Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/1/3133312e37322e34342e302f32322d3332203d3e203631373132.roa
File:                     3133312e37322e34342e302f32322d3332203d3e203631373132.roa (raw, json)
Hash identifier:          Xoc0ntJsvbQM5N9dF3i9g1YRrY8h8Ni0na0hPhDFerY=
Subject key identifier:   B6:09:79:99:2A:6F:1F:8F:B0:6E:56:94:02:23:F8:1C:E1:34:3F:94
Certificate issuer:       /CN=5DBC18BF2E89F3EF15D9A42DF4825CB6389FF10B
Certificate serial:       6D9E67298AB619D1E9EC6C90987278DB660EA2BD
Authority key identifier: 5D:BC:18:BF:2E:89:F3:EF:15:D9:A4:2D:F4:82:5C:B6:38:9F:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBC18BF2E89F3EF15D9A42DF4825CB6389FF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/1/3133312e37322e34342e302f32322d3332203d3e203631373132.roa
Signing time:             Thu 04 Apr 2024 02:43:58 +0000
ROA not before:           Thu 04 Apr 2024 02:38:58 +0000
ROA not after:            Thu 03 Apr 2025 02:43:58 +0000
asID:                     61712
IP address blocks:        131.72.44.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/1/5DBC18BF2E89F3EF15D9A42DF4825CB6389FF10B.crl
                          rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/1/5DBC18BF2E89F3EF15D9A42DF4825CB6389FF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBC18BF2E89F3EF15D9A42DF4825CB6389FF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:9e:67:29:8a:b6:19:d1:e9:ec:6c:90:98:72:78:db:66:0e:a2:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DBC18BF2E89F3EF15D9A42DF4825CB6389FF10B
        Validity
            Not Before: Apr  4 02:38:58 2024 GMT
            Not After : Apr  3 02:43:58 2025 GMT
        Subject: CN=B60979992A6F1F8FB06E56940223F81CE1343F94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d7:dd:78:44:81:30:1e:13:54:9f:1d:cc:8b:
                    49:66:9e:42:e6:ad:ce:23:9c:33:62:21:ef:dc:08:
                    36:7c:7b:1f:3e:26:4e:6b:3f:68:9b:87:f0:3d:ce:
                    52:08:70:e9:b3:2b:2b:2f:15:8b:13:d2:ad:ba:b0:
                    f4:6d:6f:51:9b:1d:13:ad:53:b5:1b:7c:a2:8f:c9:
                    03:61:c8:a8:5a:3d:19:c2:f3:d9:33:c5:9c:2b:c5:
                    96:b0:da:bb:08:55:69:5a:fc:7f:c6:30:b0:04:1a:
                    1b:e9:a6:9f:68:c3:b7:ed:e3:00:65:bc:7e:82:e8:
                    84:9e:fc:9e:93:81:80:0a:90:e9:3b:21:d2:b4:d3:
                    e7:03:be:de:7f:61:39:3b:97:1b:cf:2c:4f:e1:58:
                    5e:3d:b5:a5:85:5a:d0:45:ac:e6:48:15:90:04:c4:
                    80:05:0d:78:73:8c:4e:4b:f3:2b:5a:82:55:07:17:
                    0a:cf:0a:39:03:0e:de:80:f6:c7:26:b0:e0:02:b9:
                    fc:64:94:1d:f4:b8:11:76:2f:45:64:50:56:69:b6:
                    ba:eb:8a:42:a2:c9:67:e9:10:71:b6:48:40:39:74:
                    a8:d6:c0:0b:71:3a:1d:9b:1d:be:f6:94:db:f5:db:
                    d5:1c:17:ee:dd:70:3f:ad:ff:89:27:2e:01:ed:b9:
                    20:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:09:79:99:2A:6F:1F:8F:B0:6E:56:94:02:23:F8:1C:E1:34:3F:94
            X509v3 Authority Key Identifier:
                keyid:5D:BC:18:BF:2E:89:F3:EF:15:D9:A4:2D:F4:82:5C:B6:38:9F:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/1/5DBC18BF2E89F3EF15D9A42DF4825CB6389FF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBC18BF2E89F3EF15D9A42DF4825CB6389FF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/1/3133312e37322e34342e302f32322d3332203d3e203631373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:60:f3:a7:64:59:8b:ab:0b:53:ce:4d:c4:03:df:f3:0d:4d:
         b2:02:1f:ae:49:5c:b4:a6:33:49:e9:c7:47:d2:90:97:bd:34:
         28:4e:b4:16:be:96:f0:29:75:ae:18:21:1b:cb:98:f1:2a:49:
         63:15:bb:98:a1:88:52:9e:7b:e5:df:69:97:00:11:4d:1d:0c:
         4f:cd:ad:e4:60:ea:f6:0f:2f:6b:ec:3a:32:19:c3:bb:42:bf:
         7a:e3:da:0f:0d:1e:92:8f:9d:0e:55:17:e2:fa:01:4d:de:bb:
         d3:e9:77:09:33:c3:df:41:1c:41:d0:c5:f5:7a:03:ea:f5:cc:
         7d:e0:d4:a8:de:1a:c5:32:5e:48:f1:8a:eb:8a:8f:0c:47:6c:
         31:40:19:a1:e6:e3:10:cf:bf:d2:46:74:60:c8:13:e5:63:5f:
         64:43:25:36:0c:fa:2f:7b:69:bd:a7:e6:8d:f4:44:3a:ad:18:
         27:21:af:ce:58:d6:e6:2d:cd:6f:e0:ff:c9:4f:8a:a8:29:ef:
         26:9d:1e:d4:98:f9:ec:0f:df:22:26:35:5e:1f:63:a6:0f:f4:
         2c:74:6b:2f:7a:d7:0a:7a:d0:2e:06:72:d2:a2:9d:4b:b8:61:
         40:41:07:08:7d:dd:b7:b4:77:99:a7:93:51:4a:ba:52:eb:32:
         38:c8:d1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:31:28 2024 by rpki-client on console-fra.rpki-client.org