Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133332e302f32342d3234203d3e203533303138.roa
File:                     3137372e37322e3133332e302f32342d3234203d3e203533303138.roa (raw, json)
Hash identifier:          IDpxczqhfJl0fzAGmzP9Za83LZ0Z1Nkmc7Tsd9XLruA=
Subject key identifier:   E6:EA:49:62:C8:46:7A:C9:C3:CE:02:7A:5B:AC:9A:4A:FD:6B:5C:31
Certificate issuer:       /CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
Certificate serial:       1FE8FF7EC4E0C540613808F73F1261ECAB94734C
Authority key identifier: A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133332e302f32342d3234203d3e203533303138.roa
Signing time:             Thu 04 Apr 2024 14:11:54 +0000
ROA not before:           Thu 04 Apr 2024 14:06:54 +0000
ROA not after:            Thu 03 Apr 2025 14:11:54 +0000
asID:                     53018
IP address blocks:        177.72.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:33:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e8:ff:7e:c4:e0:c5:40:61:38:08:f7:3f:12:61:ec:ab:94:73:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
        Validity
            Not Before: Apr  4 14:06:54 2024 GMT
            Not After : Apr  3 14:11:54 2025 GMT
        Subject: CN=E6EA4962C8467AC9C3CE027A5BAC9A4AFD6B5C31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5b:63:ca:a5:81:7d:e4:c0:d4:6f:ec:d2:6f:
                    71:06:c0:7d:a9:fa:30:04:99:c4:9a:28:6b:ea:df:
                    60:a8:98:54:f9:e4:23:c7:fa:a8:8f:10:e4:2d:67:
                    8c:08:6b:88:59:13:53:ac:dd:08:de:2a:2e:47:54:
                    9d:d7:2a:d0:55:db:80:9d:8f:07:72:0c:12:03:71:
                    21:20:fc:ca:c8:80:a8:61:a9:8b:68:a8:80:b7:89:
                    a4:47:36:eb:48:3e:36:0f:d6:47:d7:95:00:e9:63:
                    78:60:05:6e:c1:a0:9d:8e:ac:0e:1e:d7:53:75:c1:
                    95:67:10:a1:12:32:1a:27:3d:5d:b8:da:3e:96:b3:
                    86:98:40:00:6c:81:05:b2:95:ec:da:f3:83:7e:69:
                    26:94:5f:97:74:96:5c:0d:c1:7f:0c:d7:2d:5f:29:
                    ab:f0:da:3d:39:76:26:91:72:85:16:82:ff:7b:7a:
                    af:25:d2:b0:46:71:95:bb:d0:c9:59:95:bd:3d:12:
                    73:a2:51:59:a6:79:3b:8b:89:9a:67:e7:d0:53:9a:
                    6f:bb:d7:a2:9f:d9:e7:21:58:67:f2:1a:e9:b3:d4:
                    91:c0:62:57:f6:d9:19:6f:cc:17:cd:27:ca:33:0f:
                    62:eb:e4:30:f1:64:b3:74:35:ba:28:80:67:0c:61:
                    de:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EA:49:62:C8:46:7A:C9:C3:CE:02:7A:5B:AC:9A:4A:FD:6B:5C:31
            X509v3 Authority Key Identifier:
                keyid:A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133332e302f32342d3234203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:32:a4:e9:1a:30:ba:17:fb:37:06:ac:22:fa:b6:81:09:43:
         45:5c:a9:f5:a8:91:f1:a8:17:ad:4d:21:82:e8:70:f6:a9:e0:
         c2:cd:ca:30:ad:2f:5d:55:c4:d0:e6:31:85:f8:bf:2c:4e:58:
         9e:2c:34:0d:63:46:05:af:99:69:bc:40:74:e5:8a:05:a3:f4:
         fb:34:99:c9:58:c9:ed:2b:7d:4c:89:7c:95:da:8b:c4:98:1d:
         12:7a:47:f7:13:1e:77:6b:81:ed:23:ea:23:1e:01:33:51:d6:
         37:28:a2:f5:2e:1b:d5:c2:bd:12:63:95:1b:df:d3:96:49:b0:
         ba:bf:ac:36:64:a9:dc:d3:93:f0:2d:74:26:28:7d:f5:54:74:
         14:ca:79:75:e6:09:ab:11:91:a3:0b:b0:a6:17:94:d6:e1:22:
         55:15:15:a9:d3:be:8a:7b:ec:4b:3f:81:fb:ec:26:13:a4:69:
         e3:e8:da:01:d2:1b:08:ec:fe:0a:cf:d5:74:06:87:83:86:2f:
         c7:5a:aa:83:d2:af:3f:e2:7c:b5:b4:a6:ce:99:5a:76:d7:aa:
         fd:f9:b0:60:80:e8:66:1d:c4:c8:8a:e2:3b:ad:cc:8c:7e:09:
         76:a1:6e:71:90:2f:92:74:60:36:b2:d0:38:da:9e:f7:13:f0:
         8f:88:8c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:38 2024 by rpki-client on console-fra.rpki-client.org