Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3139352e302f32342d3234203d3e20323632363137.roa
File:                     3138372e36322e3139352e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          zU9qN31mOtkhvNWMogzxYvJGWSP++QV/vl4jUT9K0T0=
Subject key identifier:   8F:19:FE:DC:9E:84:8C:72:4D:1C:96:9C:80:A0:7C:00:6E:8D:6C:12
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       54F877BF760D98436EAE1B229401EEDE57FA9E96
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3139352e302f32342d3234203d3e20323632363137.roa
Signing time:             Wed 05 Mar 2025 20:35:53 +0000
ROA not before:           Wed 05 Mar 2025 20:30:53 +0000
ROA not after:            Wed 04 Mar 2026 20:35:53 +0000
asID:                     262617
IP address blocks:        187.62.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
                          rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 07:18:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f8:77:bf:76:0d:98:43:6e:ae:1b:22:94:01:ee:de:57:fa:9e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Mar  5 20:30:53 2025 GMT
            Not After : Mar  4 20:35:53 2026 GMT
        Subject: CN=8F19FEDC9E848C724D1C969C80A07C006E8D6C12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2e:a7:7e:0f:8f:84:29:e1:4b:bf:25:27:71:
                    97:d7:41:c8:ca:f7:fc:67:c9:26:b8:6d:5a:60:7d:
                    92:99:d7:1d:18:80:53:60:9f:bd:6d:89:20:de:33:
                    5d:75:ce:85:76:f2:d7:3d:f7:0a:a2:aa:e8:01:3c:
                    0d:06:ae:90:49:fd:7f:b1:f4:66:5d:5d:54:1b:35:
                    8a:ad:d2:4f:f1:52:86:eb:28:ed:d6:fb:b1:6c:a9:
                    06:d9:20:b3:21:3d:f6:56:90:53:b0:e1:64:d7:22:
                    a7:b7:07:68:80:09:d4:83:76:ad:70:b3:57:be:ab:
                    ea:4d:5c:8f:c5:86:99:a7:bb:39:d6:0e:bf:df:37:
                    fe:2c:80:49:44:fc:0f:13:fc:af:85:b3:cd:80:76:
                    3c:65:9a:16:b6:ae:d8:4f:77:c2:28:67:6b:ad:c0:
                    f9:ee:f0:76:3e:6e:a7:fb:fb:d1:ea:f6:86:88:11:
                    e4:12:c7:4d:e3:15:29:0d:42:55:88:2b:c3:b4:2a:
                    12:5d:2f:3c:fa:ed:dc:4b:ec:e6:1b:f0:b4:b9:fd:
                    3d:68:93:85:64:a6:51:8b:f0:77:7a:3d:23:3e:89:
                    df:0e:7a:df:b8:21:55:cd:db:eb:49:e2:3b:9b:98:
                    e3:88:58:93:01:9d:0f:3a:da:a1:59:11:53:86:e6:
                    87:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:19:FE:DC:9E:84:8C:72:4D:1C:96:9C:80:A0:7C:00:6E:8D:6C:12
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3139352e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:c6:79:7a:61:42:48:4a:f8:a7:ee:5a:f3:6e:d7:f2:71:d5:
