Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3139322e302f32342d3234203d3e20323632363137.roa
File:                     3138372e36322e3139322e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          nMguoRCGq6c10YxxgU18MsM3iqRJIYbu9+s4HhpioZE=
Subject key identifier:   BE:41:60:DE:48:A1:A7:E7:C4:45:C3:B1:80:F9:D6:8A:7D:84:19:F6
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       07EE64165255FE50C539E03BB323A7B45FB26802
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3139322e302f32342d3234203d3e20323632363137.roa
Signing time:             Wed 03 Apr 2024 19:48:26 +0000
ROA not before:           Wed 03 Apr 2024 19:43:26 +0000
ROA not after:            Wed 02 Apr 2025 19:48:26 +0000
asID:                     262617
IP address blocks:        187.62.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
                          rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ee:64:16:52:55:fe:50:c5:39:e0:3b:b3:23:a7:b4:5f:b2:68:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Apr  3 19:43:26 2024 GMT
            Not After : Apr  2 19:48:26 2025 GMT
        Subject: CN=BE4160DE48A1A7E7C445C3B180F9D68A7D8419F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d1:d5:66:70:20:20:4e:e0:06:34:0f:99:dc:
                    27:8b:6f:4b:23:17:70:9e:c8:cd:d8:1e:28:a8:39:
                    46:fb:0c:c8:08:33:62:e3:a2:62:23:51:c6:6d:97:
                    89:8a:b8:f8:80:06:e9:b5:5e:d0:0b:cc:e0:f6:89:
                    89:fb:b2:3c:3d:9d:fd:22:50:78:76:10:53:ed:98:
                    47:5e:05:06:c5:0f:02:3d:3f:02:26:cd:ee:55:c4:
                    38:f3:c1:75:48:fc:61:8f:d0:53:77:3a:10:04:5e:
                    6c:e3:03:40:ac:5b:2a:0e:7e:e9:de:0d:28:35:38:
                    9f:15:3e:d4:68:9a:85:92:32:1a:87:74:9f:97:57:
                    fb:eb:63:66:01:66:8c:15:93:86:c8:47:f5:5e:e7:
                    c3:51:22:e6:8c:49:aa:8e:bc:1a:18:19:59:ee:0c:
                    26:c6:14:31:52:4e:76:c0:c8:14:32:e8:db:dc:ef:
                    6a:52:39:30:05:ef:22:32:78:5d:65:59:f5:1b:67:
                    7a:57:10:ee:43:36:59:db:b0:fc:b1:e8:f0:50:65:
                    06:ad:b9:b2:21:23:dc:d9:60:76:f7:28:69:05:34:
                    ad:9a:e8:da:ca:dd:f8:22:7c:fe:dc:b5:13:14:0d:
                    42:9d:ad:33:1c:88:f2:1a:ee:56:bb:cc:f5:c2:3c:
                    e3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:41:60:DE:48:A1:A7:E7:C4:45:C3:B1:80:F9:D6:8A:7D:84:19:F6
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3139322e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:bf:c0:7d:6a:81:c4:81:10:4a:62:d9:e0:89:b0:a6:34:9a:
         4c:25:05:1d:8e:55:55:ec:fc:7d:53:0d:14:a4:ab:3e:31:b6:
         76:85:dd:81:34:c2:7f:b3:b6:ae:0c:7c:ef:2c:b8:6a:d6:8d:
         95:9d:1e:54:05:8b:ce:8f:e6:85:f8:69:b4:b5:ca:2a:d0:24:
         a9:01:6b:8e:d4:d8:d9:32:72:93:c2:0f:81:b5:8d:69:66:0b:
         1a:e6:e4:56:e7:fe:72:2d:5f:68:a3:3c:f4:9b:1c:34:eb:3e:
         8c:e4:77:5f:42:41:73:39:23:7c:47:aa:95:02:c7:2c:03:d0:
         03:17:84:da:cf:a4:74:ea:0e:2d:8f:be:69:cf:02:b3:a5:dc:
         f1:01:96:09:06:47:f0:f3:eb:77:5e:f8:a2:32:e3:e6:41:b2:
         0e:5f:ea:17:30:c1:dc:44:35:21:d9:b8:3d:f1:fc:2e:3f:7d:
         78:e1:f5:e6:82:95:f6:62:13:c0:86:07:d8:b5:92:89:60:99:
         f3:6c:38:a4:77:6b:d8:72:f5:fc:05:c3:64:08:25:f2:60:98:
         4b:94:be:55:a8:1d:b4:31:b8:53:46:87:12:bb:3a:79:41:f0:
         44:22:e7:d5:37:69:0b:55:64:4e:fb:a3:9d:1e:37:1e:3e:73:
         2c:79:dd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 07:56:08 2024 by rpki-client on console-fra.rpki-client.org