Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/3133312e37322e31362e302f32322d3332203d3e203631373133.roa
File:                     3133312e37322e31362e302f32322d3332203d3e203631373133.roa (raw, json)
Hash identifier:          P5O6mToze4FjHW4OyBMH1XhoWX+w7+KqPom832XECwU=
Subject key identifier:   6C:FA:58:B9:D8:AC:BD:1D:C7:7B:C0:3B:6D:F1:71:EF:8B:E1:EB:19
Certificate issuer:       /CN=41E40B03AFA11EAFBF2ADBC9DE4482C4C9866731
Certificate serial:       2150570FACAD73C5405983D5063B5B6376BAE999
Authority key identifier: 41:E4:0B:03:AF:A1:1E:AF:BF:2A:DB:C9:DE:44:82:C4:C9:86:67:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41E40B03AFA11EAFBF2ADBC9DE4482C4C9866731.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/3133312e37322e31362e302f32322d3332203d3e203631373133.roa
Signing time:             Tue 08 Oct 2024 16:28:40 +0000
ROA not before:           Tue 08 Oct 2024 16:23:40 +0000
ROA not after:            Tue 07 Oct 2025 16:28:40 +0000
asID:                     61713
IP address blocks:        131.72.16.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/41E40B03AFA11EAFBF2ADBC9DE4482C4C9866731.crl
                          rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/41E40B03AFA11EAFBF2ADBC9DE4482C4C9866731.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41E40B03AFA11EAFBF2ADBC9DE4482C4C9866731.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:50:57:0f:ac:ad:73:c5:40:59:83:d5:06:3b:5b:63:76:ba:e9:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41E40B03AFA11EAFBF2ADBC9DE4482C4C9866731
        Validity
            Not Before: Oct  8 16:23:40 2024 GMT
            Not After : Oct  7 16:28:40 2025 GMT
        Subject: CN=6CFA58B9D8ACBD1DC77BC03B6DF171EF8BE1EB19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ab:a9:21:54:8e:63:e7:c5:69:b5:9f:2b:9c:
                    fb:e5:c4:99:6d:5e:48:66:d3:40:7a:5c:af:35:70:
                    70:b3:24:b7:f7:28:ff:ee:3e:dc:23:50:d1:ad:ac:
                    aa:8b:82:0c:c5:e4:b6:f0:78:44:66:c0:a0:f5:78:
                    62:f5:70:5c:de:70:31:80:b2:07:75:9b:13:00:9b:
                    a7:49:a1:97:9e:2c:b7:3e:1a:78:79:44:01:49:24:
                    54:b2:d9:40:85:84:30:5a:b5:72:b3:90:75:ab:20:
                    25:6d:0e:b6:31:df:ca:a2:9c:68:64:ec:62:d1:47:
                    e9:09:af:6a:38:04:e0:b5:cf:6a:81:35:34:22:ec:
                    8f:1f:99:f6:fa:6e:b2:c1:7d:29:08:03:47:50:ac:
                    68:1a:f7:d3:c1:87:84:1d:93:78:ef:d2:b8:c0:87:
                    81:55:02:6a:8f:ae:59:fd:e2:14:82:e2:69:61:c6:
                    02:23:3c:9a:e0:0f:cf:67:16:12:e6:84:c8:fd:20:
                    1c:0d:aa:2b:e3:d1:22:15:fb:19:54:de:61:84:cb:
                    41:2b:88:01:74:d7:1f:72:4e:64:2f:27:63:75:23:
                    54:7b:f2:5b:f5:67:74:6f:2c:d5:4c:e4:26:6b:e8:
                    f3:ac:90:dc:18:75:2f:42:d9:ed:5d:9b:ae:1b:d6:
                    4a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:FA:58:B9:D8:AC:BD:1D:C7:7B:C0:3B:6D:F1:71:EF:8B:E1:EB:19
            X509v3 Authority Key Identifier:
                keyid:41:E4:0B:03:AF:A1:1E:AF:BF:2A:DB:C9:DE:44:82:C4:C9:86:67:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/41E40B03AFA11EAFBF2ADBC9DE4482C4C9866731.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41E40B03AFA11EAFBF2ADBC9DE4482C4C9866731.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/3133312e37322e31362e302f32322d3332203d3e203631373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:7a:8c:4a:12:61:48:a8:30:5b:13:bb:4f:45:06:20:75:23:
         9a:aa:a7:90:eb:22:c9:b7:36:00:b8:a9:d3:c5:12:5f:b9:a1:
         1a:27:e4:8d:cb:32:b1:79:74:a8:a8:51:70:6f:15:b8:ff:cd:
         2f:f4:a1:4f:85:c4:fc:25:55:d0:84:ab:4c:47:80:d1:e7:c9:
         c7:3a:a9:cb:b1:ec:69:23:a9:b2:e6:4f:ea:28:51:18:7d:c8:
         e5:5d:4f:81:99:5e:c0:09:f2:57:f3:df:0a:40:f5:e1:af:0a:
         ec:0b:b5:7e:15:e5:d6:0c:d2:c4:3c:80:0d:a2:cc:d8:66:e2:
         db:22:db:83:06:fa:85:88:4c:0f:b0:24:54:c8:fc:af:ca:54:
         85:ca:d8:3e:85:fc:10:55:75:90:79:9e:27:03:7a:a2:28:2a:
         55:99:1c:bf:3f:36:45:4f:a2:bc:d3:09:82:2b:ed:7b:a4:ef:
         8e:50:3e:ff:aa:14:2a:95:37:c6:88:e2:27:38:3b:a0:f2:08:
         5c:66:45:b3:aa:18:57:4a:3e:25:93:be:9d:15:27:1a:19:c0:
         f5:71:47:de:ee:12:ea:37:d9:61:9e:e8:73:8f:23:e5:0f:dd:
         86:63:17:94:b7:f3:51:4b:63:b9:ad:a7:37:ce:f9:55:60:54:
         dd:3d:07:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:34 2024 by rpki-client on console-fra.rpki-client.org