Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133342e302f32342d3234203d3e203533303138.roa
File:                     3137372e37322e3133342e302f32342d3234203d3e203533303138.roa (raw, json)
Hash identifier:          PIN5Qeuk8tAiaLc8XuNUG9M+nUNdtOcyK6SbZp2eNoY=
Subject key identifier:   45:D3:05:0A:BF:F6:9A:73:0F:0F:AE:5A:63:7F:B1:A9:44:47:39:E3
Certificate issuer:       /CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
Certificate serial:       6756C0FB1891A4A7834F70B57956588B2D743B0A
Authority key identifier: A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133342e302f32342d3234203d3e203533303138.roa
Signing time:             Thu 04 Apr 2024 14:11:54 +0000
ROA not before:           Thu 04 Apr 2024 14:06:54 +0000
ROA not after:            Thu 03 Apr 2025 14:11:54 +0000
asID:                     53018
IP address blocks:        177.72.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:33:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:56:c0:fb:18:91:a4:a7:83:4f:70:b5:79:56:58:8b:2d:74:3b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
        Validity
            Not Before: Apr  4 14:06:54 2024 GMT
            Not After : Apr  3 14:11:54 2025 GMT
        Subject: CN=45D3050ABFF69A730F0FAE5A637FB1A9444739E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:34:de:f7:d4:b1:36:8b:ef:1f:b5:b4:2d:03:
                    ec:26:a6:47:c2:3c:da:36:69:a7:3e:f4:df:e0:27:
                    bb:73:ec:09:c9:7f:5c:81:00:13:04:d1:93:c3:3a:
                    db:ad:1d:df:da:ff:ce:af:36:72:10:6e:de:61:6b:
                    82:c0:0b:c0:51:1d:45:ef:30:eb:b9:8e:f9:fa:b6:
                    82:a7:51:33:5b:e2:1f:79:b7:47:49:b9:fb:da:2d:
                    b6:e2:23:9d:b2:37:a5:4a:a6:e5:f5:bb:df:88:db:
                    7c:c8:43:4d:ee:e1:b1:1b:f8:90:b5:5e:d8:10:45:
                    6b:a6:35:01:07:a9:ff:8d:39:9b:e3:7c:7c:4d:0d:
                    01:6d:e4:f0:64:78:3c:33:7a:f2:44:e2:6e:25:85:
                    d2:59:20:49:27:da:4e:91:61:10:29:8e:f1:d5:89:
                    51:e1:96:d7:69:7a:c3:de:ad:b0:37:b1:b9:b9:33:
                    46:94:0c:07:83:25:0c:b5:ee:2f:eb:fc:8c:b1:8d:
                    ab:05:2f:bb:c2:d4:40:55:9d:b4:a2:85:01:b7:e8:
                    6d:08:f6:87:fd:03:06:44:e6:67:b6:7e:8e:21:be:
                    4c:9c:fe:ea:b5:77:b2:ef:a6:3a:39:ee:e1:da:bd:
                    92:c8:cc:48:f3:18:56:76:e8:6e:a9:7e:3d:7a:3d:
                    aa:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D3:05:0A:BF:F6:9A:73:0F:0F:AE:5A:63:7F:B1:A9:44:47:39:E3
            X509v3 Authority Key Identifier:
                keyid:A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133342e302f32342d3234203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:40:73:1f:f0:00:11:05:ee:2a:34:c9:b2:86:f2:63:90:e9:
