Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/3137372e37322e38382e302f32312d3332203d3e203532383232.roa
File:                     3137372e37322e38382e302f32312d3332203d3e203532383232.roa (raw, json)
Hash identifier:          TOjKSlvTJQYlqL9xdelijCeqbdZMLRtQxPjlmS75au0=
Subject key identifier:   AF:3C:06:77:C8:8B:26:70:B7:42:40:2D:4A:35:DD:55:F5:7A:89:DA
Certificate issuer:       /CN=2ECFD6270713C15F56BC52BA66D1A749FFE56168
Certificate serial:       12C51E059ED515977571B00DA074CDC8AB5AD039
Authority key identifier: 2E:CF:D6:27:07:13:C1:5F:56:BC:52:BA:66:D1:A7:49:FF:E5:61:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ECFD6270713C15F56BC52BA66D1A749FFE56168.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/3137372e37322e38382e302f32312d3332203d3e203532383232.roa
Signing time:             Wed 19 Jun 2024 18:06:45 +0000
ROA not before:           Wed 19 Jun 2024 18:01:45 +0000
ROA not after:            Wed 18 Jun 2025 18:06:45 +0000
asID:                     52822
IP address blocks:        177.72.88.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.crl
                          rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ECFD6270713C15F56BC52BA66D1A749FFE56168.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c5:1e:05:9e:d5:15:97:75:71:b0:0d:a0:74:cd:c8:ab:5a:d0:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ECFD6270713C15F56BC52BA66D1A749FFE56168
        Validity
            Not Before: Jun 19 18:01:45 2024 GMT
            Not After : Jun 18 18:06:45 2025 GMT
        Subject: CN=AF3C0677C88B2670B742402D4A35DD55F57A89DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a0:77:89:25:9f:69:72:e4:f0:1b:a9:97:41:
                    9b:b6:85:59:9f:1d:ac:d2:48:40:da:fb:45:c1:f8:
                    ec:f6:d5:17:d8:dc:c3:4e:70:ef:0d:b6:c9:a2:84:
                    23:93:43:a5:d7:d5:de:2f:bf:57:97:c2:38:15:9f:
                    96:52:d2:c1:6f:5c:3a:6f:69:27:49:ab:70:a6:cd:
                    75:6b:16:4a:5a:7f:d5:4f:64:28:14:01:f0:49:0d:
                    ea:5b:3f:f0:32:8e:f5:66:1e:b1:f5:b0:4f:d7:34:
                    cb:51:8f:d5:5f:c1:4f:bb:2b:4a:c0:2e:1d:42:01:
                    c2:19:73:2e:3a:17:3f:f2:5b:21:f4:08:1a:ae:ba:
                    4d:0e:3d:d9:ab:3f:f7:1d:40:51:bb:b4:6f:fd:83:
                    a6:1b:14:32:49:45:18:fa:b7:22:5a:eb:62:45:3b:
                    74:44:54:bf:29:ce:d7:55:ae:16:8d:a0:8f:2e:06:
                    20:77:ed:c2:ce:b4:45:16:bf:97:10:6c:7a:2c:ea:
                    37:4b:8f:a9:c2:53:9f:6b:bb:e3:88:8e:53:47:65:
                    a8:fd:15:fa:5b:bd:5d:bf:c7:dc:d4:ec:68:4a:1b:
                    45:82:db:8a:0a:26:f2:c7:e6:4a:70:b1:23:4d:23:
                    ed:2e:42:a0:48:5b:4c:f4:ee:b1:2a:f2:fc:62:53:
                    9a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3C:06:77:C8:8B:26:70:B7:42:40:2D:4A:35:DD:55:F5:7A:89:DA
            X509v3 Authority Key Identifier:
                keyid:2E:CF:D6:27:07:13:C1:5F:56:BC:52:BA:66:D1:A7:49:FF:E5:61:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ECFD6270713C15F56BC52BA66D1A749FFE56168.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/3137372e37322e38382e302f32312d3332203d3e203532383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         64:86:82:73:7f:a2:3c:60:6c:95:a2:f5:12:bd:b1:64:c2:d3:
         eb:35:da:7a:33:28:ef:53:4d:96:43:da:ab:5c:e0:14:08:03:
         dc:15:0d:b4:9d:1c:b0:10:ab:2b:13:6a:e0:db:c7:ff:56:66:
         63:98:ba:82:7c:ad:59:c2:62:86:9a:3d:d7:b5:ea:b0:cf:27:
         42:71:96:95:9c:21:f7:e0:1d:79:96:af:2b:d0:99:a3:cf:5c:
         d8:d9:6c:1d:af:2b:d2:45:c6:25:9a:27:4e:1b:0b:34:1e:d3:
         4d:bd:65:4a:84:c2:c9:11:d7:a0:47:ef:e3:67:82:3c:56:a2:
         4d:9e:5b:1a:11:df:d8:87:c0:43:f2:11:80:b3:04:eb:9e:7a:
         99:05:5c:59:a2:11:13:d6:8e:fd:69:47:e6:ae:00:bd:00:52:
         4c:7a:f8:f8:df:33:81:b7:0e:7b:be:a1:d3:ae:5c:de:84:42:
         4a:c6:e7:b7:9e:62:8f:19:e8:29:c8:20:b1:d7:23:2a:72:43:
         5b:81:ea:3f:c1:49:ce:f4:34:78:13:5c:14:0e:f7:6c:2f:8d:
         25:c3:c9:1d:f8:cf:de:2d:d7:18:13:e8:da:35:45:f6:f8:1b:
         f1:bf:97:24:47:86:98:39:c0:6f:fd:2b:23:52:37:22:38:bf:
         f7:cb:e6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 12:57:31 2024 by rpki-client on console-fra.rpki-client.org