8a:24:04:ff:df:10:52:94:37:f2:ea:a9:92:
                    50:c6:90:2b:0b:1d:b1:7f:95:8d:a6:0f:e1:4c:a4:
                    2e:ff:ec:6b:fc:b1:e4:78:7d:6e:00:81:c7:a8:88:
                    8a:24:3d:4e:5e:50:3b:ac:34:0f:e2:16:b0:26:2f:
                    ee:74:96:bd:9c:e2:8b:9d:5f:40:2e:17:3e:48:73:
                    74:c4:f5:07:9f:38:ae:57:46:c1:86:8f:de:2d:db:
                    f7:99:5b:c9:83:2d:b5:c7:b5:a5:b6:41:ef:69:32:
                    81:00:c6:ee:ef:8c:f1:a4:89:67:c1:e9:65:5f:5d:
                    da:15:1b:18:c5:63:0d:04:f3:7e:8b:8f:9b:59:b9:
                    3c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C2:5F:0C:A6:83:DC:D3:DB:B1:36:02:0A:D5:5D:95:F3:F2:42:23
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3133312e37322e3231362e302f32332d3233203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:8f:01:18:6d:11:ff:89:97:86:e8:fb:ce:61:36:1c:2c:8b:
         22:3e:cb:75:aa:86:52:f4:d5:1d:14:df:8f:e2:66:03:95:89:
         68:4b:dd:82:0d:a6:64:bc:0f:d6:37:dd:ca:fb:3a:65:11:c3:
         8e:80:fb:f0:4e:a5:70:59:a4:1c:91:de:a9:56:28:7a:5e:49:
         0b:fa:eb:df:35:67:5d:a9:19:4c:f2:0f:83:31:a6:82:ac:60:
         64:ef:e3:6d:fa:94:5f:3c:89:4b:a4:88:d4:14:49:bc:46:e5:
         5b:d4:58:3c:aa:8e:e7:93:af:81:24:89:29:b1:28:59:cd:22:
         ee:3d:da:9e:2c:d6:5c:37:2d:e0:63:8c:87:14:f2:bc:81:92:
         d3:8f:66:83:50:21:64:3c:55:ff:50:82:b9:aa:ac:29:e4:5e:
         33:ae:11:62:c6:67:d6:e8:29:49:3b:1c:de:cf:72:4c:e2:12:
         f3:a2:bb:62:9f:b0:71:f2:9a:05:50:e8:68:2e:2e:c8:37:2f:
         05:00:4a:1a:08:83:ca:95:54:27:ab:4f:e2:48:b2:5d:9a:12:
         82:a2:da:c9:9f:c3:4d:9f:2c:20:20:d8:3c:a3:16:9b:7b:5c:
         c8:e8:d3:e7:56:e8:b8:0d:32:87:75:ec:ac:13:0e:79:2d:c9:
         5f:27:78:ce
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUNtYiuGW1ZBY/uFVkA0wFrWJ5M7YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE3MEM0MDg1QTIwQ0Q2QUE0NTFGQkNBQzJDQjhGMkND
REJBM0U5NzAeFw0yNDA0MDQxNTE4MjdaFw0yNTA0MDMxNTIzMjdaMDMxMTAvBgNV
BAMTKDA5QzI1RjBDQTY4M0RDRDNEQkIxMzYwMjBBRDU1RDk1RjNGMjQyMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHHuWMryr1lNxyMsKFDbILGx4F
gGtyJ6ELb3+MNcKVTwCyRQ+hvrfAnnLBPopzSjB04VMRvp+edlB1GFHpjH9SChZt
D6BYJiMKzCMBBMWBmUEr7wXN4ARSJ8xtSumzcgWgc22CGw1rNoNdr5Mfh9I5eMzA
l0j24HUTiiQE/98QUpQ38uqpklDGkCsLHbF/lY2mD+FMpC7/7Gv8seR4fW4Agceo
iIokPU5eUDusNA/iFrAmL+50lr2c4oudX0AuFz5Ic3TE9QefOK5XRsGGj94t2/eZ
W8mDLbXHtaW2Qe9pMoEAxu7vjPGkiWfB6WVfXdoVGxjFYw0E836Lj5tZuTzRAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUCcJfDKaD3NPbsTYCCtVdlfPyQiMwHwYDVR0j
BBgwFoAUgXDECFogzWqkUfvKwsuPLM26PpcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby8xbjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1
LzUvODE3MEM0MDg1QTIwQ0Q2QUE0NTFGQkNBQzJDQjhGMkNDREJBM0U5Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84MTcwQzQwODVBMjBDRDZBQTQ1
MUZCQ0FDMkNCOEYyQ0NEQkEzRTk3LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8x
bjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1LzUvMzEz
MzMxMmUzNzMyMmUzMjMxMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzIz
MzM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAGDSNgwDQYJKoZIhvcNAQELBQADggEBADyPARhtEf+J
l4bo+85hNhwsiyI+y3WqhlL01R0U34/iZgOViWhL3YINpmS8D9Y33cr7OmURw46A
+/BOpXBZpByR3qlWKHpeSQv66981Z12pGUzyD4MxpoKsYGTv4236lF88iUukiNQU
SbxG5VvUWDyqjueTr4EkiSmxKFnNIu492p4s1lw3LeBjjIcU8ryBktOPZoNQIWQ8
Vf9QgrmqrCnkXjOuEWLGZ9boKUk7HN7PckziEvOiu2KfsHHymgVQ6GguLsg3LwUA
ShoIg8qVVCerT+JIsl2aEoKi2smfw02fLCAg2DyjFpt7XMjo0+dW6LgNMod17KwT
DnktyV8neM4=
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:26 2024 by rpki-client on console-ams.rpki-client.org