Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133322e302f32332d3233203d3e203533303138.roa
File:                     3137372e37322e3133322e302f32332d3233203d3e203533303138.roa (raw, json)
Hash identifier:          z/xpa/TYwwtq4Qp1A37ii5zMf+Ihi3cSeQvUSmFiRfs=
Subject key identifier:   F8:06:93:FE:8C:4D:0D:12:4F:32:5E:6D:A4:BA:A0:7F:93:47:52:BA
Certificate issuer:       /CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
Certificate serial:       68207F99845A1BDA190B7B080A7C3BCFF4049762
Authority key identifier: A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133322e302f32332d3233203d3e203533303138.roa
Signing time:             Thu 04 Apr 2024 14:11:55 +0000
ROA not before:           Thu 04 Apr 2024 14:06:55 +0000
ROA not after:            Thu 03 Apr 2025 14:11:55 +0000
asID:                     53018
IP address blocks:        177.72.132.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:33:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:20:7f:99:84:5a:1b:da:19:0b:7b:08:0a:7c:3b:cf:f4:04:97:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
        Validity
            Not Before: Apr  4 14:06:55 2024 GMT
            Not After : Apr  3 14:11:55 2025 GMT
        Subject: CN=F80693FE8C4D0D124F325E6DA4BAA07F934752BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:63:50:36:39:e7:75:e8:4b:94:f1:cc:ae:8a:
                    8f:4d:db:f2:9c:30:e2:6d:12:f5:f4:3d:13:16:23:
                    cf:8b:39:a0:60:b2:cd:76:11:a3:a7:89:86:f4:63:
                    7f:69:ce:ad:8e:52:a3:49:0e:b7:82:ba:59:34:ee:
                    8a:53:23:aa:bc:12:93:39:e4:bb:4f:72:03:41:ac:
                    9f:3f:77:69:f3:8e:84:6a:e5:14:0b:80:e9:0e:42:
                    89:03:11:55:0c:8d:4e:92:6c:28:6c:5b:53:54:78:
                    ab:fd:2f:19:c3:2a:a5:85:ab:9f:12:04:dd:e3:db:
                    af:da:d1:6a:96:da:7c:6d:52:9a:5d:a7:7a:de:ed:
                    8c:91:a6:2e:6f:27:db:49:80:48:60:cf:6b:cd:7a:
                    07:18:c8:19:f5:05:5b:bf:54:d5:2b:b5:94:9f:18:
                    85:78:a2:05:8c:ec:dc:4a:ee:cc:cc:60:59:e4:9c:
                    b5:8a:aa:2c:ff:3d:d5:28:91:2b:5d:26:68:17:e2:
                    d2:4c:ae:35:70:f2:50:da:fa:fe:c8:1c:fe:f2:d3:
                    a7:d6:6e:81:c8:33:ef:91:79:50:98:96:25:62:ed:
                    70:21:55:67:3e:9e:09:02:4a:a6:0b:87:38:9e:b3:
                    9d:99:02:03:ac:3d:78:26:5f:d0:ca:e5:7c:43:7b:
                    e4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:06:93:FE:8C:4D:0D:12:4F:32:5E:6D:A4:BA:A0:7F:93:47:52:BA
            X509v3 Authority Key Identifier:
                keyid:A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133322e302f32332d3233203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:d7:0c:2b:f8:ed:34:c6:9c:cb:d3:5a:1a:eb:b5:1b:58:f9:
         02:1c:aa:11:5d:8d:99:29:a1:81:ca:9d:e7:b1:21:63:da:bd:
         e0:ac:e4:49:a5:0a:8a:0e:5f:51:df:02:ba:8d:f4:3d:64:e9:
         07:bd:49:22:6e:26:6d:15:8d:76:9a:a1:56:1e:ae:cd:09:70:
         13:36:1d:8f:25:f4:9b:22:c0:e5:b8:4f:ac:1a:a7:1c:72:e5:
         61:85:bd:21:30:4c:ae:42:29:fd:d4:45:8a:d8:48:8b:fe:3a:
         a1:d8:34:ea:03:6b:49:f6:a1:53:d5:2c:57:8c:5f:23:56:ce:
         da:1e:74:00:38:14:da:5a:19:b9:7e:69:5b:36:ef:5b:97:78:
         f3:92:75:5d:78:fe:51:29:75:75:fb:98:50:a9:4c:ee:b4:e9:
         55:6d:65:c2:57:37:89:74:8a:c2:b4:aa:47:20:52:e0:83:07:
         75:d7:30:bf:43:51:77:17:75:43:45:cf:f4:00:0c:05:b6:f3:
         b7:11:0a:18:be:78:24:8d:68:77:ad:d8:80:ab:fd:ae:bb:e6:
         b4:00:83:fe:ef:d7:bc:8d:24:80:a8:e0:ab:92:43:59:90:d6:
         b9:8d:7e:e7:6b:52:1a:62:88:9e:79:ef:cf:87:a3:95:99:86:
         80:25:f7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:38 2024 by rpki-client on console-fra.rpki-client.org