Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3133312e37322e3231372e302f32342d3234203d3e20323632333532.roa
File:                     3133312e37322e3231372e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          AmH0VUjyrLWNhde4UIzgudvwZC6DpKqZ6EC+LUX5bto=
Subject key identifier:   A3:E3:64:5B:E8:DF:23:93:BA:D7:33:B9:BD:4E:74:4F:8A:FE:1B:E7
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       31C7E71D9F9C4BDD89D209BCF772CB6E3448A508
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3133312e37322e3231372e302f32342d3234203d3e20323632333532.roa
Signing time:             Thu 04 Apr 2024 15:23:27 +0000
ROA not before:           Thu 04 Apr 2024 15:18:27 +0000
ROA not after:            Thu 03 Apr 2025 15:23:27 +0000
asID:                     262352
IP address blocks:        131.72.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c7:e7:1d:9f:9c:4b:dd:89:d2:09:bc:f7:72:cb:6e:34:48:a5:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Apr  4 15:18:27 2024 GMT
            Not After : Apr  3 15:23:27 2025 GMT
        Subject: CN=A3E3645BE8DF2393BAD733B9BD4E744F8AFE1BE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:00:f3:43:02:5f:5c:1a:a6:9b:6e:c9:fe:15:
                    78:9d:6c:cc:12:90:bd:0b:c5:5d:62:b9:ee:ee:87:
                    ac:2d:13:a4:73:ee:09:c1:72:f3:ad:17:f0:72:59:
                    de:b4:67:e2:6c:65:04:12:91:21:4c:6b:14:9e:10:
                    ce:91:89:54:fd:61:f3:65:11:d1:f3:c2:93:2a:bc:
                    4f:d1:14:b2:05:06:cc:8a:96:9d:37:7f:d9:64:4f:
                    7c:a4:de:74:cb:84:82:cd:c3:67:5c:73:c2:fe:b2:
                    9c:44:f9:90:bd:b3:58:8c:4d:35:f3:6f:67:bc:90:
                    df:76:c9:48:df:b1:b0:f0:ee:bb:63:6f:1e:f8:61:
                    7d:97:fa:e5:60:c7:bb:af:28:21:c3:a1:bb:f8:df:
                    df:3b:9d:4b:da:71:43:06:23:e5:0f:b2:cc:79:9e:
                    ba:a2:18:7b:e1:f1:b2:14:11:24:c1:49:75:dc:90:
                    b0:62:62:70:ad:5e:1b:aa:af:19:04:9a:57:e1:16:
                    ef:af:da:41:a2:ee:e5:20:54:d0:6a:2b:bd:74:27:
                    eb:db:5b:63:8f:45:38:99:d7:80:34:48:22:1f:26:
                    8b:34:db:1b:06:bc:da:8f:03:f7:02:d2:e5:d8:75:
                    99:f2:e2:c6:3f:75:18:55:29:d9:cd:b8:fc:15:18:
                    c9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E3:64:5B:E8:DF:23:93:BA:D7:33:B9:BD:4E:74:4F:8A:FE:1B:E7
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3133312e37322e3231372e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:3e:e8:b3:37:fb:3c:21:c3:78:2c:37:39:06:eb:93:d7:e1:
         37:e4:e7:ff:23:0c:97:79:44:98:a9:b5:00:52:5a:56:ef:ed:
         8b:cb:d3:4d:6c:9a:c1:23:c2:49:3a:42:3d:c9:cf:c6:c2:eb:
         61:1e:8b:bf:80:50:c7:94:30:fe:9a:f1:88:3c:a6:49:2b:cc:
         26:05:d1:70:53:bf:1b:0c:7c:96:4a:e1:53:d2:91:1c:9e:e0:
         c4:6e:71:56:a1:90:92:df:40:6a:7c:94:41:da:a9:b7:6f:a6:
         04:e8:3f:40:a2:df:70:d3:8a:7c:95:ad:32:87:d9:55:71:70:
         ff:2f:c7:28:40:91:52:65:cd:0d:9a:03:6f:a5:28:bc:07:a8:
         bd:72:f4:1d:ab:68:c8:a7:0f:aa:53:08:d7:b9:9e:14:af:44:
         54:55:c9:e5:59:a6:1f:3c:9c:a2:95:38:a0:f8:19:bf:b3:a3:
         9d:ee:a1:ad:95:7e:33:57:a8:fd:b6:b0:b8:f5:87:a9:87:39:
         0b:55:32:df:8c:40:d0:db:56:12:16:db:85:bb:f0:4c:fb:6a:
         dd:fa:9d:ca:53:cf:cd:a9:8e:58:70:3d:e0:bf:7a:f1:ae:b7:
         54:11:b1:61:97:b9:24:8d:25:3e:fe:82:46:55:75:db:15:4f:
         0a:fd:d6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:50:52 2024 by rpki-client on console-ams.rpki-client.org