Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135322e302f32322d3232203d3e203238313630.roa
File:                     3138372e36322e3135322e302f32322d3232203d3e203238313630.roa (raw, json)
Hash identifier:          kf4ia+xONbglle6gbdvZRf1BfLf97XDoUEAInKF9gAE=
Subject key identifier:   6C:A0:A3:52:87:72:FF:B4:32:9F:F9:35:81:F3:C1:7F:E2:AA:30:9B
Certificate issuer:       /CN=72D52900C8D2771A558290A7492B6EAD982F6B8E
Certificate serial:       259DC3C8BE504735AFB7109139C528FF043E700D
Authority key identifier: 72:D5:29:00:C8:D2:77:1A:55:82:90:A7:49:2B:6E:AD:98:2F:6B:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135322e302f32322d3232203d3e203238313630.roa
Signing time:             Sat 16 Nov 2024 14:59:28 +0000
ROA not before:           Sat 16 Nov 2024 14:54:28 +0000
ROA not after:            Sat 15 Nov 2025 14:59:28 +0000
asID:                     28160
IP address blocks:        187.62.152.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.crl
                          rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:9d:c3:c8:be:50:47:35:af:b7:10:91:39:c5:28:ff:04:3e:70:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D52900C8D2771A558290A7492B6EAD982F6B8E
        Validity
            Not Before: Nov 16 14:54:28 2024 GMT
            Not After : Nov 15 14:59:28 2025 GMT
        Subject: CN=6CA0A3528772FFB4329FF93581F3C17FE2AA309B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:af:14:23:16:65:cc:3e:0d:16:0f:8f:02:57:
                    7a:51:3a:3a:0d:d0:30:fa:67:c1:39:af:db:cb:5a:
                    8e:60:ec:dd:42:bf:eb:be:b7:57:77:66:f2:25:ad:
                    bf:ca:3f:ec:7d:4d:7e:85:20:30:c3:ed:8c:58:3f:
                    6d:d3:fd:20:e4:21:51:41:02:d6:1a:10:ff:cf:bf:
                    fd:2d:b9:8a:40:c0:76:3a:d2:bc:a4:47:b0:28:43:
                    c6:18:9b:e0:9c:a8:e8:9e:ed:5a:a6:a1:c8:2f:83:
                    8d:a4:09:d0:6a:40:59:a6:80:9b:31:37:34:58:2c:
                    47:b7:ce:30:a9:2e:f6:b7:7e:b3:72:d9:a0:22:7f:
                    e2:1d:3e:cf:00:e1:f4:1e:e4:b5:ec:5a:dd:c7:f0:
                    97:c7:0a:b4:a8:6c:43:dd:67:6a:7c:fc:ae:d2:75:
                    e2:6a:7f:e4:c5:b0:9a:90:a6:a4:a6:5d:40:57:8c:
                    e9:8d:4c:b2:1a:54:a4:b7:42:5b:d7:80:3b:c6:fc:
                    c3:05:a7:bb:14:82:c8:ce:b5:a5:01:48:f8:63:22:
                    28:59:d6:4d:e2:24:98:a2:30:a2:a1:39:6c:03:15:
                    f2:b9:48:28:f9:25:8b:a8:27:a7:0b:2d:8a:ff:81:
                    21:28:b6:e2:fc:29:a2:f9:77:fa:13:6d:36:e8:bc:
                    a1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A0:A3:52:87:72:FF:B4:32:9F:F9:35:81:F3:C1:7F:E2:AA:30:9B
            X509v3 Authority Key Identifier:
                keyid:72:D5:29:00:C8:D2:77:1A:55:82:90:A7:49:2B:6E:AD:98:2F:6B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135322e302f32322d3232203d3e203238313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:1c:c6:a6:35:ff:a8:c2:5f:7f:cc:75:15:fc:19:48:45:28:
         4c:56:35:df:ed:a6:8c:79:9d:21:1a:8b:53:2c:25:82:a7:b1:
         6b:f5:61:21:35:54:0e:3e:f5:91:db:8f:49:da:23:12:98:75:
         76:f9:03:a6:8f:1e:bf:c8:45:89:25:a1:84:50:9d:5b:3f:e5:
         14:8e:22:4d:d6:d6:84:3f:a3:af:cb:29:e5:7e:1b:99:c2:8e:
         df:7f:79:d9:6e:42:2b:d9:9f:41:cc:d7:76:7b:3e:c3:90:7d:
         fa:1b:e1:e3:42:75:10:19:95:a2:a7:94:82:4a:5e:47:1c:12:
         d7:0a:a0:fc:8f:a1:35:19:7a:99:b5:9a:2d:4a:93:d8:b4:be:
         40:d8:19:bf:39:e0:af:3a:3a:f6:50:94:d7:5b:98:a2:21:1f:
         f3:86:64:9f:53:4c:c9:fe:11:f8:96:01:d2:99:7e:55:23:3b:
         df:3b:92:7f:f9:a5:53:6d:2a:75:8d:0c:13:bb:2e:60:82:64:
         4e:5f:4a:17:fd:c0:b5:2d:3a:e1:1d:42:9f:82:83:cb:b9:12:
         de:c1:e1:ff:1c:01:6c:3d:ef:73:c5:63:19:92:7b:41:75:d8:
         2c:94:55:97:66:b2:d7:09:4c:64:66:1b:54:6a:07:02:fd:a4:
         bd:eb:50:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:03 2024 by rpki-client on console-ams.rpki-client.org