Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35382e302f32342d3234203d3e203631373238.roa
File:                     3133312e37322e35382e302f32342d3234203d3e203631373238.roa (raw, json)
Hash identifier:          3FxNEMkIGlsMnIiiVMR56nkauQjCD0rQw/weMh6dKdU=
Subject key identifier:   D3:C1:D1:05:6C:14:F8:09:64:AC:A0:FB:9D:DB:35:3B:94:38:DE:8A
Certificate issuer:       /CN=DA065D6ABFEB300D2C42384FE35CBF5F39D05F13
Certificate serial:       308FCCC5F9AD0D1A9F220C10CB089A3946F5E5BA
Authority key identifier: DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35382e302f32342d3234203d3e203631373238.roa
Signing time:             Thu 16 May 2024 21:09:50 +0000
ROA not before:           Thu 16 May 2024 21:04:50 +0000
ROA not after:            Thu 15 May 2025 21:09:50 +0000
asID:                     61728
IP address blocks:        131.72.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.crl
                          rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:8f:cc:c5:f9:ad:0d:1a:9f:22:0c:10:cb:08:9a:39:46:f5:e5:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA065D6ABFEB300D2C42384FE35CBF5F39D05F13
        Validity
            Not Before: May 16 21:04:50 2024 GMT
            Not After : May 15 21:09:50 2025 GMT
        Subject: CN=D3C1D1056C14F80964ACA0FB9DDB353B9438DE8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:42:dc:c5:0e:de:28:5c:b3:00:be:11:a7:62:
                    72:3c:30:f7:51:05:95:a6:05:06:65:82:d4:3b:a4:
                    34:ad:bd:1f:ae:d6:18:95:33:67:74:a0:87:30:e4:
                    1b:58:d8:88:80:54:e3:e1:5a:07:d7:4a:79:58:72:
                    11:11:ad:44:65:16:dd:4d:25:b9:bc:5f:49:b1:d7:
                    1b:97:bc:9d:16:e7:86:03:24:56:44:fc:2e:9a:ac:
                    22:3e:35:03:72:f2:68:a5:22:6a:6d:65:79:20:b6:
                    a5:33:d8:45:16:2f:b1:97:5e:81:32:ad:0a:e3:4f:
                    c0:9f:57:35:e0:1a:6d:f1:0a:28:61:ed:99:ac:11:
                    d4:05:57:41:dd:ad:33:d7:09:2c:1e:5f:3f:30:6b:
                    77:ab:e9:1a:c8:fc:00:9b:83:a6:5b:3c:8a:fd:54:
                    b1:e1:cf:45:36:48:52:57:d3:3e:f3:59:2d:67:6c:
                    81:e6:4c:9f:2e:5f:32:e0:04:4c:93:e0:a9:46:10:
                    68:70:21:fb:ae:bd:3b:82:f6:d3:c6:07:4c:e2:ad:
                    bd:3e:87:50:9d:a2:38:e4:68:11:c9:d0:1f:28:33:
                    fc:c7:0a:d5:36:2f:55:25:d8:6e:27:62:65:ce:a0:
                    93:b4:ff:17:e0:70:10:5d:11:43:7e:8c:42:4b:87:
                    31:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C1:D1:05:6C:14:F8:09:64:AC:A0:FB:9D:DB:35:3B:94:38:DE:8A
            X509v3 Authority Key Identifier:
                keyid:DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35382e302f32342d3234203d3e203631373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:25:86:53:fb:72:51:8a:b5:c2:7f:38:69:b0:bc:44:fc:0d:
         12:44:76:e8:65:6a:76:bf:1b:9c:f2:d5:44:d5:73:b5:35:cd:
         12:e9:19:cd:7e:0e:36:08:3f:c2:ea:b8:ac:97:4b:fa:b1:69:
         7b:8c:51:b9:c0:43:4d:df:4b:c3:15:a9:29:b7:2a:6d:99:92:
         28:37:27:ae:fc:e2:31:13:32:35:82:70:68:95:c5:44:35:fe:
         eb:11:97:56:5a:96:39:00:8a:07:3c:36:b2:94:d5:fc:01:79:
         2a:cf:9d:97:5a:96:64:e7:66:9d:8d:46:9c:46:00:5e:96:b7:
         da:fc:34:ac:a0:9f:53:51:aa:2d:d4:60:51:44:f1:15:c5:bf:
         b6:00:b0:bd:f6:4f:d7:82:1e:8f:6d:92:72:39:05:05:ef:11:
         a7:38:7c:94:7c:94:4e:01:2b:57:81:44:4e:24:5b:38:09:90:
         79:4a:6b:16:f8:18:f2:bf:aa:8e:ec:ef:d8:4d:ac:68:51:1f:
         71:df:66:47:57:c6:f0:dd:f6:69:5d:dc:97:4f:d2:32:b4:eb:
         42:31:5d:ce:b6:c4:3c:25:95:13:d8:7e:a2:30:a1:14:55:c5:
         9c:1e:0d:5a:32:30:5e:8f:65:80:2b:f0:42:ec:a8:e1:35:71:
         7f:96:d3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:38 2024 by rpki-client on console-ams.rpki-client.org