Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135352e302f32342d3234203d3e203238313630.roa
File:                     3138372e36322e3135352e302f32342d3234203d3e203238313630.roa (raw, json)
Hash identifier:          y63QtWBwm/PIJ8JDQGPOvoDsux09loq8cGWg+sp5ztE=
Subject key identifier:   C4:48:BA:E1:EF:77:34:84:71:1C:BE:B9:58:56:2B:61:25:24:C1:21
Certificate issuer:       /CN=72D52900C8D2771A558290A7492B6EAD982F6B8E
Certificate serial:       7088AB91ABEBAAD8946B5975BF23FC021E12A48D
Authority key identifier: 72:D5:29:00:C8:D2:77:1A:55:82:90:A7:49:2B:6E:AD:98:2F:6B:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135352e302f32342d3234203d3e203238313630.roa
Signing time:             Sat 16 Nov 2024 14:59:29 +0000
ROA not before:           Sat 16 Nov 2024 14:54:29 +0000
ROA not after:            Sat 15 Nov 2025 14:59:29 +0000
asID:                     28160
IP address blocks:        187.62.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.crl
                          rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:88:ab:91:ab:eb:aa:d8:94:6b:59:75:bf:23:fc:02:1e:12:a4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D52900C8D2771A558290A7492B6EAD982F6B8E
        Validity
            Not Before: Nov 16 14:54:29 2024 GMT
            Not After : Nov 15 14:59:29 2025 GMT
        Subject: CN=C448BAE1EF773484711CBEB958562B612524C121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:48:15:75:c5:39:f9:ad:35:de:4e:02:b7:d1:
                    85:4b:63:c3:07:b5:03:e0:df:4d:70:e3:57:65:c5:
                    4b:a0:80:f0:70:f9:b9:b0:aa:34:5c:b4:fc:10:1c:
                    04:fa:f8:63:c5:cc:75:37:22:ec:7a:bd:5d:7a:b6:
                    e0:93:e3:d5:c1:d8:9b:f9:59:76:1c:c7:c3:46:71:
                    41:da:38:0e:87:61:e8:79:52:8e:0e:79:e0:a8:1f:
                    da:3f:ab:6d:fa:ab:7b:19:93:c7:ab:fd:29:e2:ca:
                    e1:d8:cd:84:69:07:00:2e:aa:35:ad:6e:9b:fd:d1:
                    84:2f:30:81:6b:80:06:eb:e9:a1:71:c7:87:ad:54:
                    ce:8c:1b:00:08:3a:a9:a0:5b:a1:0f:92:81:78:3c:
                    9b:d6:49:32:f9:78:84:b8:ee:4f:8c:94:c3:55:dc:
                    11:42:79:f7:cb:38:3c:8b:71:e0:ee:ec:2d:c3:3c:
                    af:83:d1:4e:85:d8:19:14:32:bd:b7:5c:48:49:c7:
                    89:87:40:4f:ed:66:24:7f:b1:6c:e6:6e:9e:f2:33:
                    10:c3:18:96:b0:3a:cd:4c:f6:8e:02:67:9f:a4:e5:
                    20:a6:6c:9b:be:d8:f6:8f:d6:b5:54:61:51:53:72:
                    cf:60:83:85:9e:18:f3:d6:f8:c3:70:1a:ab:bd:23:
                    6b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:48:BA:E1:EF:77:34:84:71:1C:BE:B9:58:56:2B:61:25:24:C1:21
            X509v3 Authority Key Identifier:
                keyid:72:D5:29:00:C8:D2:77:1A:55:82:90:A7:49:2B:6E:AD:98:2F:6B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135352e302f32342d3234203d3e203238313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:61:fe:ac:19:43:c6:8e:75:c8:c6:20:de:06:90:b5:f9:1d:
         49:d8:52:49:ad:04:4f:57:45:04:12:5d:f7:a3:d2:da:fd:d7:
         4a:c2:97:02:9b:eb:4b:e3:65:1f:ef:0b:7b:08:e1:dc:1b:7d:
         2b:24:bf:19:0d:10:9f:e2:02:e9:f7:f2:00:07:c8:94:80:21:
         a4:f6:7a:07:b5:f7:46:6e:92:5c:f4:6f:94:37:fe:d7:b1:5e:
         19:3e:ae:03:4f:5f:da:51:86:e1:4d:44:3e:c8:22:c0:d1:bf:
         a6:ca:a5:56:21:a2:43:7b:97:1d:f0:1f:48:7f:b7:b5:a4:31:
         de:06:65:ee:61:c9:ac:71:db:8b:f2:d3:f9:24:9a:af:fd:8c:
         1f:d4:35:73:fb:e8:e6:38:d1:d7:a6:ad:16:42:c4:b6:60:a8:
         c3:82:8e:ca:52:67:09:a9:45:11:47:5b:a9:fc:c1:69:1b:f2:
         66:7b:7f:0d:77:b7:ae:8a:0e:e1:a7:05:78:3e:7d:39:12:84:
         91:af:0f:52:5a:c6:d5:69:28:d1:dd:2b:e5:70:c2:c1:eb:ce:
         e6:05:bb:fc:09:61:78:70:b6:21:cd:e2:d7:8e:99:fc:8f:a2:
         26:7f:6d:cb:1b:2c:e4:ad:93:4e:6b:8e:3c:ca:e6:7c:42:2a:
         d2:93:cf:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:42 2024 by rpki-client on console-fra.rpki-client.org