Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/3137372e37322e32342e302f32322d3332203d3e20323632353339.roa
File:                     3137372e37322e32342e302f32322d3332203d3e20323632353339.roa (raw, json)
Hash identifier:          gd7TlwLm/JwPGizar5JqoTwRoBhTrpp5+NO2Wyq4sic=
Subject key identifier:   BA:BD:B4:DE:E6:FB:B0:DF:FE:FD:A5:60:38:3D:09:5C:00:01:71:3B
Certificate issuer:       /CN=5BBAA26A1B1C199630D76AA2B81403371285F562
Certificate serial:       42A8446E28B900C159C5E6F592EB26E09D49E173
Authority key identifier: 5B:BA:A2:6A:1B:1C:19:96:30:D7:6A:A2:B8:14:03:37:12:85:F5:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BBAA26A1B1C199630D76AA2B81403371285F562.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/3137372e37322e32342e302f32322d3332203d3e20323632353339.roa
Signing time:             Mon 22 Apr 2024 19:14:59 +0000
ROA not before:           Mon 22 Apr 2024 19:09:59 +0000
ROA not after:            Mon 21 Apr 2025 19:14:59 +0000
asID:                     262539
IP address blocks:        177.72.24.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/5BBAA26A1B1C199630D76AA2B81403371285F562.crl
                          rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/5BBAA26A1B1C199630D76AA2B81403371285F562.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BBAA26A1B1C199630D76AA2B81403371285F562.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a8:44:6e:28:b9:00:c1:59:c5:e6:f5:92:eb:26:e0:9d:49:e1:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BBAA26A1B1C199630D76AA2B81403371285F562
        Validity
            Not Before: Apr 22 19:09:59 2024 GMT
            Not After : Apr 21 19:14:59 2025 GMT
        Subject: CN=BABDB4DEE6FBB0DFFEFDA560383D095C0001713B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:39:45:8d:6d:0d:7e:4f:a5:db:5a:10:ed:9b:
                    6e:a6:63:3e:cc:c2:2e:fa:dd:65:35:29:40:89:37:
                    db:c8:b0:f2:b5:7c:20:d9:ff:20:f0:c7:f3:39:ba:
                    8e:c2:3a:5a:e5:e7:fd:05:82:9a:f2:07:65:13:a3:
                    9f:29:bd:b8:7a:57:70:34:ea:0a:20:b2:67:32:ac:
                    79:b0:65:2b:c9:f4:63:95:5e:76:6f:d0:f8:49:7c:
                    52:48:85:98:0f:f9:20:d0:ce:b9:8f:07:06:43:81:
                    81:0f:9a:88:b0:7f:1c:38:18:91:b1:32:98:60:1e:
                    ab:27:43:6d:cc:06:0a:6e:82:65:1d:52:47:8a:c9:
                    22:3a:35:13:2c:6e:2d:d3:6d:e9:52:1a:ac:de:5c:
                    f3:cb:22:6a:45:9b:92:ea:03:49:1a:34:f3:be:53:
                    3a:16:7b:9a:7e:a0:1d:00:3d:b0:34:e2:61:2f:ec:
                    40:0d:46:59:0a:72:85:88:70:18:5c:11:08:1e:8c:
                    bf:66:92:5c:c4:7b:95:bf:68:a9:58:c1:f7:73:4a:
                    bb:5c:ab:49:62:ec:1d:35:d7:37:0e:57:9a:fb:35:
                    c3:6b:96:0d:a3:7e:c4:0a:b3:e1:66:e1:3d:6a:3f:
                    b8:57:aa:5e:65:b0:bb:9b:cc:08:5a:63:6e:ac:67:
                    71:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BD:B4:DE:E6:FB:B0:DF:FE:FD:A5:60:38:3D:09:5C:00:01:71:3B
            X509v3 Authority Key Identifier:
                keyid:5B:BA:A2:6A:1B:1C:19:96:30:D7:6A:A2:B8:14:03:37:12:85:F5:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/5BBAA26A1B1C199630D76AA2B81403371285F562.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BBAA26A1B1C199630D76AA2B81403371285F562.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/3137372e37322e32342e302f32322d3332203d3e20323632353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:7e:67:15:5a:4c:95:18:9b:19:73:0c:24:29:07:1d:a9:fe:
         1f:f8:a6:2d:76:ec:58:08:04:d0:6b:6d:42:74:d3:1f:56:a1:
         13:e8:1a:76:9f:ee:f9:c6:b4:e4:a9:86:07:cf:6e:82:17:64:
         f7:f5:1c:cc:ed:61:ad:4e:03:dc:b4:bd:1c:38:60:76:86:0e:
         f1:fa:a2:0e:ff:c1:33:bf:74:a9:fa:9c:e4:ff:f5:37:67:ec:
         9f:a6:0a:91:dc:2d:1f:d1:82:b1:45:06:51:38:3e:1e:b4:df:
         13:71:ff:41:65:06:4b:6c:de:ee:72:84:65:ff:d9:00:c0:ac:
         55:11:ef:b0:f0:c5:cb:ea:08:7a:54:e5:d1:b8:4e:62:ca:1f:
         0b:d0:77:48:1d:2a:45:63:8b:25:a1:ef:da:62:d8:42:21:a6:
         7e:26:05:64:9b:f6:24:03:ca:db:9f:7d:11:04:26:7a:3d:2e:
         65:9d:c7:78:27:ec:f5:bc:4f:bc:b1:55:72:76:47:9c:7e:73:
         3a:cb:69:48:16:78:39:ca:72:41:30:c1:a0:f5:ca:49:7d:2b:
         60:19:3d:40:ec:a1:1c:dd:1f:53:a3:9a:00:09:23:31:56:5d:
         e3:dd:d4:5d:c5:48:10:c4:3c:61:cf:9a:1c:76:90:07:74:e4:
         0d:75:57:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 10:49:42 2024 by rpki-client on console-fra.rpki-client.org