Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3137322e302f32322d3234203d3e20323632353530.roa
File:                     3137372e37322e3137322e302f32322d3234203d3e20323632353530.roa (raw, json)
Hash identifier:          fOwE933qQ3rWX85inS16SEBRpkpmLdDfxCpc3bzXY8U=
Subject key identifier:   67:80:6B:B4:9B:CE:B6:71:72:D1:23:66:E5:62:A6:E0:FB:C8:A2:9F
Certificate issuer:       /CN=5060A86A09E56CD00DC4540812BD4D7775AC9715
Certificate serial:       7281939A10BCE59FF29E55AE47B2D4470955B2AF
Authority key identifier: 50:60:A8:6A:09:E5:6C:D0:0D:C4:54:08:12:BD:4D:77:75:AC:97:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5060A86A09E56CD00DC4540812BD4D7775AC9715.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3137322e302f32322d3234203d3e20323632353530.roa
Signing time:             Thu 12 Sep 2024 18:58:58 +0000
ROA not before:           Thu 12 Sep 2024 18:53:58 +0000
ROA not after:            Thu 11 Sep 2025 18:58:58 +0000
asID:                     262550
IP address blocks:        177.72.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/5060A86A09E56CD00DC4540812BD4D7775AC9715.crl
                          rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/5060A86A09E56CD00DC4540812BD4D7775AC9715.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5060A86A09E56CD00DC4540812BD4D7775AC9715.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:81:93:9a:10:bc:e5:9f:f2:9e:55:ae:47:b2:d4:47:09:55:b2:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5060A86A09E56CD00DC4540812BD4D7775AC9715
        Validity
            Not Before: Sep 12 18:53:58 2024 GMT
            Not After : Sep 11 18:58:58 2025 GMT
        Subject: CN=67806BB49BCEB67172D12366E562A6E0FBC8A29F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:10:90:42:69:f6:9b:a2:18:9f:89:84:10:58:
                    46:32:88:18:40:ab:42:54:51:a6:ae:fb:51:f8:ff:
                    1d:e1:40:99:f0:5c:ef:79:db:d1:7b:c7:8e:56:8d:
                    7d:5e:ba:ff:fa:06:60:ee:fc:45:2d:3d:2f:f9:f7:
                    69:a7:12:34:54:9a:39:b9:ab:40:08:c2:18:f1:4c:
                    9a:35:ae:39:ba:3e:83:da:a8:e0:56:77:e3:0f:e9:
                    f6:06:6b:b0:99:5b:6a:24:fb:e3:c5:de:03:9c:97:
                    e8:56:4e:3e:b9:c4:45:1e:26:81:f0:ee:fe:67:e9:
                    26:54:fb:20:54:7a:4e:c5:f7:23:3c:01:4a:77:74:
                    9f:b0:9d:fd:d1:d2:a6:f9:f4:5b:b4:63:ed:75:76:
                    bb:03:43:a8:46:22:7a:37:bb:30:ca:15:fa:46:52:
                    4d:8c:f6:ff:e4:7f:9a:c8:78:31:93:66:3c:d6:fb:
                    42:2d:3e:cc:dd:96:6c:d3:c2:96:17:ea:e8:1b:1d:
                    9a:d3:b7:bc:65:bd:08:ce:27:4e:4f:39:13:84:20:
                    44:48:a1:dc:21:2f:da:db:07:da:57:42:8d:ac:81:
                    05:9f:62:18:cd:fb:00:00:38:86:08:78:19:c7:a7:
                    e1:3c:4e:5b:d1:fb:ff:ca:9e:ba:8d:64:ca:7c:a4:
                    00:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:80:6B:B4:9B:CE:B6:71:72:D1:23:66:E5:62:A6:E0:FB:C8:A2:9F
            X509v3 Authority Key Identifier:
                keyid:50:60:A8:6A:09:E5:6C:D0:0D:C4:54:08:12:BD:4D:77:75:AC:97:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/5060A86A09E56CD00DC4540812BD4D7775AC9715.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5060A86A09E56CD00DC4540812BD4D7775AC9715.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3137322e302f32322d3234203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cc:d8:35:69:67:93:e1:9b:bf:05:f2:91:5e:50:fa:bc:04:66:
         49:fa:af:ba:47:f6:49:18:8f:cc:e6:ce:3b:4f:31:3a:b6:d7:
         56:21:30:65:ef:88:19:fb:b3:b1:1c:d3:e5:8a:e1:75:58:05:
         09:e6:e2:a7:fa:b3:85:f0:c8:a5:a4:57:ef:3a:e1:17:68:52:
         a7:fe:c8:92:d4:7d:5a:29:65:7e:44:89:cb:eb:fc:1d:c0:a7:
         3d:2b:5d:2f:4e:66:a7:4a:25:c8:ae:b9:1e:dd:0c:f6:0f:98:
         bf:39:df:3e:46:7e:69:f9:bb:cb:37:79:af:e1:d5:de:8c:97:
         b2:fc:d1:ab:eb:49:71:ee:00:60:28:43:16:cc:59:ae:49:9a:
         46:fb:b2:78:58:4e:9b:e4:36:49:28:21:cd:13:13:b0:e7:0f:
         c2:d3:4a:25:49:47:c9:b6:f8:b1:af:1f:55:b3:db:70:b4:af:
         3a:4c:be:64:4b:3d:83:b7:01:0a:ca:e5:a5:0b:84:e3:ba:cf:
         03:3f:48:93:12:03:6a:19:20:13:b5:81:08:d1:fc:05:ff:1a:
         60:98:3c:79:9c:9d:9f:8b:ba:c1:9c:2c:af:37:6f:9e:71:ba:
         62:19:33:65:e7:af:b2:3d:95:5b:54:9a:2a:79:1d:c0:b6:9e:
         7c:bb:34:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:50 2024 by rpki-client on console-fra.rpki-client.org