Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133352e302f32342d3234203d3e203533303138.roa
File:                     3137372e37322e3133352e302f32342d3234203d3e203533303138.roa (raw, json)
Hash identifier:          cFOzUGu/hq9nlfAX08ViVSBWacaCpxeS7PRWGbdyvCc=
Subject key identifier:   8B:06:DE:56:79:F6:0E:18:43:EC:D7:3D:BD:F7:DD:69:7E:88:E2:68
Certificate issuer:       /CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
Certificate serial:       32933FA8B8E8EB1ABC2C137E439632538C800A21
Authority key identifier: A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133352e302f32342d3234203d3e203533303138.roa
Signing time:             Thu 04 Apr 2024 14:11:55 +0000
ROA not before:           Thu 04 Apr 2024 14:06:55 +0000
ROA not after:            Thu 03 Apr 2025 14:11:55 +0000
asID:                     53018
IP address blocks:        177.72.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:33:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:93:3f:a8:b8:e8:eb:1a:bc:2c:13:7e:43:96:32:53:8c:80:0a:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
        Validity
            Not Before: Apr  4 14:06:55 2024 GMT
            Not After : Apr  3 14:11:55 2025 GMT
        Subject: CN=8B06DE5679F60E1843ECD73DBDF7DD697E88E268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f8:b1:7f:17:b5:a8:36:95:f1:cf:3d:b4:4a:
                    0f:2a:75:9b:c1:6d:b9:03:23:19:c3:ee:e5:e5:7d:
                    cc:c8:e4:01:b7:cd:39:b1:70:f2:83:8f:ce:00:bd:
                    c3:8b:e6:aa:d1:0a:66:ef:59:43:2e:70:57:bd:bf:
                    6a:91:7e:b6:b5:7e:7d:84:28:bf:c5:13:c2:02:f9:
                    c0:40:75:1c:27:43:a6:ee:b4:a9:c8:39:07:bb:86:
                    20:d2:c7:1a:0b:fd:82:b2:5e:b6:4c:9c:95:3d:3f:
                    12:60:fd:d2:4b:0a:37:44:d9:e4:cb:1f:c2:bb:42:
                    e2:f0:f3:df:bd:e8:ac:84:6f:88:3c:45:cf:e4:75:
                    3c:fa:9c:de:9e:72:4c:4f:a0:19:69:f8:3d:68:32:
                    4f:60:53:21:90:d3:d8:70:a2:e8:11:30:a2:05:55:
                    83:8b:8c:3f:55:f5:5b:08:42:f2:94:92:86:79:4e:
                    41:4f:c4:1f:9e:2d:55:56:39:16:79:ba:76:fc:a6:
                    db:77:ec:d5:a7:76:2a:31:2d:4b:32:e8:d1:a6:0c:
                    e9:6c:02:e5:99:7c:76:8b:57:46:4d:77:7e:30:6d:
                    ef:4e:a1:fe:91:2b:6f:8f:8f:21:38:f6:90:7c:61:
                    36:9b:aa:c3:7e:16:12:5f:cd:6f:1f:2f:24:3a:5a:
                    59:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:06:DE:56:79:F6:0E:18:43:EC:D7:3D:BD:F7:DD:69:7E:88:E2:68
            X509v3 Authority Key Identifier:
                keyid:A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133352e302f32342d3234203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:9e:75:c8:f6:83:5b:7e:d7:84:61:dd:97:2f:a2:51:66:d8:
         ee:8d:f3:0e:a2:b2:e8:90:b8:dd:4a:de:0c:80:fb:b2:33:85:
         05:06:ab:72:12:67:45:80:81:92:f8:88:11:6d:06:b7:17:2a:
         be:8d:42:37:f7:2d:6f:4c:90:71:63:d9:97:18:ca:e6:30:b5:
         cf:08:0f:d8:4a:ed:9f:9a:fa:6b:ba:22:5f:63:e6:2c:6d:b5:
         8e:1d:9b:1a:ee:18:6b:27:8e:04:1e:8f:45:2d:7d:c8:5c:c7:
         e1:30:32:77:66:b9:bf:82:d9:52:cc:bb:1c:4b:79:40:b7:e2:
         51:85:76:d8:16:83:8a:7a:8b:bc:03:53:74:24:2a:04:1b:0d:
         d6:b4:78:58:78:5e:41:63:ba:0d:e1:02:55:2f:2c:6f:09:d1:
         13:9c:9f:aa:61:92:c1:cb:d7:5c:f3:a3:ea:8b:f7:99:7f:53:
         48:4e:eb:6c:23:88:79:a5:7d:ad:05:0a:0b:46:39:b6:90:89:
         60:de:ac:32:af:56:cd:e8:16:db:bb:a2:d2:18:82:21:07:60:
         57:a3:2d:d0:1b:54:84:10:4e:46:b1:9f:fb:6b:01:d3:41:f7:
         56:fa:f2:df:89:7e:1a:5a:c6:ea:b1:f9:a2:e1:08:d3:fe:aa:
         24:2b:aa:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:38 2024 by rpki-client on console-fra.rpki-client.org