Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3133312e37322e3231372e302f32342d3234203d3e20323632333532.roa
File:                     3133312e37322e3231372e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          A3VWA/N8hxFLPEMmneCSAqS/EoHhmEG/zOxQ6tdSFmw=
Subject key identifier:   43:A4:F3:B1:4D:7C:BA:E0:F5:45:6E:AD:22:5B:D8:6F:81:05:E1:CD
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       4F17601958014C02EB70065F25019A0768672EC8
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3133312e37322e3231372e302f32342d3234203d3e20323632333532.roa
Signing time:             Tue 22 Oct 2024 20:04:25 +0000
ROA not before:           Tue 22 Oct 2024 19:59:25 +0000
ROA not after:            Tue 21 Oct 2025 20:04:25 +0000
asID:                     262352
IP address blocks:        131.72.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:17:60:19:58:01:4c:02:eb:70:06:5f:25:01:9a:07:68:67:2e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Oct 22 19:59:25 2024 GMT
            Not After : Oct 21 20:04:25 2025 GMT
        Subject: CN=43A4F3B14D7CBAE0F5456EAD225BD86F8105E1CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ad:d8:b3:ce:90:11:0c:8c:de:71:b3:76:5e:
                    0d:f5:d4:5f:30:ff:bf:9f:dd:09:b0:81:cf:cf:3c:
                    02:ff:74:cf:33:b2:8d:7f:92:78:f4:09:05:74:e8:
                    fa:d0:e3:4f:0b:00:6b:b7:e0:0f:7b:de:c9:7c:60:
                    2e:8c:c6:2f:c2:90:8e:05:f8:09:1a:53:48:ec:59:
                    33:19:d0:65:c7:f3:92:5f:84:c6:26:aa:14:05:62:
                    76:58:7b:e3:ad:e6:0d:fc:26:b9:ae:32:87:2f:e6:
                    29:25:ab:ea:57:04:0a:fe:67:29:2b:8d:fb:a3:1f:
                    0b:ec:30:82:05:cb:72:7a:7f:cc:b1:79:bc:1b:71:
                    13:39:4a:d5:d2:0b:23:58:40:45:13:61:5b:4c:5f:
                    99:52:97:4e:ac:f0:70:e1:51:b7:a1:38:47:f8:13:
                    40:b1:6b:fe:78:89:22:ed:5d:89:ce:16:1e:cd:5b:
                    65:8f:1c:15:5c:b5:70:a9:5c:7e:6a:65:a6:c3:e8:
                    3a:0d:3b:f7:16:d5:5b:49:81:0c:5c:b8:78:42:a5:
                    32:ad:7c:b4:99:15:2d:be:8e:1e:e1:3a:d4:87:11:
                    8f:11:67:56:3a:e0:16:0c:b8:b3:df:80:a1:50:c6:
                    80:65:fd:cb:0a:2a:e5:5c:b0:f2:bc:f2:a3:50:a1:
                    72:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A4:F3:B1:4D:7C:BA:E0:F5:45:6E:AD:22:5B:D8:6F:81:05:E1:CD
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3133312e37322e3231372e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:03:38:5c:d0:49:93:4e:7d:cb:97:54:a6:ce:23:80:48:46:
         0c:7f:09:03:00:c8:cc:0d:e4:51:d3:5c:92:68:0d:de:a1:73:
         ab:7a:c3:91:72:d6:70:dc:39:d0:0e:c5:23:e0:83:36:06:1b:
         cd:19:70:66:3f:a2:1a:68:88:bd:2e:80:08:0f:24:03:c2:a4:
         11:68:e5:00:d0:50:d1:ef:d9:db:66:fd:ed:6f:c9:64:1a:38:
         ec:08:0e:67:55:93:e6:8c:c7:b6:3d:3b:e2:07:75:fe:f1:c8:
         1f:69:27:1c:a0:e4:32:a1:e5:c1:2d:1a:7b:e0:cd:de:87:53:
         68:f2:b4:ed:b1:fd:c0:05:68:b0:df:b1:40:02:76:18:d1:93:
         46:89:ca:d6:58:fa:b4:01:03:1f:3b:04:c2:72:48:28:2e:75:
         d2:31:ff:0e:dc:74:66:1b:31:b5:d0:3c:81:03:e2:45:11:27:
         02:41:62:45:8e:61:e4:de:fd:a4:97:05:2c:6c:68:55:fc:5f:
         f5:4b:f4:42:71:34:37:5f:40:f0:cc:d3:48:73:43:92:8f:bc:
         8a:3c:e7:ba:83:47:ed:3a:64:0a:b0:7b:05:9a:e8:a7:81:0f:
         9d:7a:9b:c6:11:85:d7:bf:92:45:af:1f:27:47:52:3f:10:9d:
         40:f7:55:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:04 2024 by rpki-client on console-fra.rpki-client.org