Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135372e302f32342d3234203d3e203238313630.roa
File:                     3138372e36322e3135372e302f32342d3234203d3e203238313630.roa (raw, json)
Hash identifier:          ygK5ob/h6aI+ytsP5ExM3A+N9oc2mUSXtui0VuW8ml0=
Subject key identifier:   8E:31:56:EA:EB:4B:A6:6B:35:05:D1:34:7E:62:CC:E1:D9:AA:F0:0E
Certificate issuer:       /CN=72D52900C8D2771A558290A7492B6EAD982F6B8E
Certificate serial:       3A01833F6A2515B48AA4E948FC1EC1A9B7659261
Authority key identifier: 72:D5:29:00:C8:D2:77:1A:55:82:90:A7:49:2B:6E:AD:98:2F:6B:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135372e302f32342d3234203d3e203238313630.roa
Signing time:             Sat 16 Nov 2024 14:59:29 +0000
ROA not before:           Sat 16 Nov 2024 14:54:29 +0000
ROA not after:            Sat 15 Nov 2025 14:59:29 +0000
asID:                     28160
IP address blocks:        187.62.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.crl
                          rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:01:83:3f:6a:25:15:b4:8a:a4:e9:48:fc:1e:c1:a9:b7:65:92:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D52900C8D2771A558290A7492B6EAD982F6B8E
        Validity
            Not Before: Nov 16 14:54:29 2024 GMT
            Not After : Nov 15 14:59:29 2025 GMT
        Subject: CN=8E3156EAEB4BA66B3505D1347E62CCE1D9AAF00E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2a:7c:d7:5e:13:99:a2:9b:9e:52:5e:53:1e:
                    6e:67:76:2d:4f:f1:91:96:d6:20:cc:55:6e:58:44:
                    c9:d8:58:d8:73:21:0a:c6:5b:91:df:30:76:bf:5e:
                    e9:51:28:b6:1b:e1:a1:59:87:bf:6b:ca:11:fd:7e:
                    9c:6a:6b:63:00:c9:17:86:f4:04:95:6a:70:ad:62:
                    6e:66:49:2a:d9:c0:76:d6:88:ba:d1:ab:a5:93:75:
                    5a:42:83:ed:d5:e5:bf:15:c8:48:0d:d7:aa:95:aa:
                    ab:8d:5a:ea:1c:5b:d7:4e:02:b0:36:f4:a3:f3:31:
                    08:8b:cb:f2:53:52:7c:b3:59:a8:7d:4a:3a:b1:52:
                    eb:d8:14:9f:91:46:33:d4:d5:67:72:51:40:f0:62:
                    e7:e1:aa:2d:23:7a:9a:96:ee:eb:35:90:00:59:fe:
                    46:5d:09:f4:06:1e:4f:e9:c4:d7:01:53:a4:e1:37:
                    59:2e:e1:8c:0e:89:09:28:e6:5c:de:1b:fa:77:22:
                    42:64:2e:bb:ed:1f:8d:21:89:7e:d6:10:5b:5f:94:
                    43:cf:6c:17:88:d4:a1:ec:dd:bd:54:88:36:a2:17:
                    f2:31:de:ee:2e:eb:43:35:38:50:5b:a1:2a:42:10:
                    1c:75:c3:a4:4f:e0:a2:20:84:b7:40:1b:7e:35:0d:
                    04:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:31:56:EA:EB:4B:A6:6B:35:05:D1:34:7E:62:CC:E1:D9:AA:F0:0E
            X509v3 Authority Key Identifier:
                keyid:72:D5:29:00:C8:D2:77:1A:55:82:90:A7:49:2B:6E:AD:98:2F:6B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135372e302f32342d3234203d3e203238313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:6f:7a:5a:cb:a2:e8:85:f9:c3:ec:03:90:92:33:35:97:0d:
         51:f2:50:28:00:47:1c:3b:c5:e0:6a:b6:f0:ad:f1:fd:8d:33:
         d9:4b:87:4a:d4:0f:ae:c7:98:0f:7c:ad:37:75:72:43:2a:75:
         21:db:a2:c8:56:9d:ce:4b:91:b6:44:92:83:c0:87:e1:ab:97:
         3a:5e:e2:72:88:4d:fc:ed:cc:08:ab:9d:b6:5a:d6:aa:56:c6:
         92:bf:e8:b1:a4:33:3e:58:50:92:a2:77:73:5b:05:a5:7e:dd:
         f3:01:f6:99:93:0a:38:df:ab:22:3e:27:6e:03:88:c5:85:73:
         9c:60:c7:51:ed:d7:dc:41:a2:5b:f0:ab:19:57:2b:bd:68:d9:
         12:3e:d3:10:f1:2d:cd:ae:81:86:e0:a6:13:e8:3b:37:6d:f5:
         9e:7d:70:16:d6:ff:b0:cb:98:54:3a:d7:73:d9:7b:f7:29:5e:
         99:18:c7:62:b5:be:36:15:da:9f:08:3a:58:93:72:be:55:08:
         6a:a9:ab:45:da:df:06:a4:67:b7:7f:1b:44:6e:15:43:c1:7f:
         e8:d2:83:97:52:49:c7:72:41:20:89:6c:dc:38:50:5d:14:e5:
         66:ed:81:e9:f5:b0:db:c4:8a:33:67:72:06:fc:6f:8f:c1:5c:
         4b:08:fe:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:42 2024 by rpki-client on console-fra.rpki-client.org