Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/3136372e3235302e37322e302f32322d3234203d3e20323635313937.roa
File:                     3136372e3235302e37322e302f32322d3234203d3e20323635313937.roa (raw, json)
Hash identifier:          E/MpxNJ4f2nQNOodX+88yF2yTa7LdBekif0CVVuzxVY=
Subject key identifier:   DB:FB:0C:FF:EB:19:AE:45:35:AA:99:8B:08:91:E8:99:38:DE:C4:11
Certificate issuer:       /CN=C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920
Certificate serial:       67CB7240FB62969787D1F66F341963C46C2A74AE
Authority key identifier: C7:C8:B7:2F:34:A4:E8:F0:2D:DF:94:53:4E:94:B2:B1:5A:1C:D9:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/3136372e3235302e37322e302f32322d3234203d3e20323635313937.roa
Signing time:             Wed 05 Jun 2024 19:25:08 +0000
ROA not before:           Wed 05 Jun 2024 19:20:08 +0000
ROA not after:            Wed 04 Jun 2025 19:25:08 +0000
asID:                     265197
IP address blocks:        167.250.72.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.crl
                          rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:41:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:cb:72:40:fb:62:96:97:87:d1:f6:6f:34:19:63:c4:6c:2a:74:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920
        Validity
            Not Before: Jun  5 19:20:08 2024 GMT
            Not After : Jun  4 19:25:08 2025 GMT
        Subject: CN=DBFB0CFFEB19AE4535AA998B0891E89938DEC411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0d:1e:e7:19:96:5c:71:58:44:d1:69:ad:83:
                    a5:47:1c:57:10:64:36:a8:c6:db:a9:7e:03:76:f3:
                    b9:7a:0f:89:08:b1:44:a6:9b:21:2a:e0:d8:d2:43:
                    97:88:73:66:8d:7a:49:2e:4f:7e:63:b6:ff:0d:4e:
                    76:0d:80:58:c5:c5:ea:f7:fc:a4:79:bf:bb:06:8a:
                    b7:8a:c3:3c:09:1b:fc:77:76:47:45:c4:29:c0:8c:
                    7e:08:e4:6f:5c:bf:42:64:f3:c4:b1:5f:c6:b7:1b:
                    52:a0:23:b6:69:23:d8:bc:13:8f:0c:cb:19:5e:cd:
                    fe:a2:7e:8d:f3:3b:7d:b9:44:47:48:79:62:d1:44:
                    1d:92:83:a3:64:b6:37:b2:9e:d9:16:fa:c0:fe:55:
                    d3:3c:36:4e:bb:ec:ce:a0:97:e7:f8:84:e8:b8:5f:
                    59:c4:a1:e7:20:23:fe:2e:b9:44:40:bc:d5:ad:b9:
                    c2:fd:47:0b:68:d8:3a:c9:1e:1a:6b:dd:c3:6a:70:
                    08:6b:c1:fc:ff:87:2d:f1:65:ad:93:c6:ed:db:bd:
                    e6:b9:40:29:2f:c6:ab:4a:7f:f7:a8:27:3c:b8:d9:
                    4c:00:b9:cb:be:08:e7:c0:45:75:83:19:4c:6a:45:
                    41:49:bd:b5:33:da:d1:5c:18:47:bc:c0:29:34:13:
                    11:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:FB:0C:FF:EB:19:AE:45:35:AA:99:8B:08:91:E8:99:38:DE:C4:11
            X509v3 Authority Key Identifier:
                keyid:C7:C8:B7:2F:34:A4:E8:F0:2D:DF:94:53:4E:94:B2:B1:5A:1C:D9:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/3136372e3235302e37322e302f32322d3234203d3e20323635313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:11:26:bb:10:63:c5:d9:d5:87:93:d5:b8:52:3f:23:16:b9:
         3c:f7:be:1a:dd:39:07:97:45:64:ff:fa:21:f6:04:d7:34:83:
         61:80:a8:fe:78:23:5b:9a:98:55:42:3b:f5:e0:2f:4f:11:dc:
         ff:f6:94:db:08:cc:3a:17:fc:bb:24:8e:ab:65:e2:bc:f7:bc:
         fd:74:14:05:ab:97:42:c3:70:c6:25:ce:7b:b0:d5:4a:0e:2d:
         9c:15:d9:af:16:0a:db:d6:6f:df:53:e4:40:30:3c:5d:e0:7f:
         c0:d8:99:62:6b:4b:ed:47:9a:69:72:5e:4e:2f:4e:13:d3:cc:
         bb:93:fd:a9:90:da:02:c1:99:3e:fb:12:c5:cb:a5:cb:3f:95:
         19:a8:b1:77:ac:2f:a2:e0:70:bb:19:a9:74:16:0c:3a:21:53:
         1e:1e:95:ce:34:48:60:d0:43:b0:5a:17:68:83:11:37:04:f3:
         60:ed:b1:58:db:9c:76:66:01:34:a6:27:3e:30:b7:65:5e:7c:
         dd:76:84:c7:95:f8:57:8a:65:e9:a8:ac:0a:72:b6:de:26:30:
         ed:9e:b1:7e:8a:ce:49:e9:bf:f3:38:c0:62:8c:b8:46:54:35:
         bd:40:ca:48:83:4c:ac:ef:24:73:e4:04:e2:45:82:da:b7:92:
         12:a4:dd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:01 2024 by rpki-client on console-ams.rpki-client.org