Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3139342e302f32332d3233203d3e20323632363137.roa
File:                     3138372e36322e3139342e302f32332d3233203d3e20323632363137.roa (raw, json)
Hash identifier:          7NHG8ZF4D1cpr3rrwulnEyMYPqGG7JDi3wWtTybGNqI=
Subject key identifier:   D1:5A:01:A8:D6:DC:48:6B:D2:C9:1C:BD:6F:65:6B:38:08:E5:3B:3E
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       44CE7427B2D35C0BEF5BA89711BD62A6729CAFE0
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3139342e302f32332d3233203d3e20323632363137.roa
Signing time:             Wed 03 Apr 2024 19:48:32 +0000
ROA not before:           Wed 03 Apr 2024 19:43:32 +0000
ROA not after:            Wed 02 Apr 2025 19:48:32 +0000
asID:                     262617
IP address blocks:        187.62.194.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
                          rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ce:74:27:b2:d3:5c:0b:ef:5b:a8:97:11:bd:62:a6:72:9c:af:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Apr  3 19:43:32 2024 GMT
            Not After : Apr  2 19:48:32 2025 GMT
        Subject: CN=D15A01A8D6DC486BD2C91CBD6F656B3808E53B3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c1:de:f6:56:92:52:f8:46:18:a1:fa:04:1e:
                    f0:f6:4e:56:65:c6:1a:41:36:cd:e0:95:59:dc:b3:
                    d0:e4:0a:00:f6:a2:9d:42:d2:09:a9:81:94:7c:14:
                    3b:03:d9:01:43:96:54:82:4c:1c:6f:2a:0c:cf:bc:
                    62:9a:c3:87:c3:fe:2d:72:b4:c7:ef:3d:6a:7b:65:
                    4c:4e:da:f2:89:79:49:4f:ed:d8:10:c0:6b:eb:8f:
                    06:d0:47:4f:65:e6:a3:7a:24:e2:9c:37:23:dd:d0:
                    a8:1e:77:b0:04:1f:85:4c:56:94:03:5f:95:65:24:
                    53:dd:2b:33:5b:20:f0:6f:25:02:35:62:db:27:49:
                    7e:19:f2:45:27:c8:ea:d4:ef:0f:40:c4:6a:74:61:
                    ef:a6:19:f5:55:76:53:23:e0:0e:cc:e2:fd:d2:d9:
                    87:85:15:af:55:02:cc:c3:ae:c8:af:34:d4:4c:96:
                    47:57:39:79:b2:ac:50:bf:dc:31:d5:7f:44:75:88:
                    84:f0:dd:67:c3:27:0d:3c:0f:76:d5:0c:00:e2:3e:
                    22:68:10:c1:ca:bb:d0:c9:f5:37:5f:a2:f2:f9:37:
                    e3:a7:d3:0b:f9:2e:c2:d8:9e:1d:ad:6f:de:56:c7:
                    3f:e5:2c:08:27:ec:40:5a:ae:66:d1:d0:6a:6e:88:
                    50:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5A:01:A8:D6:DC:48:6B:D2:C9:1C:BD:6F:65:6B:38:08:E5:3B:3E
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3139342e302f32332d3233203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:1a:0d:23:d8:d8:02:56:ec:84:36:b6:78:98:cf:01:8b:bf:
         7d:84:3f:ed:4d:3e:6c:22:5d:2f:42:79:d6:26:2c:b6:58:a0:
         2b:a8:6d:7d:4e:65:7b:a4:ca:40:ad:0a:38:d3:3e:17:b4:0f:
         de:95:8b:c3:e9:af:4c:12:b5:2d:fc:c3:21:70:8c:da:5c:87:
         c4:dc:bb:43:71:e1:1e:d5:0d:1f:35:f6:5b:ac:60:04:56:d0:
         7b:3d:b9:02:64:07:50:1f:35:3e:de:21:44:b0:a9:9c:e8:70:
         a6:e1:ce:0c:db:60:a9:92:fb:34:83:e7:c3:b0:a0:3b:bc:ad:
         10:d8:c0:3d:41:37:85:51:30:d8:63:9f:0d:3d:7a:0b:b1:02:
         ae:ef:d5:f4:1e:35:0f:be:60:14:0a:78:9b:a1:7d:ed:25:0c:
         e1:f5:97:db:40:43:26:48:90:ca:4f:69:ce:f3:a5:cc:29:69:
         82:6e:0d:1e:c4:6e:94:cb:6b:68:65:b0:68:a4:f3:07:cc:f6:
         dc:e8:35:0d:b9:06:ba:fc:90:11:e6:69:ad:59:4d:02:91:ba:
         18:a3:65:d5:a6:01:b7:9d:8d:59:1b:72:db:8a:3c:85:c3:ce:
         45:d2:28:e4:1b:f0:51:29:01:73:b2:13:f3:2d:b1:f8:2b:24:
         33:bb:24:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:37 2024 by rpki-client on console-ams.rpki-client.org