Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/1/3133312e37322e33372e302f32342d3234203d3e203631373232.roa
File:                     3133312e37322e33372e302f32342d3234203d3e203631373232.roa (raw, json)
Hash identifier:          Fqb1o6Yfmqd1tE1j0qr5qGCZf53co86mMMqbxUF1saw=
Subject key identifier:   30:AD:2A:03:67:4E:30:5E:E1:0C:34:65:34:86:E5:14:F6:32:90:E5
Certificate issuer:       /CN=29125A50D39B1ABC3BAB97495F6B1E715B8ACB8D
Certificate serial:       121FABD0ADE8FDC8AF84334A97640F16091289B4
Authority key identifier: 29:12:5A:50:D3:9B:1A:BC:3B:AB:97:49:5F:6B:1E:71:5B:8A:CB:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29125A50D39B1ABC3BAB97495F6B1E715B8ACB8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/1/3133312e37322e33372e302f32342d3234203d3e203631373232.roa
Signing time:             Thu 04 Apr 2024 22:34:31 +0000
ROA not before:           Thu 04 Apr 2024 22:29:31 +0000
ROA not after:            Thu 03 Apr 2025 22:34:31 +0000
asID:                     61722
IP address blocks:        131.72.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/1/29125A50D39B1ABC3BAB97495F6B1E715B8ACB8D.crl
                          rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/1/29125A50D39B1ABC3BAB97495F6B1E715B8ACB8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29125A50D39B1ABC3BAB97495F6B1E715B8ACB8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:1f:ab:d0:ad:e8:fd:c8:af:84:33:4a:97:64:0f:16:09:12:89:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29125A50D39B1ABC3BAB97495F6B1E715B8ACB8D
        Validity
            Not Before: Apr  4 22:29:31 2024 GMT
            Not After : Apr  3 22:34:31 2025 GMT
        Subject: CN=30AD2A03674E305EE10C34653486E514F63290E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f6:6e:7d:52:8c:f3:8e:62:e2:d6:9b:31:2f:
                    1c:1a:a2:f2:90:53:9f:e3:b5:cd:93:41:57:ab:03:
                    bc:30:80:0d:7e:4f:4f:e2:de:66:c2:f8:9a:b1:64:
                    2e:bb:26:f7:23:6c:c8:b3:b8:d4:23:33:f2:40:f7:
                    74:a0:84:0c:5d:23:6e:05:3d:07:8b:a0:e4:90:28:
                    bd:10:71:1d:2a:00:e8:8e:66:13:af:2e:cc:25:c0:
                    c2:3b:fb:5c:53:45:9f:2c:40:38:13:41:40:6d:38:
                    6f:d7:3e:79:01:b9:cd:1b:9e:08:38:22:86:41:f9:
                    6c:02:d0:fc:75:77:39:95:96:ae:ac:ee:96:32:bb:
                    1b:b1:14:6f:68:15:de:bd:b1:04:33:da:cb:8c:b9:
                    c4:1d:ce:6a:14:42:b2:da:4c:29:0c:04:53:98:eb:
                    b1:58:a4:73:71:96:0d:7e:6b:ea:36:4e:4b:f3:7a:
                    cb:cf:24:fb:ee:39:a9:cd:2e:3c:1e:90:85:f1:4d:
                    80:50:1b:ce:2f:01:96:0b:e5:1f:d4:38:b4:4c:00:
                    1e:82:58:81:4e:5e:fe:83:d9:2e:34:64:74:b8:b9:
                    e8:e6:dc:db:29:05:d4:fb:8e:d8:22:d4:7f:ad:4a:
                    96:87:56:8d:4f:31:79:ce:9f:3b:e7:dc:a7:5a:48:
                    f6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AD:2A:03:67:4E:30:5E:E1:0C:34:65:34:86:E5:14:F6:32:90:E5
            X509v3 Authority Key Identifier:
                keyid:29:12:5A:50:D3:9B:1A:BC:3B:AB:97:49:5F:6B:1E:71:5B:8A:CB:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/1/29125A50D39B1ABC3BAB97495F6B1E715B8ACB8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29125A50D39B1ABC3BAB97495F6B1E715B8ACB8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/1/3133312e37322e33372e302f32342d3234203d3e203631373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:ba:38:7d:68:c5:46:c8:69:3c:d7:06:71:37:03:dd:7e:ea:
         f9:e1:ca:f8:ef:fe:9d:de:e6:b4:ba:79:05:dc:aa:ca:a9:1a:
         48:fd:2d:62:1e:01:56:85:7f:04:37:ea:f0:d2:bb:18:a6:bc:
         ae:79:ab:59:f1:94:6f:ff:12:30:a3:0a:3c:9f:34:20:98:dc:
         32:86:d0:6b:3c:96:8a:de:c8:ee:62:c8:0f:53:56:ce:99:72:
         8e:f2:29:30:fd:d2:7c:15:34:49:8c:88:46:45:cb:d1:b7:01:
         83:70:f9:e1:5e:8d:4a:73:65:62:b8:bb:12:47:eb:eb:57:e7:
         2f:63:fc:26:ba:b1:0d:f7:00:63:ac:2d:3d:d7:e7:39:12:7f:
         e2:24:df:e8:53:12:fc:63:7c:d9:6e:d3:9f:93:2b:bf:69:c3:
         78:0d:c3:94:05:34:0b:87:1e:01:04:3f:91:98:db:b4:c1:be:
         f8:a2:08:ab:3e:0b:cc:16:d4:be:a0:21:ec:b7:7b:b9:94:e8:
         58:cd:bd:e6:d6:0a:74:de:a2:a5:31:d6:4d:08:8e:c5:9e:59:
         fb:4f:4e:88:d2:31:e5:73:12:48:b9:99:dd:1b:f6:d8:99:03:
         d7:31:9f:1c:7f:46:6a:4a:aa:1a:1e:09:bc:c3:33:83:0b:03:
         3d:17:bb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:13 2024 by rpki-client on console-ams.rpki-client.org