Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3133312e37322e3231392e302f32342d3234203d3e20323632333532.roa
File:                     3133312e37322e3231392e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          aI9w0Vg4NWDv6hIUX6o+nxJ/StRgHevpeXl1phkPhE4=
Subject key identifier:   D5:6B:BF:70:D0:9C:8C:23:46:15:4E:9F:FC:30:7D:89:65:8A:2C:3A
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       799A51DE9129677385F9116E58A0EDF88A1AD59D
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3133312e37322e3231392e302f32342d3234203d3e20323632333532.roa
Signing time:             Thu 04 Apr 2024 15:23:28 +0000
ROA not before:           Thu 04 Apr 2024 15:18:28 +0000
ROA not after:            Thu 03 Apr 2025 15:23:28 +0000
asID:                     262352
IP address blocks:        131.72.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:9a:51:de:91:29:67:73:85:f9:11:6e:58:a0:ed:f8:8a:1a:d5:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Apr  4 15:18:28 2024 GMT
            Not After : Apr  3 15:23:28 2025 GMT
        Subject: CN=D56BBF70D09C8C2346154E9FFC307D89658A2C3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:f3:6d:a1:ac:85:31:70:7a:b5:75:81:34:e1:
                    34:80:d1:c3:b3:cf:c0:c3:2e:42:aa:c9:f2:a7:eb:
                    0c:88:14:3c:64:71:13:92:a2:81:50:f2:ce:27:41:
                    a0:e0:d1:85:ad:3b:c2:bf:d4:c3:74:65:30:8f:6c:
                    ea:7b:ad:15:4f:06:19:ef:2f:db:49:0f:03:e8:9d:
                    6e:bb:94:ee:d7:da:af:26:ce:b3:c3:7b:32:c7:31:
                    d3:33:d2:f5:c3:6f:01:ee:a6:1e:46:b2:2e:db:a5:
                    8a:2e:e1:0c:bb:02:32:8e:b1:39:f7:13:48:c9:c0:
                    04:73:8c:d2:18:a9:30:f5:64:9d:64:3d:d4:d1:1f:
                    b7:3b:0d:fb:24:37:c5:7f:e3:20:05:c2:cd:a6:ba:
                    92:e8:8f:f3:f9:5e:24:ea:1c:b9:05:2c:31:df:37:
                    3c:f6:6e:b2:ad:5c:c7:47:1c:3f:a6:51:89:ad:5f:
                    8f:e8:6e:22:46:5b:ab:26:92:f4:b1:74:52:b4:f3:
                    62:da:77:7c:fb:74:2d:3a:ce:db:29:1f:ef:a1:bd:
                    4b:f8:0f:ed:fa:76:fe:ef:16:34:60:50:28:49:95:
                    c8:41:d9:b2:03:a8:de:5a:a5:de:ec:60:bd:d0:41:
                    88:7c:64:d3:f7:29:ac:0f:f6:0b:a4:1b:41:9e:7d:
                    f3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:6B:BF:70:D0:9C:8C:23:46:15:4E:9F:FC:30:7D:89:65:8A:2C:3A
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3133312e37322e3231392e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:a8:99:66:58:15:5f:7e:de:ce:6d:7b:ff:0a:20:d9:28:ab:
         87:ea:90:13:72:a7:83:f8:57:f4:a8:a4:27:81:d6:1b:4d:18:
         c6:5f:4a:ac:cd:70:3f:22:54:56:68:32:d8:a7:63:7f:e6:46:
         f1:57:df:c3:05:53:1f:ab:f6:35:99:e5:9c:41:bb:39:ab:28:
         47:f6:05:a1:ad:51:95:ed:bf:94:8a:ec:83:85:de:7f:56:f4:
         5a:39:f8:eb:4c:a3:6b:b5:7e:56:17:c8:75:c7:a5:f8:03:d2:
         be:3d:fc:54:35:4e:ca:f5:ce:ee:ec:4c:0b:86:25:d9:35:06:
         48:77:73:e1:be:a0:61:9a:79:4f:dd:b9:58:1a:14:0f:e3:71:
         7a:ad:46:75:6c:da:4f:37:37:0e:6d:05:47:c5:95:a6:e1:fe:
         7b:1f:f2:02:44:cc:78:97:b3:f4:1f:fb:e6:cd:cd:49:64:a7:
         9b:d8:e8:30:ab:cb:cb:26:16:3b:a0:ec:d1:37:c5:8a:ea:8f:
         a9:49:1a:3d:84:c8:e6:cd:3f:2b:8c:8c:80:c6:62:b7:ff:2b:
         d7:36:f0:22:9c:f7:bd:03:c7:cc:c7:9e:be:53:3c:c4:73:10:
         b2:3b:01:cc:88:35:ea:9f:3c:0e:3d:f9:6a:81:0e:c7:7a:38:
         10:3e:a0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:51 2024 by rpki-client on console-ams.rpki-client.org