Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135342e302f32342d3234203d3e203238313630.roa
File:                     3138372e36322e3135342e302f32342d3234203d3e203238313630.roa (raw, json)
Hash identifier:          s+4Bj8yLnh4va/PKSr1Fn2xzuk4RR6AiV2PCE4JcEMk=
Subject key identifier:   F2:60:DB:32:D4:6C:5D:35:8E:D5:4B:C2:D3:0E:19:59:C4:B2:61:2C
Certificate issuer:       /CN=72D52900C8D2771A558290A7492B6EAD982F6B8E
Certificate serial:       1CC33EE5AF2C87311F4F0FC30CBFF527B85A60B3
Authority key identifier: 72:D5:29:00:C8:D2:77:1A:55:82:90:A7:49:2B:6E:AD:98:2F:6B:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135342e302f32342d3234203d3e203238313630.roa
Signing time:             Thu 04 Apr 2024 07:55:37 +0000
ROA not before:           Thu 04 Apr 2024 07:50:37 +0000
ROA not after:            Thu 03 Apr 2025 07:55:37 +0000
asID:                     28160
IP address blocks:        187.62.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.crl
                          rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 01:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c3:3e:e5:af:2c:87:31:1f:4f:0f:c3:0c:bf:f5:27:b8:5a:60:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D52900C8D2771A558290A7492B6EAD982F6B8E
        Validity
            Not Before: Apr  4 07:50:37 2024 GMT
            Not After : Apr  3 07:55:37 2025 GMT
        Subject: CN=F260DB32D46C5D358ED54BC2D30E1959C4B2612C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b2:cf:41:25:20:58:2f:86:76:88:13:00:3f:
                    56:1b:98:d1:64:02:d3:7d:70:30:86:72:45:58:27:
                    9e:73:4d:4c:85:a2:6e:f4:79:df:de:05:8a:9d:92:
                    62:76:fd:b3:6d:11:e3:23:0c:f0:4d:90:16:75:29:
                    c3:3e:9a:fe:a6:ab:e8:5e:26:eb:11:4a:8a:f3:ad:
                    3c:e9:c9:94:be:2f:c7:d0:3e:2d:d6:06:98:a4:21:
                    ce:eb:a0:a6:65:38:13:0b:51:a3:c1:b8:58:c9:dc:
                    0a:eb:00:4a:9d:d4:32:29:93:20:2d:0e:4e:9c:da:
                    98:24:98:05:4b:1f:f4:11:54:07:c0:83:60:dd:98:
                    54:b2:5c:c8:d8:5d:c9:39:60:50:57:0a:a6:80:fa:
                    4d:58:ca:5b:b0:43:dc:25:4c:fd:dc:e4:24:c4:4a:
                    33:63:4c:5b:d2:db:c4:f1:95:a7:3b:4a:e9:44:91:
                    ba:64:db:61:59:87:15:38:64:0d:a6:f7:25:90:7d:
                    3f:ec:9b:3f:74:4b:3d:ec:65:5e:22:6b:c9:8c:e5:
                    f0:4c:ad:4a:e7:9c:26:aa:89:56:79:d1:1b:b7:c7:
                    b2:01:1b:02:6c:8f:0f:47:be:13:1b:b2:47:3f:5f:
                    00:bd:3d:36:88:14:4a:19:6c:04:15:d5:7f:6c:63:
                    13:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:60:DB:32:D4:6C:5D:35:8E:D5:4B:C2:D3:0E:19:59:C4:B2:61:2C
            X509v3 Authority Key Identifier:
                keyid:72:D5:29:00:C8:D2:77:1A:55:82:90:A7:49:2B:6E:AD:98:2F:6B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135342e302f32342d3234203d3e203238313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:1c:8c:0c:87:8b:a9:01:9c:80:07:30:c9:7f:a1:24:f7:e7:
         64:60:b0:3e:50:50:64:6b:a4:ab:26:e9:51:01:0f:92:1a:18:
         11:46:5d:ce:92:a8:34:86:c0:e2:ab:ba:78:e6:44:d0:59:df:
         6a:a6:87:bb:98:e2:af:f4:9f:7f:8b:e6:19:05:e5:0f:5d:4b:
         7c:77:e7:b3:8a:ae:b6:ac:12:a1:b5:f0:7a:86:c6:54:65:53:
         74:93:3b:93:85:63:6e:87:d0:36:5e:d2:e0:57:ca:d1:49:2e:
         ff:20:dd:07:e7:d6:95:40:b8:e5:f4:32:8c:9e:5b:d9:42:64:
         4a:26:83:21:26:7d:88:c1:18:81:0b:16:c2:31:ba:5b:68:8a:
         44:22:b0:da:41:75:af:39:f1:e5:ef:48:b4:2d:5c:07:27:72:
         1b:80:6b:29:96:3d:37:9d:34:d2:88:6d:e2:bc:0a:d9:87:f2:
         c9:ee:85:7a:07:f8:17:96:23:85:48:4a:34:64:39:cc:40:51:
         97:f0:fd:b1:0e:ff:11:91:5f:0f:62:e3:85:9b:6e:2e:8d:29:
         34:b6:e9:35:4f:05:2f:39:ca:5c:8e:b2:f6:ae:c0:62:a5:89:
         a4:b1:e3:68:d7:0f:c9:c1:e0:39:b2:0c:70:eb:45:e6:d6:53:
         a6:89:a9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:11:01 2024 by rpki-client on console-fra.rpki-client.org