         46:ad:c8:fb:68:c2:51:19:f1:dd:a2:5e:89:ef:34:b8:16:0a:
         d3:d0:8d:75:c1:49:a9:93:3f:0f:62:42:c8:b0:a9:1a:1b:0d:
         8a:89:8a:de:dd:7f:f2:47:19:aa:25:bc:f9:a1:a5:f0:5e:d7:
         79:bb:bc:e2:ab:f4:ca:d0:fe:c1:2a:25:ce:5e:ff:35:f3:b4:
         0f:b7:84:b1:2d:23:a0:9b:b1:e1:23:06:f7:a5:0d:4a:b7:13:
         3c:8d:16:e2:8e:e7:9a:17:ea:b7:ac:cb:36:e7:3c:a4:e8:d3:
         22:44:89:69:3f:fc:fe:b0:da:75:33:54:8d:04:22:17:8e:11:
         68:b3:58:d7:03:4e:65:13:63:58:02:e3:2b:22:f5:52:15:d3:
         11:8b:ed:b7:20:d7:34:d5:3e:ec:77:08:d8:0b:0e:53:2e:53:
         71:0d:55:26:d6:3c:6d:c3:91:cc:f2:38:12:7c:33:5d:cd:b0:
         b1:62:e4:3c:bb:32:50:70:94:3d:44:5d:9a:d6:14:80:56:08:
         ab:f1:bf:09:94:97:42:b3:a6:0a:f6:48:d9:2b:a9:53:51:c3:
         23:8d:d8:2c:8d:e5:9f:ac:e0:83:c3:a0:46:f7:bc:60:a0:84:
         44:81:87:c4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVPh3v3YNmENurhsilAHu3lf6npYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDAwNzhEMkI1Nzg5ODI2NjNFRkU5MUZDNEI1Mzk3QzQ4
NDAzRTJFNDAeFw0yNTAzMDUyMDMwNTNaFw0yNjAzMDQyMDM1NTNaMDMxMTAvBgNV
BAMTKDhGMTlGRURDOUU4NDhDNzI0RDFDOTY5QzgwQTA3QzAwNkU4RDZDMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcLqd+D4+EKeFLvyUncZfXQcjK
9/xnySa4bVpgfZKZ1x0YgFNgn71tiSDeM111zoV28tc99wqiqugBPA0GrpBJ/X+x
9GZdXVQbNYqt0k/xUobrKO3W+7FsqQbZILMhPfZWkFOw4WTXIqe3B2iACdSDdq1w
s1e+q+pNXI/FhpmnuznWDr/fN/4sgElE/A8T/K+Fs82Adjxlmha2rthPd8IoZ2ut
wPnu8HY+bqf7+9Hq9oaIEeQSx03jFSkNQlWIK8O0KhJdLzz67dxL7OYb8LS5/T1o
k4VkplGL8Hd6PSM+id8Oet+4IVXN2+tJ4jubmOOIWJMBnQ862qFZEVOG5odxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjxn+3J6EjHJNHJacgKB8AG6NbBIwHwYDVR0j
BBgwFoAUAAeNK1eJgmY+/pH8S1OXxIQD4uQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGtRRXQ3OHc0dldEUFpXQkp0WXFKdzZ3NGJTWFA0ekM4S2lnZDFwb2NI
azUvMS8wMDA3OEQyQjU3ODk4MjY2M0VGRTkxRkM0QjUzOTdDNDg0MDNFMkU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwMDc4RDJCNTc4OTgyNjYz
RUZFOTFGQzRCNTM5N0M0ODQwM0UyRTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RrUUV0Nzh3NHZXRFBaV0JKdFlxSnc2dzRiU1hQNHpDOEtpZ2QxcG9jSGs1LzEv
MzEzODM3MmUzNjMyMmUzMTM5MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7PsMwDQYJKoZIhvcNAQELBQADggEBAFvGeXph
QkhK+KfuWvNu1/Jx1UatyPtowlEZ8d2iXonvNLgWCtPQjXXBSamTPw9iQsiwqRob
DYqJit7df/JHGaolvPmhpfBe13m7vOKr9MrQ/sEqJc5e/zXztA+3hLEtI6CbseEj
BvelDUq3EzyNFuKO55oX6resyzbnPKTo0yJEiWk//P6w2nUzVI0EIheOEWizWNcD
TmUTY1gC4ysi9VIV0xGL7bcg1zTVPux3CNgLDlMuU3ENVSbWPG3DkczyOBJ8M13N
sLFi5Dy7MlBwlD1EXZrWFIBWCKvxvwmUl0Kzpgr2SNkrqVNRwyON2CyN5Z+s4IPD
oEb3vGCghESBh8Q=
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:59:12 2025 by rpki-client