Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/3133312e37322e352e302f32342d3234203d3e203631373137.roa
File:                     3133312e37322e352e302f32342d3234203d3e203631373137.roa (raw, json)
Hash identifier:          FLfNTHautmQtdVhg8GJqj6h+OwdZH6LX+kWgpzbZ1d8=
Subject key identifier:   79:8B:4C:6B:28:49:07:17:12:A3:9E:D5:2A:F1:BE:ED:00:83:BB:87
Certificate issuer:       /CN=818877B39D32BF83248D22BD29D162AD2243D97A
Certificate serial:       18E52A5720E3879EAF05A0C87707E82D62FC778D
Authority key identifier: 81:88:77:B3:9D:32:BF:83:24:8D:22:BD:29:D1:62:AD:22:43:D9:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/3133312e37322e352e302f32342d3234203d3e203631373137.roa
Signing time:             Thu 04 Apr 2024 15:37:50 +0000
ROA not before:           Thu 04 Apr 2024 15:32:50 +0000
ROA not after:            Thu 03 Apr 2025 15:37:50 +0000
asID:                     61717
IP address blocks:        131.72.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/818877B39D32BF83248D22BD29D162AD2243D97A.crl
                          rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/818877B39D32BF83248D22BD29D162AD2243D97A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 21:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e5:2a:57:20:e3:87:9e:af:05:a0:c8:77:07:e8:2d:62:fc:77:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818877B39D32BF83248D22BD29D162AD2243D97A
        Validity
            Not Before: Apr  4 15:32:50 2024 GMT
            Not After : Apr  3 15:37:50 2025 GMT
        Subject: CN=798B4C6B2849071712A39ED52AF1BEED0083BB87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:38:7b:3b:d4:1d:da:98:8c:16:d0:50:2b:c7:
                    91:e6:7b:3e:59:12:21:b5:7a:68:62:31:81:08:95:
                    c6:73:33:61:38:dc:79:ef:a4:14:e1:29:e3:49:c4:
                    44:41:e1:05:57:e1:07:f1:81:20:56:2e:83:17:90:
                    1a:d5:b5:38:ed:47:20:aa:d6:7a:27:04:9a:2e:03:
                    e8:b0:ee:db:7c:6c:1c:67:a2:c2:b1:d8:92:78:eb:
                    60:8e:97:f9:83:73:21:83:2e:73:9d:b8:d9:68:28:
                    db:fc:d2:0f:dc:9a:5b:d0:cb:55:a0:29:a4:5c:e8:
                    25:a0:7c:59:48:8f:f8:c0:b9:b6:94:aa:f9:1b:0b:
                    0a:98:01:38:38:21:1c:45:67:eb:4f:99:db:69:15:
                    b7:08:ca:dc:90:b8:13:9a:68:cf:49:85:a7:aa:eb:
                    f0:05:db:d6:fa:95:52:69:b3:5f:cf:68:d9:0d:4c:
                    91:3c:5e:7c:f3:f4:6b:c3:41:b0:a8:ab:e2:e6:6e:
                    e2:52:ba:69:c4:3c:9a:58:a4:a4:bc:96:4d:70:35:
                    f9:32:cb:72:fd:15:55:51:75:8e:45:bf:c3:e6:3c:
                    6b:8a:74:63:da:6b:ef:fc:68:f0:73:32:ea:f4:3e:
                    b9:26:3e:24:c5:77:64:27:9c:dd:2a:7c:c1:03:b4:
                    e6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8B:4C:6B:28:49:07:17:12:A3:9E:D5:2A:F1:BE:ED:00:83:BB:87
            X509v3 Authority Key Identifier:
                keyid:81:88:77:B3:9D:32:BF:83:24:8D:22:BD:29:D1:62:AD:22:43:D9:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/818877B39D32BF83248D22BD29D162AD2243D97A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/3133312e37322e352e302f32342d3234203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:7f:b5:c4:3e:22:af:54:35:0c:fd:87:d9:23:9d:0e:2a:7c:
         f7:28:f7:dc:24:6a:28:8d:5e:51:c2:e1:fa:5c:60:27:25:72:
         3e:c4:13:80:70:3e:bb:ee:42:5d:6f:ac:4f:11:26:30:ca:e9:
         e9:99:70:fc:72:b1:59:1c:b5:8a:df:4c:41:64:8e:8d:a0:7c:
         bd:37:a1:35:e1:0e:81:06:f6:49:30:ef:21:26:17:cb:b3:68:
         63:9c:e8:da:49:f4:04:e8:02:ad:47:8e:ea:65:93:91:67:4b:
         32:5c:bb:d0:25:cf:43:de:37:e3:5b:d0:b9:ea:07:26:8f:73:
         0c:d4:15:0a:12:4e:3c:38:5b:9c:7a:cb:1d:b9:b0:06:c3:c6:
         75:26:0b:08:77:12:b6:29:0a:71:fe:26:44:7f:67:f7:de:8b:
         ac:46:e1:43:eb:d6:a6:ce:e5:11:ad:7e:04:ff:f5:be:8a:5e:
         74:7c:94:5c:61:f4:9b:26:ca:60:d9:01:17:e5:c5:9d:01:fe:
         b5:d3:cb:be:68:78:c1:60:d8:8f:46:25:84:a2:ad:ef:c5:02:
         aa:d7:36:a7:dc:ed:cd:4f:da:34:1a:bb:89:1b:1f:bb:08:a9:
         79:4e:fd:42:59:fb:6e:ac:34:06:d0:8e:74:8b:ac:0e:60:bf:
         03:a1:77:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 21:52:35 2024 by rpki-client on console-fra.rpki-client.org