Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3139322e302f32312d3231203d3e20323632363137.roa
File:                     3138372e36322e3139322e302f32312d3231203d3e20323632363137.roa (raw, json)
Hash identifier:          8wUew/oQWSnnj7IpXUQ8ZUHOewpu9O+gVJLIZllOm4Q=
Subject key identifier:   FB:DE:0E:BD:5A:DE:4A:E9:AD:93:07:D4:52:D4:85:C7:41:5A:53:16
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       7784C20332A0E89CCA23D03DA1B8A276261921BC
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3139322e302f32312d3231203d3e20323632363137.roa
Signing time:             Wed 03 Apr 2024 19:48:18 +0000
ROA not before:           Wed 03 Apr 2024 19:43:18 +0000
ROA not after:            Wed 02 Apr 2025 19:48:18 +0000
asID:                     262617
IP address blocks:        187.62.192.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
                          rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:84:c2:03:32:a0:e8:9c:ca:23:d0:3d:a1:b8:a2:76:26:19:21:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Apr  3 19:43:18 2024 GMT
            Not After : Apr  2 19:48:18 2025 GMT
        Subject: CN=FBDE0EBD5ADE4AE9AD9307D452D485C7415A5316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d4:e0:dc:f9:fe:e9:db:4e:a9:d7:3c:a5:b0:
                    f0:d9:45:36:fc:26:3a:9f:1b:56:bd:55:24:c4:19:
                    f9:b3:d3:86:2c:ae:98:0d:79:1a:91:a8:a1:f7:e0:
                    df:60:90:ad:ec:6b:f0:e6:05:2b:6c:7a:9c:05:ab:
                    9d:41:13:57:f7:51:7a:b0:85:9b:72:81:23:bc:fd:
                    73:c0:50:39:1e:38:39:b0:5c:c7:3d:56:02:13:83:
                    53:82:8c:ab:b6:ec:65:8a:35:a5:51:13:3f:4b:2d:
                    7d:53:1a:5c:a9:56:5a:9a:50:9a:53:5c:b6:f7:d2:
                    88:5c:a9:f4:71:30:49:7b:5c:0a:5b:13:b3:d6:3c:
                    7b:e4:0d:24:7a:13:7f:ea:f1:a6:a8:ab:b0:76:4c:
                    b2:e9:d1:c5:cc:88:cb:9a:bd:87:5b:ad:f1:7a:83:
                    4e:90:ab:a8:25:6d:a0:52:c7:6e:18:29:23:83:16:
                    15:96:42:a7:3c:1a:10:07:61:63:d4:30:90:43:09:
                    12:69:96:26:f0:de:f8:14:39:b6:a5:11:16:05:b8:
                    e1:c5:cb:ab:11:81:c5:5e:2d:41:59:be:50:78:31:
                    eb:da:3d:38:b1:8b:86:b9:eb:fc:54:20:00:cc:54:
                    08:27:ca:e9:8f:b9:bb:74:fc:83:29:46:ff:b8:9d:
                    91:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DE:0E:BD:5A:DE:4A:E9:AD:93:07:D4:52:D4:85:C7:41:5A:53:16
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3139322e302f32312d3231203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7d:a5:0a:02:d6:44:33:da:84:a4:17:4d:7e:44:b9:90:07:f0:
         a8:d7:b8:6d:aa:07:fa:e2:db:db:38:8a:da:10:9b:85:8a:ae:
         2d:49:d6:6f:cc:13:f8:17:8a:f9:f8:19:bc:8d:4a:44:bf:b4:
         8e:53:09:ec:75:96:d4:6a:c4:5d:ba:2f:85:3f:05:97:d3:5e:
         a4:a9:96:bf:96:81:24:3c:3d:b7:88:93:92:b7:71:59:7a:e2:
         57:52:1b:84:05:d1:a3:78:0b:8a:47:c8:38:ea:b5:48:64:bf:
         1f:54:24:c5:a2:9a:d4:e2:93:fe:f8:16:b0:de:12:8e:66:9b:
         e0:60:a5:34:44:7d:29:75:2e:2e:2c:ac:22:7e:4e:62:f7:94:
         78:de:b7:ee:d7:8c:c3:9a:69:6c:88:e1:5e:17:58:2e:a3:4a:
         db:74:3e:5c:ce:54:23:a5:b0:e1:bb:4e:7b:8b:1b:18:37:be:
         38:d4:12:a0:75:c1:ad:26:84:b4:12:02:c3:88:a4:f3:e3:27:
         27:6f:71:07:6e:d0:46:d1:bb:8a:77:5d:2b:84:3c:32:6c:cd:
         12:4f:5e:2f:07:3c:01:8d:70:42:87:62:55:7e:42:b4:b9:77:
         de:fc:bc:42:f2:3e:6b:a1:4e:ce:4a:ed:10:49:65:df:57:a8:
         32:3e:f8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:19 2024 by rpki-client on console-fra.rpki-client.org