Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135322e302f32322d3232203d3e203238313630.roa
File:                     3138372e36322e3135322e302f32322d3232203d3e203238313630.roa (raw, json)
Hash identifier:          wg2lU4LauxbPslqPZ9Z7+rb0cVauC7mbx9TgG0ShoGo=
Subject key identifier:   13:5C:A9:64:83:18:91:E2:70:1A:AA:2C:62:C5:01:CE:A8:AE:4D:A3
Certificate issuer:       /CN=72D52900C8D2771A558290A7492B6EAD982F6B8E
Certificate serial:       333C2FC46D61E2AB603400D976B06BADC5163C4E
Authority key identifier: 72:D5:29:00:C8:D2:77:1A:55:82:90:A7:49:2B:6E:AD:98:2F:6B:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135322e302f32322d3232203d3e203238313630.roa
Signing time:             Thu 04 Apr 2024 07:55:36 +0000
ROA not before:           Thu 04 Apr 2024 07:50:36 +0000
ROA not after:            Thu 03 Apr 2025 07:55:36 +0000
asID:                     28160
IP address blocks:        187.62.152.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.crl
                          rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 01:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:3c:2f:c4:6d:61:e2:ab:60:34:00:d9:76:b0:6b:ad:c5:16:3c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D52900C8D2771A558290A7492B6EAD982F6B8E
        Validity
            Not Before: Apr  4 07:50:36 2024 GMT
            Not After : Apr  3 07:55:36 2025 GMT
        Subject: CN=135CA964831891E2701AAA2C62C501CEA8AE4DA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cd:8e:a7:0e:39:11:7f:03:33:00:d4:a1:8a:
                    70:c4:76:c3:61:c0:72:7d:ea:ec:4b:93:a2:7b:ca:
                    f7:e5:06:f8:98:16:b4:e7:a9:35:c7:97:e0:81:81:
                    c8:01:fa:1e:d5:e1:01:fe:79:93:ab:d3:f6:ea:3f:
                    2e:9c:56:a6:07:5b:6e:ae:8b:d8:a9:a3:7f:27:3b:
                    94:16:43:6a:c2:f8:25:84:2c:84:9e:ff:f3:d9:96:
                    05:e3:58:77:7c:3e:3d:92:15:35:d5:fb:74:36:74:
                    80:11:dd:d6:78:94:de:e8:7b:af:89:51:07:10:46:
                    8d:cb:83:37:d2:49:07:de:ca:32:54:fa:01:24:53:
                    9a:16:bb:d8:b1:4b:76:48:ac:47:ee:48:1b:cc:49:
                    5d:a3:71:59:f8:19:a8:24:62:82:eb:c2:2d:dd:32:
                    1a:56:3d:c5:d1:ad:65:61:9d:b9:35:79:f7:58:a2:
                    06:09:8d:88:74:b7:ed:3f:1e:3a:26:16:bf:b5:a4:
                    5a:cc:22:f3:3d:ff:ff:85:f7:c4:15:52:c9:f3:16:
                    a3:c5:3e:cb:18:81:d8:d8:13:38:57:cc:5f:3d:6b:
                    28:ac:32:b9:6b:5b:2a:89:f6:19:64:c4:dd:1c:92:
                    30:0e:ef:d1:a8:84:71:08:22:25:cc:e3:d3:0b:8e:
                    89:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5C:A9:64:83:18:91:E2:70:1A:AA:2C:62:C5:01:CE:A8:AE:4D:A3
            X509v3 Authority Key Identifier:
                keyid:72:D5:29:00:C8:D2:77:1A:55:82:90:A7:49:2B:6E:AD:98:2F:6B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135322e302f32322d3232203d3e203238313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:c9:f7:fa:90:75:b3:83:0b:25:a2:1c:77:9d:d4:ce:8f:b2:
         9b:98:98:6a:c3:54:35:9c:fa:67:fb:84:f3:1f:b2:f7:74:6e:
         8a:50:c2:1f:49:42:2c:5f:90:30:ae:f6:8e:8e:76:fd:88:a0:
         30:06:10:d6:07:de:66:74:34:9e:fe:f5:70:20:46:6b:09:40:
         c4:bb:b7:5e:1f:04:12:fd:47:9b:97:0e:4f:eb:ba:4c:03:ba:
         f4:a7:ba:f0:59:f9:57:8b:6c:34:b7:6e:5d:15:90:56:56:bd:
         8e:a6:3e:95:5f:44:8a:f2:15:41:d7:fc:35:5e:32:6b:00:a9:
         df:94:83:fd:7b:86:f8:3b:0d:8f:9c:33:a9:ed:a0:27:9c:d7:
         c7:a8:8a:ef:be:0d:84:f9:c0:3a:e9:59:46:fb:45:2b:76:88:
         f9:2c:27:42:4b:48:60:3f:35:00:17:79:7a:14:08:c9:4f:9f:
         b1:ca:c3:47:b3:36:2b:81:e2:64:05:99:af:d9:24:d9:a2:00:
         1a:da:ed:8d:0b:23:f7:37:61:9a:a1:bf:a5:62:2d:df:57:7f:
         19:61:4d:c1:7c:6b:c2:ef:13:f5:78:e6:ec:90:8e:b9:0d:fa:
         e6:79:1f:80:7d:62:fd:58:b4:4d:28:a1:5c:88:29:e9:60:5a:
         f5:e6:84:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:11:01 2024 by rpki-client on console-fra.rpki-client.org