Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/3137302e3233312e37322e302f32322d3232203d3e203533313132.roa
File:                     3137302e3233312e37322e302f32322d3232203d3e203533313132.roa (raw, json)
Hash identifier:          QsNwBoE0H0/mDGRCBqxRzPuKbSFijVnOzbRFuMH0TDk=
Subject key identifier:   25:65:DB:F2:22:D7:4E:D9:B9:37:4C:6F:75:42:E8:CB:78:DE:48:60
Certificate issuer:       /CN=74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651
Certificate serial:       63FD69315D205DE7A5CCDC616284E3E4AEDE7069
Authority key identifier: 74:AD:EB:5B:0B:06:9D:AC:2D:94:A5:DD:C5:51:0D:9D:CC:0C:B6:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/3137302e3233312e37322e302f32322d3232203d3e203533313132.roa
Signing time:             Thu 04 Apr 2024 09:41:30 +0000
ROA not before:           Thu 04 Apr 2024 09:36:30 +0000
ROA not after:            Thu 03 Apr 2025 09:41:30 +0000
asID:                     53112
IP address blocks:        170.231.72.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.crl
                          rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:fd:69:31:5d:20:5d:e7:a5:cc:dc:61:62:84:e3:e4:ae:de:70:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651
        Validity
            Not Before: Apr  4 09:36:30 2024 GMT
            Not After : Apr  3 09:41:30 2025 GMT
        Subject: CN=2565DBF222D74ED9B9374C6F7542E8CB78DE4860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0d:aa:4b:86:50:42:21:83:8d:0b:85:84:08:
                    44:2e:0c:86:91:c1:58:79:22:6f:2b:8e:e3:c4:6d:
                    d9:c1:71:cd:9a:dd:f7:0d:c7:94:d9:4f:3c:f8:63:
                    48:b1:8c:40:d1:42:4c:02:a6:33:07:1d:c7:4f:1e:
                    22:16:8e:8c:1d:7c:a6:9e:9c:23:be:59:ed:de:92:
                    23:de:60:2b:a9:d7:f2:37:e8:f7:92:3e:bd:20:66:
                    23:d6:60:c2:6e:85:52:2a:1c:d2:37:b9:0a:1a:32:
                    76:bd:2e:01:c1:67:bc:fa:a9:89:30:50:f5:1d:5a:
                    21:a8:36:14:a3:ec:1f:70:ec:17:d8:26:01:c6:a7:
                    c2:52:b7:72:77:80:0b:81:87:35:3a:97:61:2b:e0:
                    d5:6e:0c:44:3b:71:72:eb:44:86:78:db:c1:17:c7:
                    99:77:16:20:af:1d:1f:56:fe:75:40:dc:f1:cf:7d:
                    34:20:fe:2c:46:87:8e:3b:62:9b:0a:6e:61:d9:fc:
                    54:88:e3:e0:de:00:8e:94:77:e0:18:53:2c:e5:ba:
                    c3:9a:d6:60:2e:01:3c:bb:45:bd:53:c0:7e:74:12:
                    14:11:5e:c8:b2:23:6f:b0:34:18:50:b2:af:84:18:
                    91:92:b9:f1:10:49:01:c5:19:2b:ff:a8:cb:d4:f8:
                    67:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:65:DB:F2:22:D7:4E:D9:B9:37:4C:6F:75:42:E8:CB:78:DE:48:60
            X509v3 Authority Key Identifier:
                keyid:74:AD:EB:5B:0B:06:9D:AC:2D:94:A5:DD:C5:51:0D:9D:CC:0C:B6:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/3137302e3233312e37322e302f32322d3232203d3e203533313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:b8:83:8a:00:aa:0d:39:60:7f:ab:ae:bb:88:93:1b:47:ba:
         bb:aa:55:b7:e1:33:b1:ba:15:4d:6c:ce:cf:35:12:57:54:39:
         30:ed:5d:b1:0f:c0:01:52:d8:ca:4d:8a:b6:d4:78:e7:a3:c7:
         37:ab:c6:58:b4:1d:0f:0d:42:e7:e9:1d:a9:63:28:ff:a9:20:
         1e:cb:a4:76:df:f9:4e:a4:5a:ae:49:03:3c:10:be:05:b4:b1:
         9f:6d:3c:8f:3f:bb:dc:24:d9:69:43:28:ed:dd:af:6d:64:63:
         91:01:0f:40:13:63:68:05:9a:c6:e4:06:8a:f8:58:68:22:ed:
         da:aa:9c:43:a5:e9:03:f0:8d:37:ce:8e:81:88:c0:41:da:00:
         eb:03:7c:c6:e0:5e:9b:64:66:e9:56:2e:78:90:b9:ff:d7:54:
         db:85:96:2f:89:8f:1c:c9:99:43:ed:11:c4:51:c2:96:79:02:
         fd:6d:c6:5f:f9:12:5a:7d:85:56:e6:64:56:c3:7a:e4:b8:fb:
         e1:9c:b1:af:71:0b:c1:fd:f7:c6:08:e5:7c:2d:4f:06:2a:b0:
         8a:b8:b5:42:29:f6:35:3d:4d:f2:e9:24:1e:f2:72:dc:62:84:
         dd:0e:d2:6b:85:6d:f6:30:ea:8f:15:1b:99:04:de:fa:20:91:
         c8:d0:55:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:16 2024 by rpki-client on console-ams.rpki-client.org