Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35382e302f32332d3233203d3e203631373238.roa
File:                     3133312e37322e35382e302f32332d3233203d3e203631373238.roa (raw, json)
Hash identifier:          JhPV9ALu+jY0H9z6vinjsGz1KIfsG+LEH2ajy4hsVV4=
Subject key identifier:   73:F1:25:6F:7A:BF:43:D0:77:50:0F:3B:D4:7C:5F:BB:D8:28:10:A6
Certificate issuer:       /CN=DA065D6ABFEB300D2C42384FE35CBF5F39D05F13
Certificate serial:       16286EFC11AC316CCF2E07EA476260CB5CBA5AA5
Authority key identifier: DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35382e302f32332d3233203d3e203631373238.roa
Signing time:             Thu 16 May 2024 21:09:50 +0000
ROA not before:           Thu 16 May 2024 21:04:50 +0000
ROA not after:            Thu 15 May 2025 21:09:50 +0000
asID:                     61728
IP address blocks:        131.72.58.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.crl
                          rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:28:6e:fc:11:ac:31:6c:cf:2e:07:ea:47:62:60:cb:5c:ba:5a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA065D6ABFEB300D2C42384FE35CBF5F39D05F13
        Validity
            Not Before: May 16 21:04:50 2024 GMT
            Not After : May 15 21:09:50 2025 GMT
        Subject: CN=73F1256F7ABF43D077500F3BD47C5FBBD82810A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:19:64:94:e0:52:c2:da:7c:22:da:94:0b:db:
                    46:29:d5:68:59:b2:db:e9:83:34:05:4c:5c:04:8a:
                    6b:c5:e1:79:94:4f:7d:01:79:77:0b:00:7a:50:6d:
                    6f:be:44:16:4a:44:ba:95:28:41:0f:95:16:f5:71:
                    14:7f:4f:2d:c5:2e:5d:c9:53:72:5c:7a:bc:47:63:
                    89:4a:94:a7:19:a3:5f:99:22:36:a8:6a:91:13:1c:
                    4f:98:7e:16:fb:4e:f2:30:ed:af:61:f7:ba:d3:6b:
                    cd:3b:d4:6f:12:dc:52:a9:1b:d4:d5:82:46:06:8b:
                    f0:1a:1a:de:d9:54:4d:cc:65:6c:eb:11:bf:4a:22:
                    51:fc:04:6d:1a:1e:61:df:e1:08:97:d5:81:be:82:
                    7e:d6:92:30:c4:e6:2c:c1:37:51:32:17:40:5d:c6:
                    25:3c:ec:b4:29:d1:22:58:50:2f:6a:4e:4d:45:ef:
                    45:db:9c:76:32:9b:4b:3a:de:77:89:33:5b:58:5a:
                    35:55:0b:de:c5:c0:a5:ea:4b:4b:1e:2a:88:42:8c:
                    15:1a:f0:84:94:23:c2:01:4c:60:f0:e8:38:e0:3f:
                    d0:bf:94:bf:d6:ff:25:41:52:bf:85:a2:2d:a8:e4:
                    41:4c:fb:7f:5b:38:bc:8e:2d:c4:0e:cb:03:6d:2b:
                    cb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F1:25:6F:7A:BF:43:D0:77:50:0F:3B:D4:7C:5F:BB:D8:28:10:A6
            X509v3 Authority Key Identifier:
                keyid:DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35382e302f32332d3233203d3e203631373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:c5:24:21:e4:63:65:10:1e:5a:8b:c1:c0:7d:1c:00:da:48:
         19:2a:ac:47:33:5a:a3:42:db:e9:25:4a:c2:40:ee:11:f1:cf:
         49:a1:e3:d2:64:0a:2b:f2:ad:31:07:2c:1b:fc:37:c5:d6:96:
         fa:68:7d:4d:ef:70:3a:42:97:29:7b:a4:e8:80:fd:af:65:14:
         ab:55:73:f6:fc:c2:86:00:e5:b9:9e:8d:cb:00:bc:47:55:db:
         ce:28:4d:60:b2:16:c4:74:56:53:de:53:0c:c5:4b:64:d2:0e:
         b1:34:f5:db:be:d2:95:93:ab:d9:bc:40:95:d0:14:55:1d:d0:
         8e:99:1f:cf:21:83:6c:86:5a:d3:84:5b:58:44:ea:28:c8:b9:
         ac:f7:f2:19:d4:cf:bf:5d:04:f0:61:f8:1a:e5:d5:38:5d:8e:
         de:a5:f9:93:0d:28:31:61:7e:4d:7e:74:6e:61:f7:d9:dc:60:
         0e:99:47:b7:7c:49:30:1b:6b:df:c9:c2:f8:ff:22:65:20:e4:
         9b:b1:e3:79:29:30:0b:79:7c:48:2a:16:f5:00:c0:0d:8e:9b:
         a9:1e:cf:c6:5c:76:c4:a5:28:37:f8:7c:14:fc:dd:79:3d:cb:
         3a:36:a3:c8:fe:44:a9:bc:7b:76:e8:54:3e:d7:00:20:8a:1c:
         e5:92:e5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:38 2024 by rpki-client on console-ams.rpki-client.org