Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135322e302f32342d3234203d3e203238313630.roa
File:                     3138372e36322e3135322e302f32342d3234203d3e203238313630.roa (raw, json)
Hash identifier:          Iu7vpoxMJPEe24kio/wcnp2dDPaT4WL4eRg4vuGLsaI=
Subject key identifier:   00:EF:FF:64:5E:5B:9E:21:2F:E8:A6:9B:DC:46:AF:95:B3:DD:33:91
Certificate issuer:       /CN=72D52900C8D2771A558290A7492B6EAD982F6B8E
Certificate serial:       2644E63947D731879B8F17A13A49967DB5595A1C
Authority key identifier: 72:D5:29:00:C8:D2:77:1A:55:82:90:A7:49:2B:6E:AD:98:2F:6B:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135322e302f32342d3234203d3e203238313630.roa
Signing time:             Thu 04 Apr 2024 07:55:34 +0000
ROA not before:           Thu 04 Apr 2024 07:50:34 +0000
ROA not after:            Thu 03 Apr 2025 07:55:34 +0000
asID:                     28160
IP address blocks:        187.62.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.crl
                          rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:44:e6:39:47:d7:31:87:9b:8f:17:a1:3a:49:96:7d:b5:59:5a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D52900C8D2771A558290A7492B6EAD982F6B8E
        Validity
            Not Before: Apr  4 07:50:34 2024 GMT
            Not After : Apr  3 07:55:34 2025 GMT
        Subject: CN=00EFFF645E5B9E212FE8A69BDC46AF95B3DD3391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:be:57:7b:12:f5:c6:dd:15:ed:4a:3e:96:39:
                    75:1c:70:87:57:25:aa:8a:27:71:97:02:0b:a3:7e:
                    05:78:84:67:51:1b:de:31:14:e6:06:af:61:9d:10:
                    5c:1d:6e:75:5b:01:86:e8:c0:d2:b4:2b:b3:4e:02:
                    28:97:0c:6c:f6:5f:e6:41:58:53:20:be:c9:a8:c4:
                    34:71:ee:ca:ef:e2:f4:c0:9a:96:fb:d2:de:3f:79:
                    e2:5f:db:eb:f1:56:d6:74:0b:2b:ed:4a:26:75:41:
                    94:a9:e8:f5:85:c9:02:90:43:b8:ff:3d:79:8b:b1:
                    2a:d0:4c:62:f2:fb:53:27:03:71:f5:b1:08:61:5e:
                    3b:89:cc:a2:7e:72:ac:95:c5:7d:27:dc:22:1f:c9:
                    f8:0a:9d:e1:86:34:2a:21:d2:ae:6e:01:1f:97:ed:
                    c9:e9:34:43:48:0b:57:78:33:62:bf:a6:54:4a:a8:
                    f4:62:54:39:f1:c0:9d:67:af:ab:c1:09:18:77:cc:
                    44:3f:1d:1a:3c:4d:be:37:ba:4c:5a:a6:40:e3:b2:
                    38:b5:f6:85:59:19:8f:62:b2:aa:33:68:c0:52:c8:
                    6b:a0:07:57:88:01:ca:d1:20:67:5d:98:41:84:c2:
                    a2:9d:61:34:f6:a0:65:af:d4:b4:e6:7a:d3:7c:82:
                    e4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:EF:FF:64:5E:5B:9E:21:2F:E8:A6:9B:DC:46:AF:95:B3:DD:33:91
            X509v3 Authority Key Identifier:
