Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/3136372e3235302e37322e302f32322d3232203d3e20323635313937.roa
File:                     3136372e3235302e37322e302f32322d3232203d3e20323635313937.roa (raw, json)
Hash identifier:          5rcxMQxLDksj0a1lzSRmhhTjqrHWBvG4kPO5yk2zB4s=
Subject key identifier:   72:DE:D1:F4:C2:BD:3F:A9:F2:17:7A:C3:5A:91:02:FC:04:A0:03:67
Certificate issuer:       /CN=C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920
Certificate serial:       3B0C59106B26AD8F097B7FE5BD44EA66D0CEFDF5
Authority key identifier: C7:C8:B7:2F:34:A4:E8:F0:2D:DF:94:53:4E:94:B2:B1:5A:1C:D9:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/3136372e3235302e37322e302f32322d3232203d3e20323635313937.roa
Signing time:             Thu 18 Apr 2024 19:58:01 +0000
ROA not before:           Thu 18 Apr 2024 19:53:01 +0000
ROA not after:            Thu 17 Apr 2025 19:58:01 +0000
asID:                     265197
IP address blocks:        167.250.72.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.crl
                          rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 21:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0c:59:10:6b:26:ad:8f:09:7b:7f:e5:bd:44:ea:66:d0:ce:fd:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920
        Validity
            Not Before: Apr 18 19:53:01 2024 GMT
            Not After : Apr 17 19:58:01 2025 GMT
        Subject: CN=72DED1F4C2BD3FA9F2177AC35A9102FC04A00367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e6:82:5e:0f:c4:86:dd:ac:4e:39:7d:ba:bd:
                    4f:2a:31:01:81:98:4e:81:8c:38:6f:08:f6:8e:05:
                    fd:00:8f:1a:f2:ae:34:75:27:42:5d:75:0d:2f:64:
                    8b:1e:ae:56:48:60:c5:12:63:0e:ca:22:b1:94:10:
                    85:1b:d9:ab:2f:c4:27:cd:90:d8:c6:6f:9d:5e:80:
                    38:57:17:30:20:b2:0b:af:32:1b:57:72:14:43:60:
                    ad:d1:de:ae:32:13:8f:66:2d:7c:c1:60:ac:8a:49:
                    91:f8:82:13:a5:70:1f:d0:b7:48:a5:26:88:a9:7b:
                    e9:17:f3:aa:a6:af:07:e6:29:7b:f9:db:e7:18:b8:
                    bd:83:0a:fe:0a:30:5a:1d:88:23:55:e4:d4:a2:a0:
                    b5:af:c3:c8:2b:81:51:80:39:fc:35:85:cb:9c:4c:
                    fe:1b:6a:95:08:b2:a9:19:ea:5b:35:de:9f:03:dd:
                    12:e1:3e:bb:f4:a9:9f:4b:d8:0c:db:8f:e2:fe:2f:
                    67:1f:56:17:70:a9:06:5f:8a:68:a1:3c:f8:cb:33:
                    af:db:0e:56:6f:a8:f5:c9:95:91:86:a9:e6:93:67:
                    07:e2:44:68:53:63:5d:4d:7d:e4:31:24:60:04:ee:
                    e3:68:3f:4e:ce:d0:6f:b0:ac:88:7a:ea:fa:ae:39:
                    93:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DE:D1:F4:C2:BD:3F:A9:F2:17:7A:C3:5A:91:02:FC:04:A0:03:67
            X509v3 Authority Key Identifier:
