Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35392e302f32342d3234203d3e203631373238.roa
File:                     3133312e37322e35392e302f32342d3234203d3e203631373238.roa (raw, json)
Hash identifier:          o/+s73j5BBjMYYkoISdGSCnCWZn3NvJP76/OyV1OVSk=
Subject key identifier:   A2:41:BE:FA:96:3D:5D:D9:D5:33:2F:A0:F5:40:BD:70:45:12:39:17
Certificate issuer:       /CN=DA065D6ABFEB300D2C42384FE35CBF5F39D05F13
Certificate serial:       0B98D76FD127A196B4DA2007E39FFBCE1D4632A9
Authority key identifier: DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35392e302f32342d3234203d3e203631373238.roa
Signing time:             Thu 16 May 2024 21:09:50 +0000
ROA not before:           Thu 16 May 2024 21:04:50 +0000
ROA not after:            Thu 15 May 2025 21:09:50 +0000
asID:                     61728
IP address blocks:        131.72.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.crl
                          rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:98:d7:6f:d1:27:a1:96:b4:da:20:07:e3:9f:fb:ce:1d:46:32:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA065D6ABFEB300D2C42384FE35CBF5F39D05F13
        Validity
            Not Before: May 16 21:04:50 2024 GMT
            Not After : May 15 21:09:50 2025 GMT
        Subject: CN=A241BEFA963D5DD9D5332FA0F540BD7045123917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4e:8f:54:87:f9:71:6a:51:b4:09:47:de:b4:
                    8c:dc:1e:5c:03:f4:e5:d2:ba:4f:a1:ed:82:65:61:
                    c3:0d:eb:54:f3:87:c8:43:9c:bd:fe:d5:76:ea:07:
                    52:b2:98:c9:03:59:e3:d1:96:a5:91:8d:8b:f0:78:
                    c0:3b:4d:11:0c:87:2e:eb:dc:32:17:6e:5e:30:fb:
                    e5:cf:cb:d2:8a:53:fa:9c:cb:33:ea:54:af:e0:7f:
                    0e:0d:d6:5f:eb:3c:48:5d:0f:d2:07:76:ec:38:11:
                    06:3e:31:42:d0:00:99:01:8f:1d:e8:11:42:41:30:
                    1e:ce:d2:17:59:bc:eb:1c:e7:7a:e6:5b:8f:be:83:
                    f3:05:52:a3:e7:92:36:75:20:8e:70:3d:a6:e2:e7:
                    aa:77:ab:c8:ca:c6:fd:05:63:4f:d1:1e:fd:8d:2b:
                    94:54:39:d3:34:ba:7f:53:63:3e:f4:86:d2:46:71:
                    18:c8:bd:51:9e:b4:f7:7c:62:be:5e:ad:4c:53:04:
                    ea:d4:e6:60:a1:98:6a:7c:7e:c9:a4:a8:97:5e:e4:
                    19:0d:0a:1e:2b:bf:8d:58:26:5f:f3:f8:be:ee:bd:
                    47:0e:d0:bd:9d:07:82:b5:a4:08:56:af:29:03:19:
                    e6:be:27:93:60:44:c6:51:41:59:45:a7:25:f1:1b:
                    4c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:41:BE:FA:96:3D:5D:D9:D5:33:2F:A0:F5:40:BD:70:45:12:39:17
            X509v3 Authority Key Identifier:
                keyid:DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35392e302f32342d3234203d3e203631373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:0a:48:4e:f9:68:45:a1:f8:ed:65:64:3d:65:07:62:bc:d7:
