Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/3139312e372e37322e302f32312d3234203d3e203533313330.roa
File:                     3139312e372e37322e302f32312d3234203d3e203533313330.roa (raw, json)
Hash identifier:          sJylGoaewN4tNVGTsx6aWKlBSnLP34EgH80x6KDG5k0=
Subject key identifier:   B5:B5:A6:8A:C3:49:74:4A:D4:3E:A2:E8:3F:82:0B:DE:86:7F:34:B6
Certificate issuer:       /CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED
Certificate serial:       4485AEB77E1DE843A23839E2E0F1E6BC1EEC1FCB
Authority key identifier: 02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/3139312e372e37322e302f32312d3234203d3e203533313330.roa
Signing time:             Thu 04 Apr 2024 05:12:30 +0000
ROA not before:           Thu 04 Apr 2024 05:07:30 +0000
ROA not after:            Thu 03 Apr 2025 05:12:30 +0000
asID:                     53130
IP address blocks:        191.7.72.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl
                          rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:85:ae:b7:7e:1d:e8:43:a2:38:39:e2:e0:f1:e6:bc:1e:ec:1f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED
        Validity
            Not Before: Apr  4 05:07:30 2024 GMT
            Not After : Apr  3 05:12:30 2025 GMT
        Subject: CN=B5B5A68AC349744AD43EA2E83F820BDE867F34B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:33:f5:04:82:10:3f:84:42:8e:93:96:08:1c:
                    1b:96:60:26:76:25:d5:b7:8e:e0:88:b3:aa:39:45:
                    a0:d3:14:6e:25:b6:34:13:c3:f6:2c:ca:92:5d:c5:
                    04:4f:78:ad:04:65:89:9e:e3:e7:d4:db:77:a8:1b:
                    c9:79:d4:66:25:f9:c9:10:12:6d:07:ec:8a:10:e3:
                    5a:06:c0:e2:c1:a5:06:7f:d3:bc:3b:a3:95:02:fb:
                    22:50:9a:5e:a3:ce:46:08:c2:11:53:a2:8c:a0:83:
                    25:11:bd:bb:3d:95:89:a8:6e:8a:5c:c0:a2:6d:b4:
                    0e:f8:e5:1b:3b:ae:df:ba:7d:eb:53:e8:66:08:df:
                    d4:19:93:f6:7a:9c:78:56:be:d4:4c:5a:ee:52:60:
                    ac:76:95:4a:44:e6:2a:cb:6e:58:56:2c:fb:92:e4:
                    9a:c6:6a:c8:e5:38:47:8a:40:a0:f9:6f:ec:86:90:
                    f3:47:a1:db:3d:04:bf:6d:59:bd:64:2d:93:0f:ca:
                    d7:a3:ac:92:cd:a3:f1:90:f9:ca:a6:da:76:df:67:
                    14:cf:af:4e:57:a5:25:c5:95:82:b6:71:2d:55:13:
                    57:16:17:88:86:4a:b6:65:61:45:9a:39:43:16:7c:
                    e2:d2:0d:e0:30:f0:61:11:76:54:ef:9e:4a:b1:4a:
                    39:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B5:A6:8A:C3:49:74:4A:D4:3E:A2:E8:3F:82:0B:DE:86:7F:34:B6
            X509v3 Authority Key Identifier:
                keyid:02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/3139312e372e37322e302f32312d3234203d3e203533313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         99:d9:58:ed:91:ed:24:46:ec:61:8d:fa:eb:b4:06:3f:6d:67:
         d4:a6:28:da:ae:7b:c7:5a:63:f0:86:9b:58:97:47:34:c0:95:
         4d:5f:f7:84:de:5c:d5:84:1c:21:2a:ae:61:2b:38:c2:e8:db:
         96:8a:cc:d1:f4:e2:c2:da:4e:13:8d:4a:fb:da:22:84:75:00:
         67:4b:0c:a5:7c:fe:5b:35:49:4d:b7:7b:b6:83:2a:1c:c2:9e:
         b0:8f:c0:39:4b:21:9d:32:9e:2e:b9:77:de:d4:78:c0:2c:fa:
         35:84:46:6e:6d:cf:99:f0:f0:39:84:fc:26:25:ec:9a:4e:1f:
         70:fa:42:2b:c0:74:04:a5:42:d9:d7:6a:25:60:62:35:46:a5:
         22:51:7d:04:e8:cd:6e:0c:d0:22:88:77:4b:f7:25:bb:3e:db:
         50:d4:68:50:61:f3:1c:8b:3d:83:22:29:ac:64:f2:88:2b:53:
         5c:aa:ef:51:25:06:63:0c:95:af:e1:5c:b9:42:d7:48:4d:ec:
         85:ba:ad:66:ff:4a:ee:e8:c8:5f:e1:f1:80:3f:8e:6a:09:d0:
         bb:16:ed:1d:bc:54:a8:8f:40:d7:53:df:82:ea:d4:ae:d2:ce:
         84:60:27:87:10:9f:e9:d9:03:1a:87:4b:57:9d:6c:32:57:01:
         d6:ac:26:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:50:49 2024 by rpki-client on console-fra.rpki-client.org