Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BrthmiAe3LZdcpqpW1goneaJ9Z5pLTaM39PCvy98hKNk/0/3137372e37322e35362e302f32312d3234203d3e203532383135.roa
File:                     3137372e37322e35362e302f32312d3234203d3e203532383135.roa (raw, json)
Hash identifier:          N6ZrTzITH1OBZb8mt/IkHzipyTKqS6y6tz4GuxnU778=
Subject key identifier:   B2:D7:2B:6C:90:22:F2:7B:6D:CB:AC:58:0C:D5:48:76:D5:78:6B:E7
Certificate issuer:       /CN=15624C0BA304795FD3C18CF592338A4940310BB4
Certificate serial:       1734E1C0AD8E85830763278012E03E41F38266FE
Authority key identifier: 15:62:4C:0B:A3:04:79:5F:D3:C1:8C:F5:92:33:8A:49:40:31:0B:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15624C0BA304795FD3C18CF592338A4940310BB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BrthmiAe3LZdcpqpW1goneaJ9Z5pLTaM39PCvy98hKNk/0/3137372e37322e35362e302f32312d3234203d3e203532383135.roa
Signing time:             Wed 16 Oct 2024 17:44:31 +0000
ROA not before:           Wed 16 Oct 2024 17:39:31 +0000
ROA not after:            Wed 15 Oct 2025 17:44:31 +0000
asID:                     52815
IP address blocks:        177.72.56.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BrthmiAe3LZdcpqpW1goneaJ9Z5pLTaM39PCvy98hKNk/0/15624C0BA304795FD3C18CF592338A4940310BB4.crl
                          rsync://rpki-repo.registro.br/repo/BrthmiAe3LZdcpqpW1goneaJ9Z5pLTaM39PCvy98hKNk/0/15624C0BA304795FD3C18CF592338A4940310BB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15624C0BA304795FD3C18CF592338A4940310BB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:34:e1:c0:ad:8e:85:83:07:63:27:80:12:e0:3e:41:f3:82:66:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15624C0BA304795FD3C18CF592338A4940310BB4
        Validity
            Not Before: Oct 16 17:39:31 2024 GMT
            Not After : Oct 15 17:44:31 2025 GMT
        Subject: CN=B2D72B6C9022F27B6DCBAC580CD54876D5786BE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a4:39:70:d4:5f:d0:c8:12:fe:7b:89:08:6b:
                    27:8f:a9:4a:6e:41:fd:0a:21:9a:dc:7f:e2:31:6b:
                    16:e9:09:87:90:f8:bf:67:89:0e:c5:dc:ea:4c:24:
                    ae:88:9a:88:ab:ad:d2:7d:c1:9f:6e:70:9e:be:7c:
                    e5:86:a9:09:27:66:84:88:aa:21:c4:ff:37:78:8b:
                    b2:6e:80:36:45:67:62:ae:25:5f:7d:06:3d:e9:a6:
                    29:ea:aa:a9:33:0d:49:a0:9d:02:50:59:d4:45:7a:
                    f8:b0:4c:68:5e:b5:d5:01:fa:69:b8:22:ba:be:75:
                    3f:37:ac:ea:2d:51:ee:78:cf:f6:4c:ea:cc:65:31:
                    ff:1c:42:28:48:2d:cc:af:30:a8:ed:a3:36:68:71:
                    e3:60:8b:10:b4:97:8a:9c:19:6d:3f:48:ae:2e:88:
                    22:b2:96:c8:d3:9b:11:f9:0e:d9:3f:aa:fb:45:6d:
                    c2:d0:47:e5:9c:1f:10:88:f7:43:ef:39:37:9d:54:
                    12:d2:6a:ea:a2:f1:8c:0d:18:7e:fc:73:02:93:5a:
                    aa:2c:a6:04:e2:4e:f1:9f:06:99:71:0f:a4:3e:57:
                    9c:39:66:29:01:7e:91:ff:36:c6:51:58:36:cc:6c:
                    f6:66:bd:80:9e:2f:bc:0c:4e:e1:ea:a2:f3:e0:03:
                    d0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D7:2B:6C:90:22:F2:7B:6D:CB:AC:58:0C:D5:48:76:D5:78:6B:E7
            X509v3 Authority Key Identifier:
                keyid:15:62:4C:0B:A3:04:79:5F:D3:C1:8C:F5:92:33:8A:49:40:31:0B:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BrthmiAe3LZdcpqpW1goneaJ9Z5pLTaM39PCvy98hKNk/0/15624C0BA304795FD3C18CF592338A4940310BB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15624C0BA304795FD3C18CF592338A4940310BB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrthmiAe3LZdcpqpW1goneaJ9Z5pLTaM39PCvy98hKNk/0/3137372e37322e35362e302f32312d3234203d3e203532383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8c:23:35:46:47:c8:9b:df:f1:69:1e:7e:80:66:32:df:ba:7e:
         22:69:2b:7b:71:8b:9d:83:05:7b:99:ad:c8:ef:7f:31:43:d1:
         8d:8a:92:7d:2c:f7:0a:51:5b:2d:6c:4f:b8:10:08:1f:c6:df:
         23:82:e6:4b:e1:ca:1c:2f:25:51:56:f7:1d:21:b1:a4:28:23:
         7a:fb:fc:5b:32:19:63:cd:38:dd:80:84:37:de:8f:7c:32:d0:
         0f:40:55:0b:b1:43:d2:a0:78:b6:91:8a:90:60:59:15:a0:0f:
         fb:36:1d:e7:57:d5:ce:4e:6b:c7:9c:9a:1c:01:df:92:56:83:
         13:ae:f2:17:8d:74:d2:87:d6:f3:92:16:f2:4f:60:38:bb:a7:
         48:c9:36:8d:07:9d:3b:2a:ee:89:d0:d7:11:1c:c5:7b:ca:c5:
         cf:c5:32:65:98:02:e4:b0:91:c1:78:13:1a:54:47:e3:6b:4b:
         6c:3f:1f:d7:9a:45:21:eb:e0:23:62:c6:97:25:07:01:4e:5d:
         28:31:df:d6:7e:23:0d:83:2e:a3:04:ad:c6:a1:f3:03:b7:58:
         70:7f:e3:b8:a4:2c:0b:38:7e:d7:51:07:50:f0:92:5c:ea:48:
         3a:70:d4:93:f0:e2:82:ea:32:04:ab:ba:8f:56:5d:00:0f:e5:
         3c:23:4d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:20 2024 by rpki-client on console-fra.rpki-client.org