                keyid:C7:C8:B7:2F:34:A4:E8:F0:2D:DF:94:53:4E:94:B2:B1:5A:1C:D9:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/3136372e3235302e37322e302f32322d3232203d3e20323635313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:c7:c6:eb:99:7a:ab:79:e8:a9:a6:f1:9e:e7:40:d6:28:82:
         1a:09:d9:4c:97:53:ee:e7:b3:69:41:72:b5:5f:04:7f:63:4d:
         67:89:e1:33:10:2e:28:88:91:4b:98:bc:17:ca:64:bd:8b:e4:
         ee:e3:f8:b8:a8:5a:51:71:25:9c:45:09:4d:62:d0:0e:04:3c:
         58:45:9d:cb:3a:8c:62:91:08:b5:8d:7b:89:c1:3e:b2:01:f7:
         18:98:c0:dc:c8:87:66:94:1f:49:61:38:0a:aa:9e:68:dd:73:
         ff:25:ee:88:ac:9d:04:78:17:ce:e9:1a:d6:15:ee:1c:c1:3c:
         25:2c:4f:1c:d8:b6:3a:ea:4d:ff:f4:76:15:83:cb:b5:57:65:
         bb:52:7f:2d:ee:a4:af:2b:0e:07:9d:4b:56:ad:56:f3:fb:34:
         1f:1d:b8:0e:d4:92:d1:00:05:11:0f:c8:0c:b0:a3:19:4e:39:
         0d:af:32:46:a8:a9:2d:f8:b4:f6:59:cb:05:8d:9b:bc:c0:b7:
         2d:77:8b:f4:43:da:3d:85:47:df:3d:06:e5:41:48:14:12:88:
         4c:06:3d:f3:e3:2a:1b:a4:1e:c5:a4:d3:68:2e:81:93:9b:b8:
         12:b5:9d:4e:af:f8:ce:0a:c5:21:5b:4a:d6:37:1f:d9:a3:d8:
         c8:69:7f:01
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOwxZEGsmrY8Je3/lvUTqZtDO/fUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzdDOEI3MkYzNEE0RThGMDJEREY5NDUzNEU5NEIyQjE1
QTFDRDkyMDAeFw0yNDA0MTgxOTUzMDFaFw0yNTA0MTcxOTU4MDFaMDMxMTAvBgNV
BAMTKDcyREVEMUY0QzJCRDNGQTlGMjE3N0FDMzVBOTEwMkZDMDRBMDAzNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv5oJeD8SG3axOOX26vU8qMQGB
mE6BjDhvCPaOBf0AjxryrjR1J0JddQ0vZIserlZIYMUSYw7KIrGUEIUb2asvxCfN
kNjGb51egDhXFzAgsguvMhtXchRDYK3R3q4yE49mLXzBYKyKSZH4ghOlcB/Qt0il
Joipe+kX86qmrwfmKXv52+cYuL2DCv4KMFodiCNV5NSioLWvw8grgVGAOfw1hcuc
TP4bapUIsqkZ6ls13p8D3RLhPrv0qZ9L2Azbj+L+L2cfVhdwqQZfimihPPjLM6/b
DlZvqPXJlZGGqeaTZwfiRGhTY11NfeQxJGAE7uNoP07O0G+wrIh66vquOZPlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUct7R9MK9P6nyF3rDWpEC/ASgA2cwHwYDVR0j
BBgwFoAUx8i3LzSk6PAt35RTTpSysVoc2SAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQU56b3VUdjlzMk5nN3YyRkNFWFpVRmR1UWtLNVlxb1hyaWlRcTdUMjJl
WFEvMC9DN0M4QjcyRjM0QTRFOEYwMkRERjk0NTM0RTk0QjJCMTVBMUNEOTIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3QzhCNzJGMzRBNEU4RjAy
RERGOTQ1MzRFOTRCMkIxNUExQ0Q5MjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FOem91VHY5czJOZzd2MkZDRVhaVUZkdVFrSzVZcW9YcmlpUXE3VDIyZVhRLzAv
MzEzNjM3MmUzMjM1MzAyZTM3MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzUzMTM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKn+kgwDQYJKoZIhvcNAQELBQADggEBADfHxuuZ
eqt56Kmm8Z7nQNYoghoJ2UyXU+7ns2lBcrVfBH9jTWeJ4TMQLiiIkUuYvBfKZL2L
5O7j+LioWlFxJZxFCU1i0A4EPFhFncs6jGKRCLWNe4nBPrIB9xiYwNzIh2aUH0lh
OAqqnmjdc/8l7oisnQR4F87pGtYV7hzBPCUsTxzYtjrqTf/0dhWDy7VXZbtSfy3u
pK8rDgedS1atVvP7NB8duA7UktEABREPyAywoxlOOQ2vMkaoqS34tPZZywWNm7zA
ty13i/RD2j2FR989BuVBSBQSiEwGPfPjKhukHsWk02gugZObuBK1nU6v+M4KxSFb
StY3H9mj2MhpfwE=
-----END CERTIFICATE-----
Generated at Sat Jun 1 23:00:45 2024 by rpki-client on console-ams.rpki-client.org