Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/3137372e37332e37322e302f32322d3232203d3e20323632353636.roa
File:                     3137372e37332e37322e302f32322d3232203d3e20323632353636.roa (raw, json)
Hash identifier:          rybfZVI6xhFszPKJW6jI+X7R38BuvCtVpAz+52EYgIk=
Subject key identifier:   B1:BF:DF:C1:DD:FD:37:D0:48:4F:04:1D:BF:6D:DC:7D:B1:23:20:92
Certificate issuer:       /CN=C8232E7ADA2149C400868144F5DA83930BC26309
Certificate serial:       284395A8C9F50334823D9E8F6D7C8C135105F452
Authority key identifier: C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/3137372e37332e37322e302f32322d3232203d3e20323632353636.roa
Signing time:             Thu 25 Apr 2024 17:30:02 +0000
ROA not before:           Thu 25 Apr 2024 17:25:02 +0000
ROA not after:            Thu 24 Apr 2025 17:30:02 +0000
asID:                     262566
IP address blocks:        177.73.72.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.crl
                          rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 05:56:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:43:95:a8:c9:f5:03:34:82:3d:9e:8f:6d:7c:8c:13:51:05:f4:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8232E7ADA2149C400868144F5DA83930BC26309
        Validity
            Not Before: Apr 25 17:25:02 2024 GMT
            Not After : Apr 24 17:30:02 2025 GMT
        Subject: CN=B1BFDFC1DDFD37D0484F041DBF6DDC7DB1232092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:20:71:c7:25:c6:9a:25:37:0f:66:a6:ea:10:
                    f9:82:59:48:28:b9:dc:0d:aa:c3:c5:a9:55:49:c9:
                    c6:07:3e:54:bf:ff:7f:bb:32:bf:49:e9:73:44:44:
                    3a:75:32:b5:b3:8f:9c:31:01:fa:e9:cd:c7:cc:dd:
                    38:cf:80:c0:ff:2f:b9:0d:02:c1:5f:65:ef:fb:26:
                    6c:29:aa:b9:6d:10:d9:a9:d9:9d:9a:0d:de:cd:07:
                    f8:d0:63:4e:ee:d8:f8:19:a5:d2:78:9f:82:c9:57:
                    db:4e:18:c7:d3:de:8a:30:65:cb:81:51:b5:0c:5f:
                    53:0a:3f:0c:87:a9:a9:20:2c:19:08:7f:ea:e3:4e:
                    65:a7:e7:04:cd:61:f1:23:40:ac:9e:a5:8a:24:cc:
                    79:67:a8:0e:60:84:3f:d5:ad:d5:5f:41:c0:39:8c:
                    b0:4a:f0:74:34:14:77:f2:72:d7:d8:ab:c5:da:ca:
                    11:7e:f3:a3:95:fe:8b:4b:40:f0:2f:0a:5a:8b:43:
                    41:6e:61:1e:50:85:14:1f:3c:04:f2:58:14:6d:47:
                    2e:09:b6:b3:9b:b7:5c:ae:2c:ad:6c:d8:51:2b:eb:
                    74:fe:49:8f:94:5f:e3:ac:c1:a3:89:c7:cf:12:d7:
                    0d:cf:c8:a5:40:b9:0f:7b:1c:28:78:d0:82:54:fe:
                    50:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BF:DF:C1:DD:FD:37:D0:48:4F:04:1D:BF:6D:DC:7D:B1:23:20:92
            X509v3 Authority Key Identifier:
                keyid:C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/3137372e37332e37322e302f32322d3232203d3e20323632353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:dc:63:10:f2:26:c5:ae:bd:a5:db:0f:bf:99:c2:3e:05:d6:
         18:07:3a:8d:66:1c:f8:cf:da:ee:50:f0:31:80:17:48:f5:9f:
         03:f0:5a:04:09:ef:bb:39:3e:52:07:62:17:28:40:84:6c:6a:
         c5:63:60:4e:a1:c9:d7:96:a2:98:e8:13:24:bf:ae:21:bf:61:
         17:f3:48:43:52:18:88:5e:d5:e2:e7:49:30:97:c5:68:b0:9c:
         c9:a7:3e:3a:49:e7:5d:82:dc:4c:be:7a:5c:58:39:06:fa:90:
         59:15:f2:d9:4e:a2:f8:e5:bf:e5:a2:d7:92:f2:d8:44:71:d8:
         25:25:5a:95:b1:7a:e6:17:bb:61:f3:b4:c6:ce:eb:83:5b:3f:
         e8:09:4e:57:0e:e9:a5:6e:94:fc:ac:12:4b:e5:43:ba:43:ce:
         f4:91:65:a3:57:31:c6:88:75:a1:30:49:b0:bf:a7:6e:09:bf:
         19:38:d1:d4:76:c2:b7:c1:bd:7e:06:32:ea:a4:1a:f8:6e:1b:
         be:6c:b3:7c:fa:ad:f0:13:74:01:b2:0d:15:cc:20:9d:7e:43:
         ce:09:04:0b:5c:65:2d:61:58:65:5d:9e:93:e4:c6:fd:4f:05:
         1a:cf:44:b1:5c:58:1a:ab:b7:20:34:e1:f2:18:d0:b3:a7:78:
         e8:69:6f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:09 2024 by rpki-client on console-fra.rpki-client.org