Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35362e302f32322d3232203d3e203631373238.roa
File:                     3133312e37322e35362e302f32322d3232203d3e203631373238.roa (raw, json)
Hash identifier:          x0ZA0xVJ62eiyVqB49wLgjDhv4W1zgMntZ5bP9v3nTI=
Subject key identifier:   C0:F1:5B:32:AC:F4:42:F4:59:01:CC:54:24:37:4B:9E:6A:28:33:FF
Certificate issuer:       /CN=DA065D6ABFEB300D2C42384FE35CBF5F39D05F13
Certificate serial:       6B4F646612A6464A85436372D417EE7DCC16AC4B
Authority key identifier: DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35362e302f32322d3232203d3e203631373238.roa
Signing time:             Thu 16 May 2024 21:09:50 +0000
ROA not before:           Thu 16 May 2024 21:04:50 +0000
ROA not after:            Thu 15 May 2025 21:09:50 +0000
asID:                     61728
IP address blocks:        131.72.56.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.crl
                          rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:4f:64:66:12:a6:46:4a:85:43:63:72:d4:17:ee:7d:cc:16:ac:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA065D6ABFEB300D2C42384FE35CBF5F39D05F13
        Validity
            Not Before: May 16 21:04:50 2024 GMT
            Not After : May 15 21:09:50 2025 GMT
        Subject: CN=C0F15B32ACF442F45901CC5424374B9E6A2833FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e4:9e:7d:ac:e7:96:98:48:5c:c3:ec:69:d4:
                    5a:4b:cd:88:9e:93:af:f2:88:9a:80:b4:e8:fe:4a:
                    2f:e9:f2:f3:53:d4:97:3b:11:14:7d:32:31:9e:84:
                    96:d3:a3:b5:da:ec:13:ad:4f:06:f1:f7:e1:46:81:
                    01:a3:49:ed:19:d4:a9:f4:2d:44:63:1c:53:9e:77:
                    d2:d8:3e:47:7f:d8:96:9d:d4:11:4d:9c:10:ba:ce:
                    dd:90:9a:58:fa:12:01:10:4c:d3:9a:66:1e:aa:d7:
                    95:bd:60:f8:8b:d8:5e:2c:c1:7a:fe:25:d5:49:66:
                    c0:d9:33:11:d6:85:d8:56:00:2c:0d:85:0a:ca:8b:
                    09:88:c1:88:d6:bf:89:12:2e:92:3e:f6:9e:87:50:
                    8a:d6:6b:9d:6f:c9:b0:2b:66:bd:bf:1e:1d:e4:0e:
                    18:a7:77:1a:a6:32:cd:cb:b1:2e:eb:d6:83:52:fb:
                    e6:58:21:33:82:be:e5:a0:07:3f:30:1b:43:1b:80:
                    2c:4b:21:42:34:39:7d:80:3d:c6:e8:f3:bf:94:19:
                    1d:e3:fc:5c:0c:ac:6d:b9:8e:5a:26:8e:d8:9d:9e:
                    85:4b:75:42:af:41:68:45:1f:2b:42:9d:26:7f:c3:
                    6d:f4:11:c2:a1:88:09:1d:a5:a4:33:00:e1:de:f1:
                    24:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F1:5B:32:AC:F4:42:F4:59:01:CC:54:24:37:4B:9E:6A:28:33:FF
            X509v3 Authority Key Identifier:
                keyid:DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35362e302f32322d3232203d3e203631373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:7b:60:62:02:10:db:07:8d:8b:81:b4:bb:89:09:41:fd:d6:
         ef:d7:57:9d:45:81:85:4e:40:4e:d9:fc:1b:44:be:0d:e2:0b:
         23:9c:7a:73:de:71:d8:5c:82:6b:b2:ed:dc:a1:6c:31:83:1f:
         3d:53:5b:12:62:6c:24:b5:06:b1:8f:c0:8c:51:28:2f:cf:14:
         1f:0d:b0:ae:5f:05:8a:45:fe:5d:2c:f9:23:15:84:a1:fd:d1:
         2f:db:f9:68:89:37:22:f1:c9:c2:b1:56:c7:d9:cf:bc:bd:c1:
         50:13:27:68:cb:3e:48:68:0d:3a:3a:a3:35:f5:26:3e:70:e7:
         1f:d2:69:0e:71:2c:f0:ef:31:ef:ff:e3:08:2c:e4:1a:ab:a6:
         de:f6:45:2c:de:29:df:82:f6:6a:43:f1:3a:a8:ef:2f:bb:34:
         2d:1a:d8:a8:89:29:3f:d3:36:ff:f1:3f:bb:d8:31:c3:56:2f:
         fd:07:0b:16:2b:72:d6:45:32:06:a4:c5:0e:29:8f:43:81:85:
         65:60:d9:82:be:44:99:c8:d9:5b:bd:21:2f:33:60:96:e1:01:
         2a:28:c3:a6:97:3a:04:f8:bc:d2:0d:31:a7:97:90:05:7d:10:
         16:66:b4:c1:02:70:c0:3d:68:71:2a:b3:e4:0e:ac:96:ec:d1:
         a1:f0:95:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:38 2024 by rpki-client on console-ams.rpki-client.org