         5c:df:6a:c7:6f:30:06:79:ee:aa:bc:17:7f:15:27:ae:5a:91:
         d2:03:04:5b:ac:e3:15:63:d1:22:32:02:bb:d8:08:30:2f:98:
         be:82:6b:43:00:11:e0:82:1a:10:b7:e5:e0:ee:22:33:f3:c2:
         0f:47:dd:93:a2:fb:42:86:a9:c0:31:aa:e2:51:aa:00:4f:5e:
         4c:cf:66:77:f8:71:b4:56:1a:52:73:82:a4:f2:5b:49:f9:ab:
         26:e7:b0:40:cb:ec:09:9b:cb:14:bd:1a:3c:e9:b6:25:f4:20:
         e2:7d:cf:d2:a5:02:2c:c4:89:e3:2b:80:1e:b6:04:93:2b:aa:
         76:ce:45:72:88:89:e6:f2:3b:4a:1d:f4:94:3d:c3:12:3b:24:
         19:e9:39:1a:fd:65:9c:96:42:51:cb:cd:27:2e:fa:cc:3e:6f:
         e9:0f:98:dd:34:21:97:1d:af:e9:2a:fe:eb:6a:cd:57:20:97:
         9a:06:96:eb:f3:2c:3c:d2:d7:c4:25:5f:d5:ca:fe:53:f9:f5:
         ff:f2:71:c2:60:5e:bd:bb:00:70:63:18:ff:a6:78:6b:10:68:
         a8:a5:79:8b:83:0a:01:b1:00:a7:53:df:a4:af:4e:55:af:eb:
         ae:ce:74:8b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZ1bA+xiRpKeDT3C1eVZYiy10OwowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU0NEREMkFBNTIwOThCRkI4N0JBNTc5MTRBQjk0MDBF
QUVFNEZDMDAeFw0yNDA0MDQxNDA2NTRaFw0yNTA0MDMxNDExNTRaMDMxMTAvBgNV
BAMTKDQ1RDMwNTBBQkZGNjlBNzMwRjBGQUU1QTYzN0ZCMUE5NDQ0NzM5RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXNN731LE2i+8ftbQtA+wmpkfC
PNo2aac+9N/gJ7tz7AnJf1yBABME0ZPDOtutHd/a/86vNnIQbt5ha4LAC8BRHUXv
MOu5jvn6toKnUTNb4h95t0dJufvaLbbiI52yN6VKpuX1u9+I23zIQ03u4bEb+JC1
XtgQRWumNQEHqf+NOZvjfHxNDQFt5PBkeDwzevJE4m4lhdJZIEkn2k6RYRApjvHV
iVHhltdpesPerbA3sbm5M0aUDAeDJQy17i/r/IyxjasFL7vC1EBVnbSihQG36G0I
9of9AwZE5me2fo4hvkyc/uq1d7Lvpjo57uHavZLIzEjzGFZ26G6pfj16PapHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQURdMFCr/2mnMPD65aY3+xqURHOeMwHwYDVR0j
BBgwFoAUpUTdKqUgmL+4e6V5FKuUAOruT8AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0U3Tk1BUnBnM2NQYzN0VVprRk1yS3pSdEdiNVJIdHlCR3B6dEZWV011
SmYvMS9BNTQ0REQyQUE1MjA5OEJGQjg3QkE1NzkxNEFCOTQwMEVBRUU0RkMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NDRERDJBQTUyMDk4QkZC
ODdCQTU3OTE0QUI5NDAwRUFFRTRGQzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdFN05NQVJwZzNjUGMzdFVaa0ZNckt6UnRHYjVSSHR5QkdwenRGVldNdUpmLzEv
MzEzNzM3MmUzNzMyMmUzMTMzMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzAzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsUiGMA0GCSqGSIb3DQEBCwUAA4IBAQCXQHMf8AAR
Be4qNMmyhvJjkOlc32rHbzAGee6qvBd/FSeuWpHSAwRbrOMVY9EiMgK72AgwL5i+
gmtDABHgghoQt+Xg7iIz88IPR92TovtChqnAMariUaoAT15Mz2Z3+HG0VhpSc4Kk
8ltJ+asm57BAy+wJm8sUvRo86bYl9CDifc/SpQIsxInjK4AetgSTK6p2zkVyiInm
8jtKHfSUPcMSOyQZ6Tka/WWclkJRy80nLvrMPm/pD5jdNCGXHa/pKv7ras1XIJea
Bpbr8yw80tfEJV/Vyv5T+fX/8nHCYF69uwBwYxj/pnhrEGiopXmLgwoBsQCnU9+k
r05Vr+uuznSL
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:58 2024 by rpki-client on console-ams.rpki-client.org