         cb:7d:22:3c:6e:fd:c6:ac:c8:94:cb:50:48:3b:70:f4:77:30:
         41:d1:55:37:ad:89:f1:8e:0e:e7:fa:5b:d5:6e:4a:4d:de:3c:
         a0:59:35:b1:bb:36:8d:d3:0f:d6:84:97:c5:a1:2a:7a:87:05:
         2c:a4:ec:8b:76:bf:40:de:4d:f7:81:55:77:f1:7d:25:5b:ed:
         82:13:18:2d:87:6a:8e:c1:77:03:f3:72:ca:56:15:14:ba:44:
         01:70:1b:d5:96:cf:84:74:e1:12:60:5d:b4:1f:4b:68:d3:80:
         c5:08:02:81:6b:d5:22:81:d7:96:d3:37:86:bc:bd:51:b2:5f:
         39:bd:1c:a4:f7:e4:6a:2c:90:c8:f3:57:29:b5:16:c4:f5:33:
         49:6c:ca:63:a7:31:21:e9:54:4b:13:6d:b0:b3:13:d8:19:03:
         a9:7d:55:5e:f1:dd:0c:a8:91:b1:db:b9:88:fa:59:53:26:10:
         b1:ea:af:cf:4e:df:1e:c6:0a:d8:54:18:68:e3:9d:df:de:a8:
         04:82:5c:0e:1c:ba:82:51:00:6b:cb:64:30:5f:70:6a:68:65:
         79:e4:5e:79:2d:9a:bf:86:b6:3e:dd:83:73:54:fa:63:2c:fd:
         d9:69:90:bc
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUC5jXb9EnoZa02iAH45/7zh1GMqkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREEwNjVENkFCRkVCMzAwRDJDNDIzODRGRTM1Q0JGNUYz
OUQwNUYxMzAeFw0yNDA1MTYyMTA0NTBaFw0yNTA1MTUyMTA5NTBaMDMxMTAvBgNV
BAMTKEEyNDFCRUZBOTYzRDVERDlENTMzMkZBMEY1NDBCRDcwNDUxMjM5MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0To9Uh/lxalG0CUfetIzcHlwD
9OXSuk+h7YJlYcMN61Tzh8hDnL3+1XbqB1KymMkDWePRlqWRjYvweMA7TREMhy7r
3DIXbl4w++XPy9KKU/qcyzPqVK/gfw4N1l/rPEhdD9IHduw4EQY+MULQAJkBjx3o
EUJBMB7O0hdZvOsc53rmW4++g/MFUqPnkjZ1II5wPabi56p3q8jKxv0FY0/RHv2N
K5RUOdM0un9TYz70htJGcRjIvVGetPd8Yr5erUxTBOrU5mChmGp8fsmkqJde5BkN
Ch4rv41YJl/z+L7uvUcO0L2dB4K1pAhWrykDGea+J5NgRMZRQVlFpyXxG0z9AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUokG++pY9XdnVMy+g9UC9cEUSORcwHwYDVR0j
BBgwFoAU2gZdar/rMA0sQjhP41y/XznQXxMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGRuNmtTZkpaSHU0ekJieHNRQkxCMmQ4QmY3cUx6cHBjRzlBM2RSWXdv
MUEvMC9EQTA2NUQ2QUJGRUIzMDBEMkM0MjM4NEZFMzVDQkY1RjM5RDA1RjEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBMDY1RDZBQkZFQjMwMEQy
QzQyMzg0RkUzNUNCRjVGMzlEMDVGMTMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RkbjZrU2ZKWkh1NHpCYnhzUUJMQjJkOEJmN3FMenBwY0c5QTNkUll3bzFBLzAv
MzEzMzMxMmUzNzMyMmUzNTM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM3
MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAINIOzANBgkqhkiG9w0BAQsFAAOCAQEADwpITvloRaH4
7WVkPWUHYrzXy30iPG79xqzIlMtQSDtw9HcwQdFVN62J8Y4O5/pb1W5KTd48oFk1
sbs2jdMP1oSXxaEqeocFLKTsi3a/QN5N94FVd/F9JVvtghMYLYdqjsF3A/NyylYV
FLpEAXAb1ZbPhHThEmBdtB9LaNOAxQgCgWvVIoHXltM3hry9UbJfOb0cpPfkaiyQ
yPNXKbUWxPUzSWzKY6cxIelUSxNtsLMT2BkDqX1VXvHdDKiRsdu5iPpZUyYQseqv
z07fHsYK2FQYaOOd396oBIJcDhy6glEAa8tkMF9wamhleeReeS2av4a2Pt2Dc1T6
Yyz92WmQvA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:38 2024 by rpki-client on console-ams.rpki-client.org