Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/3133312e37322e372e302f32342d3234203d3e203631373137.roa
File:                     3133312e37322e372e302f32342d3234203d3e203631373137.roa (raw, json)
Hash identifier:          2kTpZigk7nuzxGPbQnI0/MotxdJRMlJ2+9/r4Rb08so=
Subject key identifier:   13:80:D4:3A:23:E4:F0:B8:29:18:C4:D2:21:8E:E0:8C:03:0D:49:35
Certificate issuer:       /CN=818877B39D32BF83248D22BD29D162AD2243D97A
Certificate serial:       2EF9A2ADF2D6768A30F3D170986FA2591D2F0DB1
Authority key identifier: 81:88:77:B3:9D:32:BF:83:24:8D:22:BD:29:D1:62:AD:22:43:D9:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/3133312e37322e372e302f32342d3234203d3e203631373137.roa
Signing time:             Thu 04 Apr 2024 15:37:48 +0000
ROA not before:           Thu 04 Apr 2024 15:32:48 +0000
ROA not after:            Thu 03 Apr 2025 15:37:48 +0000
asID:                     61717
IP address blocks:        131.72.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/818877B39D32BF83248D22BD29D162AD2243D97A.crl
                          rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/818877B39D32BF83248D22BD29D162AD2243D97A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 21:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f9:a2:ad:f2:d6:76:8a:30:f3:d1:70:98:6f:a2:59:1d:2f:0d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818877B39D32BF83248D22BD29D162AD2243D97A
        Validity
            Not Before: Apr  4 15:32:48 2024 GMT
            Not After : Apr  3 15:37:48 2025 GMT
        Subject: CN=1380D43A23E4F0B82918C4D2218EE08C030D4935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:ab:78:e8:d3:71:19:7f:99:a3:23:f8:e4:9a:
                    93:d5:18:4d:8f:47:9e:2d:b6:e3:cb:c0:e4:25:b0:
                    a7:3d:9a:7d:c5:4f:c4:cc:7b:71:74:12:87:a7:b3:
                    d4:f9:6f:0b:8f:75:31:8c:39:ea:3f:b2:a3:2a:c3:
                    31:7f:e5:94:eb:16:75:d0:e1:96:75:33:5f:8e:11:
                    a2:0e:f3:1e:19:d7:76:90:a6:20:01:e8:3f:42:81:
                    35:4b:f8:78:ed:39:8f:35:fb:26:ec:bd:69:72:c5:
                    fc:4a:90:ee:d1:98:26:32:53:5c:4c:b9:0a:3a:c9:
                    ee:b9:c5:91:0e:ae:f8:24:6b:e1:4a:cd:84:bd:2b:
                    17:5c:15:a6:fb:2b:c2:e1:a8:4f:42:ad:89:d4:8d:
                    ce:f3:3b:21:9b:5d:c4:fe:c4:48:d2:fd:74:db:db:
                    54:25:9b:22:dd:ca:c0:79:f0:32:8a:38:a6:88:a0:
                    62:89:4e:5c:8e:03:68:82:dd:70:a1:ab:be:82:d2:
                    40:ca:fc:b0:5a:12:b0:7f:35:5f:95:df:f2:7a:35:
                    38:13:a7:30:6a:9a:91:f4:a6:70:db:97:af:1d:6e:
                    ae:06:d3:30:cb:ec:90:71:8e:3f:98:11:04:3f:89:
                    5b:f2:dd:5b:c0:8d:d5:40:dd:74:c5:74:d8:08:d2:
                    cb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:80:D4:3A:23:E4:F0:B8:29:18:C4:D2:21:8E:E0:8C:03:0D:49:35
            X509v3 Authority Key Identifier:
                keyid:81:88:77:B3:9D:32:BF:83:24:8D:22:BD:29:D1:62:AD:22:43:D9:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/818877B39D32BF83248D22BD29D162AD2243D97A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/3133312e37322e372e302f32342d3234203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:f7:4a:37:b0:84:55:03:4e:c8:05:27:1e:49:27:6d:cb:ad:
         17:63:1a:8b:fb:f0:bc:4c:3b:6a:f8:3f:7c:86:ac:42:f6:81:
         4f:43:26:d4:74:37:22:40:55:1a:3e:5f:1f:0c:39:84:2c:af:
         b8:e8:ab:a1:7a:15:3d:5a:bf:3d:f1:2c:aa:e3:03:9f:d4:6a:
         c4:08:5a:66:6c:1d:75:6a:a4:59:7c:65:1f:70:7b:57:0e:c9:
         4b:22:05:d3:00:77:37:bd:8b:9a:66:ce:43:b9:cc:f3:94:68:
         5d:1c:95:f1:8e:a7:a8:f4:c9:8f:42:fb:0d:9c:e3:bc:55:16:
         5b:b2:11:2b:6c:a7:b2:e7:52:13:7e:b3:68:fd:ef:69:ee:5f:
         71:81:0e:1d:70:3a:a0:74:58:ee:62:4e:68:d3:d1:45:ee:a0:
         99:a7:66:cf:81:07:66:73:46:ea:5d:4d:05:3e:1f:ee:8c:d5:
         65:e9:1a:37:6a:38:e6:bb:8b:f8:65:e1:70:38:e5:84:43:c9:
         21:0a:29:e9:d7:79:5f:52:76:84:c7:a8:54:02:32:4e:a6:9d:
         3e:50:9e:7f:bc:a2:9c:dd:d3:40:03:57:a8:a3:4c:6b:d3:ee:
         e9:33:34:7c:76:32:c6:69:69:51:39:dc:e5:9c:e9:cf:40:9f:
         e7:54:89:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 22:12:58 2024 by rpki-client on console-ams.rpki-client.org