Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3139322e302f32322d3232203d3e20323632363137.roa
File:                     3138372e36322e3139322e302f32322d3232203d3e20323632363137.roa (raw, json)
Hash identifier:          LR7nE49c/uhDgwp2rEPJE23ZcT94i4S4SmhOi+P2ddU=
Subject key identifier:   68:DC:FA:83:88:60:73:47:C2:14:74:A2:79:A5:C8:E7:0F:43:CF:4D
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       7F0E00A5D350D02E63C841380A22A216B137D0A8
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3139322e302f32322d3232203d3e20323632363137.roa
Signing time:             Wed 03 Apr 2024 19:48:31 +0000
ROA not before:           Wed 03 Apr 2024 19:43:31 +0000
ROA not after:            Wed 02 Apr 2025 19:48:31 +0000
asID:                     262617
IP address blocks:        187.62.192.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
                          rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:0e:00:a5:d3:50:d0:2e:63:c8:41:38:0a:22:a2:16:b1:37:d0:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Apr  3 19:43:31 2024 GMT
            Not After : Apr  2 19:48:31 2025 GMT
        Subject: CN=68DCFA8388607347C21474A279A5C8E70F43CF4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7a:81:58:9c:00:23:15:16:bd:16:f2:4f:f1:
                    5c:0c:ab:61:24:e8:60:e4:6c:ed:3a:6b:94:b8:28:
                    81:2f:6f:24:14:78:53:94:ea:c4:6e:92:ca:2f:34:
                    b9:3a:eb:02:dc:8b:96:5c:74:ab:0e:7a:d1:cb:af:
                    56:ba:db:f9:3f:b4:cd:71:e5:bc:5f:5d:48:32:d6:
                    6d:16:bf:af:04:ae:b4:a3:01:4d:36:6e:20:c5:06:
                    39:cb:ca:bd:df:46:af:a3:64:f7:50:f0:2f:b1:1f:
                    c7:55:f6:41:09:a8:b5:6f:95:52:e8:bf:7b:9f:22:
                    36:13:4d:6a:ec:bb:bc:82:89:76:e3:27:84:44:98:
                    70:8a:e1:c2:2c:0d:d8:7c:52:d5:8e:69:57:73:6b:
                    7e:82:27:18:3e:42:80:13:70:2d:f2:27:f3:40:9e:
                    e2:cb:22:52:71:7b:93:c9:bb:0b:fa:53:2c:29:16:
                    b1:26:90:b3:23:fb:02:e3:8e:a4:fa:76:c8:30:2c:
                    b0:70:6a:ed:2a:1e:ac:82:c7:d5:89:4f:33:38:28:
                    63:84:24:6c:d6:0e:96:49:b4:92:87:7b:41:d4:3a:
                    10:96:4d:4f:e4:99:2c:33:4c:56:03:bc:e7:cd:8b:
                    31:41:e3:e6:a1:ef:c3:bd:89:cd:f8:23:1f:c1:1d:
                    6a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DC:FA:83:88:60:73:47:C2:14:74:A2:79:A5:C8:E7:0F:43:CF:4D
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3139322e302f32322d3232203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:c8:c8:35:03:72:d7:49:27:db:23:cc:59:4e:4f:13:57:3c:
         64:66:05:9c:19:a3:a4:41:05:90:6a:9e:36:03:4e:f3:c1:cb:
         52:5f:c3:70:a7:2a:05:bb:f5:1c:07:ba:b8:a7:82:59:62:86:
         30:cd:19:cc:25:e0:46:fc:e3:80:bc:3b:c6:77:59:6f:79:c9:
         9c:c1:28:e2:67:a4:18:ed:6f:b7:5c:ad:f6:51:46:22:73:6b:
         4b:bd:31:81:26:57:fa:92:91:c0:33:bb:f3:78:0c:c2:e4:63:
         ae:60:13:74:da:04:57:80:df:27:59:7a:df:6c:f3:ad:88:2e:
         6a:3f:f4:39:1d:ee:38:75:4f:ac:fa:6f:a2:41:81:e2:a4:de:
         88:11:83:dc:95:e0:c3:91:ec:d5:61:f0:4f:4a:84:1b:ac:4f:
         d0:59:ad:f4:2f:0e:6d:70:c1:93:0b:bf:38:21:be:1f:01:91:
         fd:89:c8:a0:56:cb:25:47:5c:84:fb:4d:0c:81:77:54:58:4b:
         b6:af:0a:22:f2:ee:b7:89:ab:9b:fa:5f:f3:69:05:82:a0:0a:
         97:f4:24:bf:98:67:1a:52:8d:3c:23:48:c4:7d:c6:9c:16:23:
         2f:1d:44:89:c1:4f:9c:a6:76:01:4e:90:94:d8:18:fa:5f:c1:
         84:64:9a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:19 2024 by rpki-client on console-fra.rpki-client.org