Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3134392e302f32342d3234203d3e203238313630.roa
File:                     3138372e36322e3134392e302f32342d3234203d3e203238313630.roa (raw, json)
Hash identifier:          saHP5imod+U1WhlNPhvW9VFwhgeM3b+9NLIXH5LtXKE=
Subject key identifier:   31:04:64:D9:EF:A4:5D:BA:68:41:C4:FB:C1:98:CF:50:5D:3D:58:DC
Certificate issuer:       /CN=72D52900C8D2771A558290A7492B6EAD982F6B8E
Certificate serial:       7DA21CB138EEA048C8C66284CF76ED6072365C88
Authority key identifier: 72:D5:29:00:C8:D2:77:1A:55:82:90:A7:49:2B:6E:AD:98:2F:6B:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3134392e302f32342d3234203d3e203238313630.roa
Signing time:             Sat 16 Nov 2024 14:57:32 +0000
ROA not before:           Sat 16 Nov 2024 14:52:32 +0000
ROA not after:            Sat 15 Nov 2025 14:57:32 +0000
asID:                     28160
IP address blocks:        187.62.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.crl
                          rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a2:1c:b1:38:ee:a0:48:c8:c6:62:84:cf:76:ed:60:72:36:5c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D52900C8D2771A558290A7492B6EAD982F6B8E
        Validity
            Not Before: Nov 16 14:52:32 2024 GMT
            Not After : Nov 15 14:57:32 2025 GMT
        Subject: CN=310464D9EFA45DBA6841C4FBC198CF505D3D58DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:80:a9:d7:04:d2:dd:e5:6f:75:67:79:b8:0a:
                    77:6f:f6:2f:de:f9:05:04:51:d6:d0:21:c2:39:64:
                    3f:0b:0c:18:36:a9:00:5a:f9:cb:27:f7:ee:bb:b9:
                    ed:0c:ee:63:0c:71:ce:70:3e:66:07:36:34:cd:e4:
                    ac:b3:e5:9a:24:3d:f0:07:04:96:93:b6:b8:13:39:
                    39:92:eb:4b:a0:46:6d:53:cb:8c:0b:cf:ef:1b:04:
                    ab:d0:06:9f:cb:74:6b:36:08:4a:85:ea:a7:a0:fd:
                    f7:38:b2:37:b1:f4:06:e6:3f:39:0d:52:cb:9d:88:
                    63:12:6e:80:c4:5a:8a:9c:75:a5:2b:8a:d8:3c:89:
                    06:6f:c7:d5:ac:e1:8c:c6:2b:b6:ee:8a:f9:3e:92:
                    65:66:e8:53:1d:7f:df:fa:f4:54:48:0d:6c:ce:2b:
                    84:92:a9:aa:17:4e:52:6d:ab:0d:6c:95:05:1b:43:
                    35:d0:03:8c:a6:0a:97:60:d4:da:af:23:da:ef:88:
                    49:81:f8:d5:be:cd:59:dc:40:24:da:e7:8c:e0:06:
                    a8:b5:b8:be:dd:f0:a5:53:ad:8c:e7:c3:d2:bc:cb:
                    0a:eb:38:cc:96:3b:65:2f:26:42:db:75:dc:7c:98:
                    33:05:ac:10:db:58:f7:16:ae:b4:cb:0e:e8:af:8e:
                    f9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:04:64:D9:EF:A4:5D:BA:68:41:C4:FB:C1:98:CF:50:5D:3D:58:DC
            X509v3 Authority Key Identifier:
                keyid:72:D5:29:00:C8:D2:77:1A:55:82:90:A7:49:2B:6E:AD:98:2F:6B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3134392e302f32342d3234203d3e203238313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:37:24:4c:53:19:27:fe:63:18:ca:d4:47:40:fb:f3:eb:a1:
         ed:f5:4f:a4:82:39:55:3f:00:c6:b9:cf:ec:71:2b:5d:0d:3b:
         c9:8b:25:33:71:cf:a3:67:14:79:6e:35:33:fa:93:96:22:c7:
         30:0b:4f:2f:09:c2:ed:f2:0d:e2:26:c5:e1:be:40:2b:ab:5e:
         41:bd:70:c1:24:cf:2b:9b:64:50:52:25:15:89:5f:27:18:cb:
         b2:f3:bb:e3:de:bf:29:5f:24:e8:f1:2b:2a:00:5b:9c:38:a7:
         f6:7c:42:69:8c:5b:2f:da:3b:a3:73:2e:a6:7b:cf:4d:23:96:
         57:8c:c9:a2:01:a2:3d:11:c0:a3:85:09:ea:ef:14:79:d8:f9:
         d8:9e:22:c8:c4:61:b0:d4:df:1a:7a:78:bf:cd:04:f2:dc:85:
         f2:03:78:37:00:86:8a:57:43:9d:97:d3:a0:3e:3d:e1:a2:bf:
         65:bc:07:b0:c4:5a:4d:49:75:61:11:ad:4a:5f:07:1a:64:3d:
         a0:15:c4:7a:3f:64:46:9f:ad:fe:b2:c0:0b:89:b9:d4:4f:6b:
         90:94:f3:24:0e:15:3b:03:29:d4:fd:f2:fe:e4:1b:30:a4:02:
         56:7a:1c:44:a9:a6:51:b7:3f:f9:f2:99:47:5b:70:00:1b:3f:
         23:9a:3b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:03 2024 by rpki-client on console-ams.rpki-client.org