Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3132382e302f32312d3234203d3e203533303138.roa
File:                     3137372e37322e3132382e302f32312d3234203d3e203533303138.roa (raw, json)
Hash identifier:          DtvV1y0bzhrmJFcpCn5+vjM/Oh8McPZMBGjgkQidfko=
Subject key identifier:   4F:9D:AB:00:BE:02:A8:C7:FA:F5:5B:70:93:E9:60:9B:E1:9A:CE:0F
Certificate issuer:       /CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
Certificate serial:       3D39F3887D9DE45B97CCD44E7E3ECBB657C63755
Authority key identifier: A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3132382e302f32312d3234203d3e203533303138.roa
Signing time:             Thu 04 Apr 2024 14:11:54 +0000
ROA not before:           Thu 04 Apr 2024 14:06:54 +0000
ROA not after:            Thu 03 Apr 2025 14:11:54 +0000
asID:                     53018
IP address blocks:        177.72.128.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:33:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:39:f3:88:7d:9d:e4:5b:97:cc:d4:4e:7e:3e:cb:b6:57:c6:37:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
        Validity
            Not Before: Apr  4 14:06:54 2024 GMT
            Not After : Apr  3 14:11:54 2025 GMT
        Subject: CN=4F9DAB00BE02A8C7FAF55B7093E9609BE19ACE0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6f:64:06:d2:2a:a7:e1:a4:ce:1e:95:d2:7e:
                    bf:94:7d:4b:0f:87:4e:8d:40:d8:6c:00:29:0c:0a:
                    36:dd:f9:50:24:16:ce:b9:e6:de:2f:ec:85:d2:fd:
                    4a:bd:f7:84:28:f1:a4:92:29:f1:95:1c:44:fd:ac:
                    a0:4a:30:11:12:b6:f7:94:a2:2a:41:0b:fe:ec:96:
                    f2:7d:63:f1:f7:3b:ac:5f:ed:f0:d4:e4:07:1f:ee:
                    1b:b3:7a:5f:65:55:84:fa:5f:4a:90:2f:e6:f5:d2:
                    c2:e8:ff:12:3a:f0:76:f7:21:90:a7:fd:58:b3:5f:
                    dc:ca:6f:fd:45:f9:db:4d:0b:8a:bc:d9:45:31:93:
                    77:60:2f:3c:cd:03:2f:90:81:85:6d:91:e6:39:93:
                    25:f6:d6:49:e0:c2:c6:01:b6:87:ca:84:dd:e2:2b:
                    42:41:7a:b7:87:e8:3e:1e:ad:18:a1:6a:f0:ab:2f:
                    0c:2f:b4:af:6d:70:f1:5d:a8:63:53:0a:4d:88:2b:
                    8b:2d:7e:f7:3d:11:f5:14:1c:88:1b:cb:7b:14:ed:
                    4a:2b:96:7c:11:8a:cd:30:01:39:17:05:c0:68:74:
                    c8:15:96:30:5b:17:c5:a5:6d:96:65:bb:bf:92:bb:
                    58:ba:91:84:2a:2c:43:34:82:db:1f:34:d5:fb:92:
                    03:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9D:AB:00:BE:02:A8:C7:FA:F5:5B:70:93:E9:60:9B:E1:9A:CE:0F
            X509v3 Authority Key Identifier:
                keyid:A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3132382e302f32312d3234203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1d:c5:61:70:69:f5:8c:69:eb:9a:dc:b3:85:4f:28:c6:be:c1:
