Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/37322e34342e31362e302f32332d3233203d3e20323636313635.roa
File:                     37322e34342e31362e302f32332d3233203d3e20323636313635.roa (raw, json)
Hash identifier:          l11K0+QnjVQRDWOH3LkI7ZSwlGiD8DpgvKtvYkF5mDU=
Subject key identifier:   1C:79:5F:9C:35:A6:72:58:C8:33:3C:2B:C3:FD:07:CF:CB:B2:88:C1
Certificate issuer:       /CN=103266039FE0E42654222D6D1D326D5613C32C2E
Certificate serial:       602F07F79985DB03FCFCB0D1CB758EC15CD2AE43
Authority key identifier: 10:32:66:03:9F:E0:E4:26:54:22:2D:6D:1D:32:6D:56:13:C3:2C:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103266039FE0E42654222D6D1D326D5613C32C2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/37322e34342e31362e302f32332d3233203d3e20323636313635.roa
Signing time:             Wed 31 Jul 2024 02:02:58 +0000
ROA not before:           Wed 31 Jul 2024 01:57:58 +0000
ROA not after:            Wed 30 Jul 2025 02:02:58 +0000
asID:                     266165
IP address blocks:        72.44.16.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/103266039FE0E42654222D6D1D326D5613C32C2E.crl
                          rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/103266039FE0E42654222D6D1D326D5613C32C2E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103266039FE0E42654222D6D1D326D5613C32C2E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:2f:07:f7:99:85:db:03:fc:fc:b0:d1:cb:75:8e:c1:5c:d2:ae:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103266039FE0E42654222D6D1D326D5613C32C2E
        Validity
            Not Before: Jul 31 01:57:58 2024 GMT
            Not After : Jul 30 02:02:58 2025 GMT
        Subject: CN=1C795F9C35A67258C8333C2BC3FD07CFCBB288C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:d1:c8:7e:bb:7f:4a:0c:eb:80:fa:e3:2d:b9:
                    cf:51:fd:58:47:92:d1:a9:c7:75:82:f2:83:83:0d:
                    45:e4:fc:9b:03:d8:d8:64:da:4f:b5:df:86:d9:d0:
                    6d:c4:a0:8a:01:8b:96:d0:aa:ba:0e:15:84:c4:dc:
                    a3:bc:4d:19:d5:93:d5:a2:01:d6:60:fe:4c:cc:2c:
                    27:54:35:03:e3:8f:f5:5c:a0:35:cd:f2:98:51:64:
                    ee:cc:c5:e5:c5:2c:aa:02:d1:ee:9a:9e:0c:aa:bb:
                    3b:c6:2c:d2:3f:95:2c:e1:66:e8:a9:ee:af:23:a2:
                    1c:c6:74:25:34:15:3d:8e:ce:36:83:a8:ce:ac:c6:
                    b6:b9:65:42:c6:0b:1d:19:c0:25:01:7b:3b:61:3c:
                    e9:43:8e:bd:a1:d9:8b:12:44:38:00:4d:a3:3f:10:
                    24:d4:69:12:5c:c6:51:d8:48:33:46:14:bc:84:fa:
                    03:0e:8f:ac:cb:fd:cd:3a:0b:5c:a7:58:cb:6c:4a:
                    cb:7c:05:60:df:17:0f:06:46:65:49:43:e1:41:d3:
                    c7:1d:51:a8:a9:c9:d1:fc:5a:c9:05:60:71:ff:b0:
                    fb:b3:8e:b8:ec:aa:12:31:e5:9c:7e:02:08:4d:f6:
                    63:a2:84:52:7e:07:db:46:8c:1b:d1:89:37:0f:3a:
                    51:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:79:5F:9C:35:A6:72:58:C8:33:3C:2B:C3:FD:07:CF:CB:B2:88:C1
            X509v3 Authority Key Identifier:
                keyid:10:32:66:03:9F:E0:E4:26:54:22:2D:6D:1D:32:6D:56:13:C3:2C:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/103266039FE0E42654222D6D1D326D5613C32C2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103266039FE0E42654222D6D1D326D5613C32C2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/37322e34342e31362e302f32332d3233203d3e20323636313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.44.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:e1:24:76:b5:17:24:12:41:b0:a9:06:1e:68:f5:27:6d:19:
         b4:74:13:63:0f:00:16:db:a9:ff:0c:e3:c3:0c:cd:1f:87:4c:
         2d:a8:10:c6:0c:7c:51:a0:27:74:61:13:71:bc:77:24:2e:0d:
         d8:5e:1a:5e:88:6c:50:39:f6:b9:23:1b:01:ca:e7:5b:32:9b:
         2b:36:95:4f:2b:f9:4e:30:d2:fe:ab:b1:a0:c5:cd:fd:2c:41:
         e2:76:03:92:1d:79:76:2d:8e:4e:57:4e:82:c0:36:4a:1c:f3:
         8b:a9:3f:76:7c:c9:01:0e:1e:c0:03:6d:f5:aa:b5:7a:c7:fc:
         1a:ae:c7:50:7a:f5:4f:0f:41:53:24:fe:46:4e:27:12:21:d4:
         31:bb:71:ed:2e:b6:b1:c3:13:47:ec:06:44:ac:4c:dc:6a:34:
         05:d9:1b:99:ec:a0:bd:6e:b4:e9:93:3e:bc:3b:bc:75:f3:a9:
         19:12:c4:e4:e5:7d:01:62:6e:a2:34:db:d0:29:ac:c5:bb:aa:
         22:52:d4:91:b0:d7:4c:da:e6:34:ef:21:f1:73:3c:17:7e:14:
         e6:1b:7a:e7:51:84:a4:02:ef:4e:09:af:74:5e:21:31:39:3b:
         3d:52:89:13:41:9c:57:a7:b9:1d:97:d7:70:25:5c:75:92:92:
         e7:03:4c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:41 2024 by rpki-client on console-fra.rpki-client.org