Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3139332e302f32342d3234203d3e20323632363137.roa
File:                     3138372e36322e3139332e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          h8MmdM3opKEDvow8e2qTufwP1MT0yAL2buTET7e6vWk=
Subject key identifier:   E9:FA:2B:DE:83:0A:EB:DA:14:50:3F:C3:E5:54:36:63:D0:E8:93:33
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       7DAA59B191CF197BEA98F90EBDF6A5FD6B7B708C
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3139332e302f32342d3234203d3e20323632363137.roa
Signing time:             Wed 03 Apr 2024 19:48:17 +0000
ROA not before:           Wed 03 Apr 2024 19:43:17 +0000
ROA not after:            Wed 02 Apr 2025 19:48:17 +0000
asID:                     262617
IP address blocks:        187.62.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
                          rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:aa:59:b1:91:cf:19:7b:ea:98:f9:0e:bd:f6:a5:fd:6b:7b:70:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Apr  3 19:43:17 2024 GMT
            Not After : Apr  2 19:48:17 2025 GMT
        Subject: CN=E9FA2BDE830AEBDA14503FC3E5543663D0E89333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9d:b9:f4:e9:61:92:2e:7f:cf:fa:bb:1f:1b:
                    9e:92:8b:e7:ef:cb:6e:ac:1d:7b:d7:d0:36:ae:94:
                    3a:25:05:1d:0c:49:3b:4e:a9:81:74:4a:46:b5:d4:
                    a8:a7:a1:76:8b:d8:24:41:95:23:54:48:16:6a:90:
                    74:57:07:3f:d8:ed:8e:21:61:3b:89:91:9c:8d:f6:
                    4a:e0:31:60:98:7e:bf:59:88:3d:5e:29:79:db:4c:
                    9a:0d:76:54:1b:e4:6c:96:a3:f8:4a:f6:9f:f8:ac:
                    8e:71:a0:07:b8:32:36:a5:de:82:74:a0:c8:e9:6c:
                    a1:84:aa:ca:cf:68:bd:2a:29:db:38:67:ac:e1:f2:
                    ec:29:80:f4:66:da:5a:c6:50:06:5f:2d:28:5b:ed:
                    6f:e8:dc:dd:51:ef:75:f0:44:66:c2:b4:91:7b:f2:
                    79:21:2c:fc:b1:81:2c:fd:72:e7:e0:12:d3:c2:62:
                    e3:64:54:ef:2c:bc:ea:35:ca:78:c5:fb:58:1b:13:
                    44:da:3e:46:dd:ed:a0:74:d6:c9:bf:ea:83:c9:a5:
                    37:a1:de:28:c6:a4:9d:80:5c:14:9e:d1:de:0f:aa:
                    41:e7:b3:c2:d7:84:66:7e:f7:84:3f:59:41:5d:c5:
                    4c:7e:d2:7b:61:73:eb:88:d5:d4:b2:3a:a1:d0:2f:
                    87:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FA:2B:DE:83:0A:EB:DA:14:50:3F:C3:E5:54:36:63:D0:E8:93:33
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3139332e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:f5:c5:6f:88:d1:25:7e:08:60:2b:93:90:d8:18:59:c8:d7:
         e9:90:0d:e5:db:4e:ea:fc:f4:40:19:10:19:2b:96:5d:c1:66:
         46:1e:20:87:3e:27:0d:41:9b:fd:d7:60:b7:58:06:f6:33:a2:
         5b:be:28:f7:2b:ec:7a:b8:cd:9b:ef:ed:9e:89:18:89:5e:c4:
         24:77:f8:05:90:8d:39:7f:02:29:8c:67:b1:ca:02:84:38:d6:
         84:8d:d3:50:0e:c7:28:21:ec:e9:79:73:21:af:c4:de:1c:3a:
         f9:98:cc:e8:58:05:50:91:7e:aa:6a:b5:55:a6:7f:74:37:1c:
         18:88:33:c3:f6:dc:24:03:38:f7:b5:8a:1b:b3:c4:0c:f8:6c:
         9c:d2:55:a2:7d:e6:01:ca:0f:32:8e:b2:4d:5a:65:66:56:25:
         ea:b1:fc:40:dc:1a:ef:d0:11:e4:65:cf:25:08:c3:45:f0:5e:
         8b:46:dd:bc:9f:a5:9a:f3:5e:69:cb:e3:fe:a9:92:b7:9a:bc:
         60:9f:c8:5c:a3:94:23:b9:3a:15:4a:e5:81:c9:93:61:90:83:
         83:4d:29:f9:46:7e:29:69:4c:9c:3c:dc:8e:eb:9a:df:2c:0f:
         dd:29:66:87:f7:97:e9:89:5e:7d:24:65:7c:74:87:7d:fc:80:
         f1:dd:22:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:37 2024 by rpki-client on console-ams.rpki-client.org