Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135302e302f32342d3234203d3e203238313630.roa
File:                     3138372e36322e3135302e302f32342d3234203d3e203238313630.roa (raw, json)
Hash identifier:          dER7UYvDNkIywfVZeY7EF6XJgJqU01ngJACwSRy7H8w=
Subject key identifier:   F3:01:D8:65:FD:EE:5D:DC:C8:93:C7:B4:1A:26:7F:5A:98:49:0E:15
Certificate issuer:       /CN=72D52900C8D2771A558290A7492B6EAD982F6B8E
Certificate serial:       1C54782D5ABD76C5F711956E7C0DE4B6BA31F5EA
Authority key identifier: 72:D5:29:00:C8:D2:77:1A:55:82:90:A7:49:2B:6E:AD:98:2F:6B:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135302e302f32342d3234203d3e203238313630.roa
Signing time:             Sat 16 Nov 2024 14:57:32 +0000
ROA not before:           Sat 16 Nov 2024 14:52:32 +0000
ROA not after:            Sat 15 Nov 2025 14:57:32 +0000
asID:                     28160
IP address blocks:        187.62.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.crl
                          rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:54:78:2d:5a:bd:76:c5:f7:11:95:6e:7c:0d:e4:b6:ba:31:f5:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D52900C8D2771A558290A7492B6EAD982F6B8E
        Validity
            Not Before: Nov 16 14:52:32 2024 GMT
            Not After : Nov 15 14:57:32 2025 GMT
        Subject: CN=F301D865FDEE5DDCC893C7B41A267F5A98490E15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e2:49:f6:8d:cf:83:59:ee:68:d8:75:21:84:
                    93:d6:34:74:fe:1a:08:d3:f6:41:6d:88:04:bc:0e:
                    0f:6e:ce:58:9b:14:62:ea:ed:0d:a7:e4:6c:50:e9:
                    d2:4e:ef:3a:87:83:94:63:5d:58:75:5b:0f:52:a5:
                    4c:f3:4c:6b:e1:63:16:f4:47:97:77:38:90:64:95:
                    21:8e:e2:26:39:02:4f:9a:1e:a1:c0:44:b6:63:26:
                    56:b7:1c:4f:3d:65:f4:f3:bf:42:76:3b:78:9e:41:
                    82:ba:34:d1:fd:c4:86:ac:64:a4:50:00:65:0b:18:
                    b0:59:e8:b8:02:8c:04:a9:e1:17:42:a4:59:af:55:
                    c3:2d:90:63:d5:63:2b:05:2a:6a:ce:69:8d:95:52:
                    f9:fd:bb:98:ad:3a:a9:86:dd:e0:8d:dc:1c:40:a9:
                    5e:0d:0e:7e:8b:64:0b:8f:6d:db:55:ac:ef:ad:8c:
                    13:6a:e5:01:1b:ad:5f:29:7c:bc:bb:fa:08:07:93:
                    03:2e:ea:e1:03:23:16:4f:c3:9b:6c:30:2a:af:75:
                    a7:4f:9e:b4:f3:7d:31:0a:8c:0a:07:4e:d5:9a:c9:
                    64:37:60:f5:f9:f1:b9:ff:ed:af:53:c4:90:e1:2c:
                    80:91:45:bb:63:d7:ff:a6:2d:3b:ab:12:1f:6a:b5:
                    5b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:01:D8:65:FD:EE:5D:DC:C8:93:C7:B4:1A:26:7F:5A:98:49:0E:15
            X509v3 Authority Key Identifier:
                keyid:72:D5:29:00:C8:D2:77:1A:55:82:90:A7:49:2B:6E:AD:98:2F:6B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135302e302f32342d3234203d3e203238313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:bd:83:e7:4e:fd:0f:a3:60:e2:be:7e:51:d4:79:30:a9:71:
         70:27:36:ea:08:76:7e:23:27:1b:7c:cb:01:b1:7b:bc:ca:4b:
         95:4a:9c:ce:4d:06:6d:81:00:57:37:10:ac:d3:f4:a7:1e:96:
         b9:6b:c9:3d:89:9e:9d:96:79:6f:28:c4:aa:3d:6c:e7:ab:e5:
         0b:56:06:a8:23:af:e4:bb:47:f0:2f:32:10:44:d5:ad:ab:fd:
         9d:f7:b7:c0:4a:27:7b:f1:0b:b4:6b:01:94:1b:c8:1f:07:62:
         b6:fc:3b:4a:9d:0a:70:7c:54:5f:60:89:4e:ba:0b:b5:bc:fa:
         f1:64:3b:15:91:82:eb:c3:29:1f:8a:4e:7a:03:39:8d:b2:83:
         9d:c6:c3:32:26:92:95:90:bf:89:84:66:93:43:c5:c5:ea:ff:
         41:67:a9:9c:82:65:bf:18:94:75:f8:02:d8:c4:aa:87:10:c1:
         bc:9f:17:3c:e2:2a:10:f8:8b:be:4b:59:2a:e9:90:c5:3e:9c:
         c7:79:e5:a7:a8:62:f5:10:3a:d5:24:61:b2:8a:6f:a2:93:1c:
         2a:6f:02:ee:4e:2e:9d:37:50:5f:71:c9:08:95:38:e9:2e:50:
         ae:23:8c:b7:f5:8a:9e:f1:4c:c9:7b:a4:3d:48:08:1d:a7:2b:
         d1:67:6f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:42 2024 by rpki-client on console-fra.rpki-client.org