Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135342e302f32342d3234203d3e203238313630.roa
File:                     3138372e36322e3135342e302f32342d3234203d3e203238313630.roa (raw, json)
Hash identifier:          Vfi1vaIOMP+Eq59ulsjjjxrSdBV3vr1cJHrsyWH+m8E=
Subject key identifier:   DD:F3:0E:8F:C4:AB:87:7F:9D:EF:C4:C0:94:06:48:2B:AE:D7:1A:E2
Certificate issuer:       /CN=72D52900C8D2771A558290A7492B6EAD982F6B8E
Certificate serial:       7F51ADB9C7B9CDCE8F280810619F06CB4D6D7A11
Authority key identifier: 72:D5:29:00:C8:D2:77:1A:55:82:90:A7:49:2B:6E:AD:98:2F:6B:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135342e302f32342d3234203d3e203238313630.roa
Signing time:             Sat 16 Nov 2024 15:00:50 +0000
ROA not before:           Sat 16 Nov 2024 14:55:50 +0000
ROA not after:            Sat 15 Nov 2025 15:00:50 +0000
asID:                     28160
IP address blocks:        187.62.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.crl
                          rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:51:ad:b9:c7:b9:cd:ce:8f:28:08:10:61:9f:06:cb:4d:6d:7a:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D52900C8D2771A558290A7492B6EAD982F6B8E
        Validity
            Not Before: Nov 16 14:55:50 2024 GMT
            Not After : Nov 15 15:00:50 2025 GMT
        Subject: CN=DDF30E8FC4AB877F9DEFC4C09406482BAED71AE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a5:88:55:08:cd:6a:55:91:81:bd:ac:c1:c7:
                    3d:85:90:0c:fb:5d:9c:43:7b:14:cb:5e:04:47:e6:
                    8b:f3:7e:ac:3b:d8:4b:f5:40:8f:a6:86:93:e4:1e:
                    62:ab:12:fe:87:5c:19:ab:5c:47:2d:54:b5:36:47:
                    10:cf:bd:43:bc:cd:0a:c1:75:de:7b:45:94:91:e9:
                    2a:f9:c0:b3:4a:c8:a7:3f:c4:9b:cd:db:e6:d4:32:
                    61:98:15:77:e4:84:8a:6b:e8:1d:cc:20:a9:7a:01:
                    af:2e:5f:4a:79:2d:44:7e:7f:d3:1a:12:b6:cc:68:
                    94:ac:4d:8f:69:aa:90:3c:c6:e4:f6:81:e3:c3:3a:
                    a6:30:8e:42:d7:32:ea:6d:8c:14:2c:1f:11:83:31:
                    62:37:5b:44:5c:e4:8f:80:a9:3d:cc:ef:29:15:00:
                    6d:b0:c8:5f:d4:db:c6:d6:e2:3d:d6:c5:6e:ec:b9:
                    32:6c:58:4f:d6:55:ce:ca:03:ef:1d:3d:b3:51:ab:
                    2f:2f:76:87:14:e7:97:bd:78:df:ac:cc:04:8d:9a:
                    18:d0:85:04:08:26:cf:bb:4c:da:f8:4e:1f:0b:4c:
                    28:c3:6c:4c:2b:02:b2:a8:34:6f:1f:c6:4a:75:29:
                    9a:6e:b8:ac:f3:97:4f:b3:0f:a0:45:ad:42:c3:c2:
                    9a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F3:0E:8F:C4:AB:87:7F:9D:EF:C4:C0:94:06:48:2B:AE:D7:1A:E2
            X509v3 Authority Key Identifier:
