Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135372e302f32342d3234203d3e203238313630.roa
File:                     3138372e36322e3135372e302f32342d3234203d3e203238313630.roa (raw, json)
Hash identifier:          SA7EWKgoTZbRijqwPNViF5Y2Zu1zWYcO7YQ/MxIs27U=
Subject key identifier:   C8:7D:0D:CA:2C:D7:A1:A7:22:16:7E:1C:FF:80:D5:EF:8A:76:74:8C
Certificate issuer:       /CN=72D52900C8D2771A558290A7492B6EAD982F6B8E
Certificate serial:       62EC9C7C5B8A79F06427D4693AFDA7BE1137DBA2
Authority key identifier: 72:D5:29:00:C8:D2:77:1A:55:82:90:A7:49:2B:6E:AD:98:2F:6B:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135372e302f32342d3234203d3e203238313630.roa
Signing time:             Thu 04 Apr 2024 07:55:36 +0000
ROA not before:           Thu 04 Apr 2024 07:50:36 +0000
ROA not after:            Thu 03 Apr 2025 07:55:36 +0000
asID:                     28160
IP address blocks:        187.62.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.crl
                          rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ec:9c:7c:5b:8a:79:f0:64:27:d4:69:3a:fd:a7:be:11:37:db:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D52900C8D2771A558290A7492B6EAD982F6B8E
        Validity
            Not Before: Apr  4 07:50:36 2024 GMT
            Not After : Apr  3 07:55:36 2025 GMT
        Subject: CN=C87D0DCA2CD7A1A722167E1CFF80D5EF8A76748C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:96:46:11:9c:62:40:98:a4:8b:e6:26:ba:ad:
                    e4:3b:6b:bf:45:5e:5a:7f:42:7c:a7:6a:51:a9:bf:
                    c0:9c:3c:01:38:e6:d7:35:9b:48:3d:e8:82:00:2e:
                    60:fb:1b:2f:60:f4:8f:fd:e1:b2:38:63:5f:40:90:
                    00:48:ab:96:dd:1f:58:b6:23:94:93:90:a6:ce:d9:
                    32:9b:52:c5:00:c0:0a:7a:fc:94:6c:4c:c1:31:8d:
                    80:c2:a2:1c:26:2a:21:3c:bd:91:76:fa:d5:43:9d:
                    8d:18:bd:6f:00:8a:70:65:23:dc:d6:45:88:05:ac:
                    cc:0b:46:68:93:39:1f:e4:70:11:17:92:d4:24:2a:
                    a1:56:64:6c:99:3e:d9:d2:30:b2:92:e7:c6:ce:1c:
                    e6:b4:eb:9e:bf:8c:5f:62:19:cc:9f:32:96:68:0b:
                    05:33:6e:88:ae:67:a6:6a:5d:b3:59:1c:cc:62:16:
                    9d:0f:ab:0e:3a:dc:cb:bb:d0:8b:1a:1f:31:62:f4:
                    ed:c0:13:fb:d4:f7:e4:7c:11:9f:1b:b5:42:ca:96:
                    4f:c7:6c:a1:08:16:89:3b:62:33:88:95:50:5f:78:
                    da:8c:95:7d:09:6f:a2:01:db:73:67:ed:c2:16:22:
                    3c:d0:b9:75:36:cf:7c:c1:47:1f:8a:48:b6:d4:08:
                    b9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:7D:0D:CA:2C:D7:A1:A7:22:16:7E:1C:FF:80:D5:EF:8A:76:74:8C
            X509v3 Authority Key Identifier:
                keyid:72:D5:29:00:C8:D2:77:1A:55:82:90:A7:49:2B:6E:AD:98:2F:6B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135372e302f32342d3234203d3e203238313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:cc:b4:13:02:22:dc:12:4c:99:13:7d:f7:18:b0:70:48:b9:
         6a:87:09:0f:7f:33:dc:19:cc:87:b7:00:80:f0:22:83:5b:68:
         f9:61:ba:1d:f8:b0:8f:eb:26:dc:66:30:63:ad:51:da:92:92:
         f1:37:e7:da:12:f9:b5:15:bc:cb:26:c0:3e:0c:58:dd:06:ea:
         0c:f9:74:6d:07:fe:53:20:dc:b8:db:92:1f:98:9d:f3:0e:a8:
         fc:d0:6a:5c:95:a6:1f:80:97:b3:da:67:51:1c:bc:78:d7:cd:
         dd:24:05:59:54:f8:86:0b:82:17:b9:bd:2f:76:fb:9c:54:8c:
         31:1c:14:6b:55:56:66:f3:bb:5a:3e:7a:51:87:92:97:44:77:
         83:ca:5d:53:e3:6a:c8:21:9f:4d:d6:13:e9:c5:d6:3b:e9:f4:
         b6:cd:f1:37:bb:b8:b9:67:2f:c2:55:90:82:8a:b7:c7:ee:02:
         6c:bf:a0:43:2d:17:3a:47:10:76:9a:77:ec:cd:b2:0c:a2:2d:
         08:e6:46:31:b3:bd:97:a5:9f:38:df:7b:13:55:62:f0:2f:3e:
         2b:d5:06:f6:03:7c:f5:64:45:d2:37:3b:b4:54:ac:c9:49:5a:
         0b:76:fc:22:6f:73:55:e6:35:5c:28:b9:66:d7:06:44:de:50:
         25:f3:d6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:44 2024 by rpki-client on console-ams.rpki-client.org