                keyid:72:D5:29:00:C8:D2:77:1A:55:82:90:A7:49:2B:6E:AD:98:2F:6B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135322e302f32342d3234203d3e203238313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:7e:fb:c5:56:c9:1a:2d:de:37:36:bb:30:e7:10:b7:7f:0d:
         4a:81:18:a0:66:c3:0d:c2:e1:50:c0:1b:0d:53:86:be:fc:b4:
         2f:f3:db:3d:c2:be:8c:50:a8:eb:1d:b2:77:1d:b8:f7:31:35:
         cc:9d:0d:99:62:fe:29:e5:f7:44:33:80:55:2a:92:b0:8b:73:
         90:81:cc:44:72:69:11:f4:04:a3:a5:2b:14:8c:87:f6:1d:2f:
         49:74:85:8a:a4:a1:54:65:e8:b7:84:7d:a6:07:10:6c:9d:b8:
         22:52:f8:02:d0:e9:f4:f0:d2:5b:07:9a:7c:ab:dd:36:79:91:
         bd:a1:f4:cd:8b:5f:d4:4d:d0:5f:ab:11:29:54:5f:ff:b4:0e:
         f6:5d:d9:20:5c:cf:b5:10:30:e1:8b:6f:bb:ab:b5:d0:ae:59:
         db:45:44:a0:b8:2d:db:42:12:dd:69:7f:98:4d:e9:45:f3:38:
         04:0e:ab:d9:4a:d2:92:51:9d:2b:71:ad:e5:31:ed:17:85:14:
         16:04:94:33:7e:e1:bc:79:d4:5d:4e:7d:d8:46:ad:47:e3:d2:
         01:20:30:73:38:cd:d2:14:c3:cd:41:bc:a3:44:be:b0:7e:b8:
         11:89:a5:d1:8b:6c:d6:ba:f2:af:e3:fe:e1:21:de:7b:e1:84:
         19:d3:5a:73
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJkTmOUfXMYebjxehOkmWfbVZWhwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJENTI5MDBDOEQyNzcxQTU1ODI5MEE3NDkyQjZFQUQ5
ODJGNkI4RTAeFw0yNDA0MDQwNzUwMzRaFw0yNTA0MDMwNzU1MzRaMDMxMTAvBgNV
BAMTKDAwRUZGRjY0NUU1QjlFMjEyRkU4QTY5QkRDNDZBRjk1QjNERDMzOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCvld7EvXG3RXtSj6WOXUccIdX
JaqKJ3GXAgujfgV4hGdRG94xFOYGr2GdEFwdbnVbAYbowNK0K7NOAiiXDGz2X+ZB
WFMgvsmoxDRx7srv4vTAmpb70t4/eeJf2+vxVtZ0CyvtSiZ1QZSp6PWFyQKQQ7j/
PXmLsSrQTGLy+1MnA3H1sQhhXjuJzKJ+cqyVxX0n3CIfyfgKneGGNCoh0q5uAR+X
7cnpNENIC1d4M2K/plRKqPRiVDnxwJ1nr6vBCRh3zEQ/HRo8Tb43ukxapkDjsji1
9oVZGY9isqozaMBSyGugB1eIAcrRIGddmEGEwqKdYTT2oGWv1LTmetN8guRlAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUAO//ZF5bniEv6Kab3EavlbPdM5EwHwYDVR0j
BBgwFoAUctUpAMjSdxpVgpCnSSturZgva44wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3ZXalVyMVN5Z1VDbXFacllFWkwyS0p6aWdvRVJ5UWc0ZEFxbWFmTGFB
VXQvMS83MkQ1MjkwMEM4RDI3NzFBNTU4MjkwQTc0OTJCNkVBRDk4MkY2QjhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyRDUyOTAwQzhEMjc3MUE1
NTgyOTBBNzQ5MkI2RUFEOTgyRjZCOEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N2V2pVcjFTeWdVQ21xWnJZRVpMMktKemlnb0VSeVFnNGRBcW1hZkxhQVV0LzEv
MzEzODM3MmUzNjMyMmUzMTM1MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzEzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAuz6YMA0GCSqGSIb3DQEBCwUAA4IBAQCKfvvFVska
Ld43Nrsw5xC3fw1KgRigZsMNwuFQwBsNU4a+/LQv89s9wr6MUKjrHbJ3Hbj3MTXM
nQ2ZYv4p5fdEM4BVKpKwi3OQgcxEcmkR9ASjpSsUjIf2HS9JdIWKpKFUZei3hH2m
BxBsnbgiUvgC0On08NJbB5p8q902eZG9ofTNi1/UTdBfqxEpVF//tA72XdkgXM+1
EDDhi2+7q7XQrlnbRUSguC3bQhLdaX+YTelF8zgEDqvZStKSUZ0rca3lMe0XhRQW
BJQzfuG8edRdTn3YRq1H49IBIDBzOM3SFMPNQbyjRL6wfrgRiaXRi2zWuvKv4/7h
Id574YQZ01pz
-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:44 2024 by rpki-client on console-ams.rpki-client.org