                keyid:72:D5:29:00:C8:D2:77:1A:55:82:90:A7:49:2B:6E:AD:98:2F:6B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135342e302f32342d3234203d3e203238313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:a3:16:3f:20:52:75:a9:02:89:57:4d:85:9a:27:64:7a:a1:
         5e:9f:4b:37:6f:3a:e6:dc:be:38:bd:5e:57:62:8e:6a:74:4a:
         4c:10:f6:8d:0a:41:4b:e2:5c:a2:aa:ce:18:0b:d5:ec:91:bd:
         bd:8f:ba:49:e1:17:56:01:80:1d:02:5c:bb:58:44:e9:82:32:
         c2:d4:6a:93:92:43:e3:fa:21:7f:8e:ad:f9:92:38:34:5e:d6:
         d6:a9:cb:fa:e9:7b:e2:71:e9:7b:c2:e3:80:32:ef:90:50:c3:
         db:b1:f7:0f:6f:7a:5f:fa:61:92:d9:d5:06:9a:6a:af:02:40:
         3c:90:3e:8c:e1:e3:dc:88:65:71:77:56:cb:48:4d:ea:62:d9:
         68:2b:bf:75:67:29:2b:75:05:f2:84:e1:f1:39:4f:5f:ef:25:
         97:98:3b:50:95:59:0d:72:37:9e:91:a9:40:94:5e:4d:12:0f:
         26:1d:9c:f7:43:8d:aa:1c:62:06:11:b2:47:ad:c0:12:14:66:
         2f:f8:13:3c:c3:cc:71:01:f4:97:52:ae:b9:0e:99:85:5d:c1:
         79:24:12:ae:f0:6c:98:50:1a:ea:f4:26:ee:a7:66:81:15:78:
         18:a4:a2:7d:0f:d0:db:f9:bd:01:6e:1e:d6:e4:77:dd:9b:9a:
         7a:14:7c:37
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUf1Gtuce5zc6PKAgQYZ8Gy01tehEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJENTI5MDBDOEQyNzcxQTU1ODI5MEE3NDkyQjZFQUQ5
ODJGNkI4RTAeFw0yNDExMTYxNDU1NTBaFw0yNTExMTUxNTAwNTBaMDMxMTAvBgNV
BAMTKERERjMwRThGQzRBQjg3N0Y5REVGQzRDMDk0MDY0ODJCQUVENzFBRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGpYhVCM1qVZGBvazBxz2FkAz7
XZxDexTLXgRH5ovzfqw72Ev1QI+mhpPkHmKrEv6HXBmrXEctVLU2RxDPvUO8zQrB
dd57RZSR6Sr5wLNKyKc/xJvN2+bUMmGYFXfkhIpr6B3MIKl6Aa8uX0p5LUR+f9Ma
ErbMaJSsTY9pqpA8xuT2gePDOqYwjkLXMuptjBQsHxGDMWI3W0Rc5I+AqT3M7ykV
AG2wyF/U28bW4j3WxW7suTJsWE/WVc7KA+8dPbNRqy8vdocU55e9eN+szASNmhjQ
hQQIJs+7TNr4Th8LTCjDbEwrArKoNG8fxkp1KZpuuKzzl0+zD6BFrULDwpofAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU3fMOj8Srh3+d78TAlAZIK67XGuIwHwYDVR0j
BBgwFoAUctUpAMjSdxpVgpCnSSturZgva44wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3ZXalVyMVN5Z1VDbXFacllFWkwyS0p6aWdvRVJ5UWc0ZEFxbWFmTGFB
VXQvMS83MkQ1MjkwMEM4RDI3NzFBNTU4MjkwQTc0OTJCNkVBRDk4MkY2QjhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyRDUyOTAwQzhEMjc3MUE1
NTgyOTBBNzQ5MkI2RUFEOTgyRjZCOEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N2V2pVcjFTeWdVQ21xWnJZRVpMMktKemlnb0VSeVFnNGRBcW1hZkxhQVV0LzEv
MzEzODM3MmUzNjMyMmUzMTM1MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzEzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAuz6aMA0GCSqGSIb3DQEBCwUAA4IBAQBxoxY/IFJ1
qQKJV02FmidkeqFen0s3bzrm3L44vV5XYo5qdEpMEPaNCkFL4lyiqs4YC9Xskb29
j7pJ4RdWAYAdAly7WETpgjLC1GqTkkPj+iF/jq35kjg0XtbWqcv66Xvicel7wuOA
Mu+QUMPbsfcPb3pf+mGS2dUGmmqvAkA8kD6M4ePciGVxd1bLSE3qYtloK791Zykr
dQXyhOHxOU9f7yWXmDtQlVkNcjeekalAlF5NEg8mHZz3Q42qHGIGEbJHrcASFGYv
+BM8w8xxAfSXUq65DpmFXcF5JBKu8GyYUBrq9Cbup2aBFXgYpKJ9D9Db+b0Bbh7W
5Hfdm5p6FHw3
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:03 2024 by rpki-client on console-ams.rpki-client.org