Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35362e302f32342d3234203d3e203631373238.roa
File:                     3133312e37322e35362e302f32342d3234203d3e203631373238.roa (raw, json)
Hash identifier:          O+uMLpn3D+AwkmlBcZWN36+7j9EZiPh55l9ujuNEHfo=
Subject key identifier:   6C:D1:64:6D:AA:D2:ED:C6:20:A2:BD:39:95:8A:A7:9C:A5:5B:E0:5A
Certificate issuer:       /CN=DA065D6ABFEB300D2C42384FE35CBF5F39D05F13
Certificate serial:       0A8A60A9E4563CE5CD8A46C47B253407CC46F1D9
Authority key identifier: DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35362e302f32342d3234203d3e203631373238.roa
Signing time:             Thu 16 May 2024 21:09:51 +0000
ROA not before:           Thu 16 May 2024 21:04:51 +0000
ROA not after:            Thu 15 May 2025 21:09:51 +0000
asID:                     61728
IP address blocks:        131.72.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.crl
                          rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:8a:60:a9:e4:56:3c:e5:cd:8a:46:c4:7b:25:34:07:cc:46:f1:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA065D6ABFEB300D2C42384FE35CBF5F39D05F13
        Validity
            Not Before: May 16 21:04:51 2024 GMT
            Not After : May 15 21:09:51 2025 GMT
        Subject: CN=6CD1646DAAD2EDC620A2BD39958AA79CA55BE05A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4a:73:34:99:73:68:25:6b:9c:1c:07:85:96:
                    10:c0:bf:c6:2c:40:23:89:ce:0a:b9:95:54:c2:aa:
                    b3:6e:8b:dc:9b:0e:12:29:6a:fe:9d:73:9c:ed:44:
                    75:04:0c:ea:f4:33:6e:e4:e4:90:f8:a7:51:a3:62:
                    3a:c2:44:4b:67:21:f9:b5:4b:aa:b9:44:91:c0:68:
                    bf:e0:9c:72:98:88:76:a1:28:60:c0:9c:27:62:39:
                    f7:58:e7:20:f5:14:05:6c:77:a5:ca:79:49:e9:cf:
                    6f:2a:98:5e:58:24:7d:1d:3b:57:0f:0d:2e:3e:82:
                    95:fc:3a:8f:27:90:75:35:00:9f:b4:ea:8c:00:17:
                    05:59:3f:a1:6f:3c:3f:86:9b:55:18:b1:1b:e0:15:
                    1e:db:76:96:b3:26:ce:c7:13:1e:84:e6:44:e4:37:
                    a9:34:2b:a8:c3:c0:a7:30:98:a0:e6:be:07:b3:82:
                    26:92:51:49:ad:ce:b6:77:05:49:c6:ff:59:91:fe:
                    0b:e9:59:4b:5d:a6:82:8e:a0:91:9f:3f:7e:23:0b:
                    d4:dd:db:cb:a1:72:fb:13:d4:fc:a6:ea:f1:85:ce:
                    0c:f4:43:bd:2f:c7:4e:2b:81:87:99:50:f2:83:85:
                    9a:54:4f:43:77:20:b5:18:cf:60:0d:5c:4d:06:e2:
                    f2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D1:64:6D:AA:D2:ED:C6:20:A2:BD:39:95:8A:A7:9C:A5:5B:E0:5A
            X509v3 Authority Key Identifier:
                keyid:DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35362e302f32342d3234203d3e203631373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:b6:fb:76:a3:14:c5:64:ba:0f:a8:85:39:4e:72:8f:c7:24:
         ee:6c:3f:06:20:53:d7:9d:c9:38:fd:1f:85:35:90:9b:d7:10:
         4b:3d:e3:45:52:5f:74:e0:b0:01:f7:bd:2e:0f:b9:38:a5:57:
         9f:fb:18:5f:65:e7:f9:71:69:45:76:61:a9:b2:c2:43:27:ba:
         38:e6:44:cc:60:f3:b0:63:50:7f:c4:aa:1c:fc:b7:15:96:0f:
         51:10:9f:3f:2a:55:b5:7b:94:57:27:e4:fa:d9:d0:38:a2:c2:
         8a:62:92:c6:c6:20:5a:a9:a3:d0:13:38:d1:d9:59:75:73:27:
         1e:b0:7f:79:41:e6:61:b0:0d:0c:f5:b4:0f:4d:fb:94:7c:93:
         ef:78:d3:4c:d3:1b:20:80:e0:c7:e3:fe:69:61:d6:dd:49:aa:
         db:85:c0:5f:c6:9f:bd:a5:3b:a3:23:e8:4f:bc:a1:49:cc:d8:
         1e:5d:91:49:f3:66:8a:6d:9a:91:10:d7:3d:c0:f2:89:3b:9f:
         0c:4c:5b:bf:3f:44:c7:a2:d5:73:33:02:be:5d:6e:a6:08:79:
         95:c7:ff:1d:67:8a:65:d4:b9:bf:67:2b:74:38:4f:45:eb:c7:
         6e:e9:5a:12:f8:60:6d:96:30:71:25:0c:8a:55:1c:2c:1f:30:
         d2:14:1e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:38 2024 by rpki-client on console-ams.rpki-client.org