         32:03:df:16:23:c5:be:57:ea:02:85:8f:63:5f:60:ac:6e:1c:
         9a:14:c8:3e:f2:d8:f5:f0:91:e1:e3:8c:85:72:c5:ce:49:04:
         8a:51:91:65:9e:a9:59:d3:fd:c3:2e:b2:0d:c5:89:75:c8:ba:
         d6:d9:1f:e5:86:77:23:17:6a:08:49:25:f5:3c:86:5c:35:88:
         99:ae:47:99:4b:67:76:57:ec:6a:27:db:e4:8d:95:40:1e:e4:
         91:22:f2:6e:1a:da:74:f5:9c:98:1f:2c:97:97:07:50:e6:f1:
         e3:32:45:88:79:cd:43:da:dd:c6:c9:62:39:ed:c7:79:45:f2:
         1b:68:69:c3:ea:71:c4:cb:d7:11:c7:b3:35:cc:35:24:90:27:
         aa:f4:00:71:86:9b:13:3c:91:98:94:a9:76:bf:c7:5f:dc:7e:
         11:60:20:03:c4:72:46:99:ba:20:4b:91:a2:8e:ce:03:d5:94:
         d0:cd:94:b6:27:2f:fb:e9:0e:b6:b6:cf:04:10:21:c4:e4:f0:
         28:f5:ef:93:60:c2:14:3c:08:0c:6c:33:13:75:c6:aa:b1:fb:
         56:e4:fe:ca:5a:1d:1d:cd:05:02:a6:2e:4e:5b:cb:6f:ee:5b:
         99:99:c8:7b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPTnziH2d5FuXzNROfj7LtlfGN1UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU0NEREMkFBNTIwOThCRkI4N0JBNTc5MTRBQjk0MDBF
QUVFNEZDMDAeFw0yNDA0MDQxNDA2NTRaFw0yNTA0MDMxNDExNTRaMDMxMTAvBgNV
BAMTKDRGOURBQjAwQkUwMkE4QzdGQUY1NUI3MDkzRTk2MDlCRTE5QUNFMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbb2QG0iqn4aTOHpXSfr+UfUsP
h06NQNhsACkMCjbd+VAkFs655t4v7IXS/Uq994Qo8aSSKfGVHET9rKBKMBEStveU
oipBC/7slvJ9Y/H3O6xf7fDU5Acf7huzel9lVYT6X0qQL+b10sLo/xI68Hb3IZCn
/VizX9zKb/1F+dtNC4q82UUxk3dgLzzNAy+QgYVtkeY5kyX21kngwsYBtofKhN3i
K0JBereH6D4erRihavCrLwwvtK9tcPFdqGNTCk2IK4stfvc9EfUUHIgby3sU7Uor
lnwRis0wATkXBcBodMgVljBbF8WlbZZlu7+Su1i6kYQqLEM0gtsfNNX7kgMNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUT52rAL4CqMf69Vtwk+lgm+Gazg8wHwYDVR0j
BBgwFoAUpUTdKqUgmL+4e6V5FKuUAOruT8AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0U3Tk1BUnBnM2NQYzN0VVprRk1yS3pSdEdiNVJIdHlCR3B6dEZWV011
SmYvMS9BNTQ0REQyQUE1MjA5OEJGQjg3QkE1NzkxNEFCOTQwMEVBRUU0RkMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NDRERDJBQTUyMDk4QkZC
ODdCQTU3OTE0QUI5NDAwRUFFRTRGQzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdFN05NQVJwZzNjUGMzdFVaa0ZNckt6UnRHYjVSSHR5QkdwenRGVldNdUpmLzEv
MzEzNzM3MmUzNzMyMmUzMTMyMzgyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNTMz
MzAzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsUiAMA0GCSqGSIb3DQEBCwUAA4IBAQAdxWFwafWM
aeua3LOFTyjGvsEyA98WI8W+V+oChY9jX2CsbhyaFMg+8tj18JHh44yFcsXOSQSK
UZFlnqlZ0/3DLrINxYl1yLrW2R/lhncjF2oISSX1PIZcNYiZrkeZS2d2V+xqJ9vk
jZVAHuSRIvJuGtp09ZyYHyyXlwdQ5vHjMkWIec1D2t3GyWI57cd5RfIbaGnD6nHE
y9cRx7M1zDUkkCeq9ABxhpsTPJGYlKl2v8df3H4RYCADxHJGmbogS5Gijs4D1ZTQ
zZS2Jy/76Q62ts8EECHE5PAo9e+TYMIUPAgMbDMTdcaqsftW5P7KWh0dzQUCpi5O
W8tv7luZmch7
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:38 2024 by rpki-client on console-fra.rpki-client.org