Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3230302e302f32322d3232203d3e20323632363137.roa
File:                     3138372e36322e3230302e302f32322d3232203d3e20323632363137.roa (raw, json)
Hash identifier:          kmadz9LU26tcP5R1hDcoWRNdXOpC5pHr3ZWC8NkVIjc=
Subject key identifier:   44:21:A4:52:94:E1:95:EB:E2:18:15:BF:CE:93:FA:C2:AF:E6:8B:2F
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       26ADE7988F30656ECC5C130CE1267A29FCE2DB60
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3230302e302f32322d3232203d3e20323632363137.roa
Signing time:             Wed 03 Apr 2024 19:48:20 +0000
ROA not before:           Wed 03 Apr 2024 19:43:20 +0000
ROA not after:            Wed 02 Apr 2025 19:48:20 +0000
asID:                     262617
IP address blocks:        187.62.200.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
                          rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ad:e7:98:8f:30:65:6e:cc:5c:13:0c:e1:26:7a:29:fc:e2:db:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Apr  3 19:43:20 2024 GMT
            Not After : Apr  2 19:48:20 2025 GMT
        Subject: CN=4421A45294E195EBE21815BFCE93FAC2AFE68B2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e5:63:ba:a3:43:f8:4e:67:5f:bf:91:cb:ad:
                    aa:bc:8e:17:59:fc:cd:6a:c3:df:d7:83:d0:2b:64:
                    a7:55:0b:c1:04:27:42:90:aa:79:ad:c4:82:f6:0e:
                    83:c0:57:4a:1d:e4:a0:46:73:cb:d1:f9:15:58:b9:
                    29:93:99:2e:2e:a6:42:83:3b:f7:c2:0a:c3:c3:c9:
                    e8:9a:f1:73:0f:5c:9c:10:10:09:31:6f:a7:7a:05:
                    6b:69:b4:36:aa:5e:43:41:61:88:20:40:20:09:e1:
                    23:e3:3c:be:0a:23:05:63:6a:01:b0:a8:8f:28:e2:
                    35:01:6c:65:8b:34:24:32:d1:fb:61:df:5c:00:c7:
                    b5:12:83:65:9f:0f:65:5e:65:74:95:85:d0:42:4b:
                    66:ff:41:e8:28:c7:07:38:0d:fc:30:e7:13:18:dc:
                    9f:77:41:d2:9a:1c:c7:08:9d:5c:41:f7:da:cc:78:
                    76:77:56:91:f1:3d:4a:08:ca:70:cd:3f:89:29:a4:
                    95:53:3f:c2:80:9d:d5:05:18:06:26:ed:c2:65:a6:
                    08:ea:3b:89:fe:eb:64:dd:19:c5:af:db:29:7c:b4:
                    81:d4:5f:67:99:d2:3a:eb:66:50:a3:43:67:4f:72:
                    40:21:74:cd:fa:7a:4e:49:06:bc:13:c3:c9:9c:ef:
                    90:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:21:A4:52:94:E1:95:EB:E2:18:15:BF:CE:93:FA:C2:AF:E6:8B:2F
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3230302e302f32322d3232203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:1b:c7:c2:9d:bc:60:b6:a0:ef:9d:22:8d:1f:dd:6a:e6:d2:
         d7:44:d9:2c:c7:24:26:20:6b:f3:bd:21:87:40:e9:c6:24:9e:
         3c:55:52:3d:a3:ae:78:95:84:2b:24:6a:77:00:b0:6f:04:7c:
         d0:b4:62:b2:22:36:34:52:56:2c:71:81:e8:b2:d8:b0:ef:05:
         52:13:89:b1:92:48:39:0f:4f:26:ff:38:8c:eb:af:26:a5:f0:
         7f:9c:05:14:42:f0:1f:a3:99:9b:ee:e8:13:5f:aa:62:2f:d2:
         7a:58:0d:14:f9:61:ad:89:49:03:60:cc:2d:95:79:fe:73:d3:
         f0:ca:ed:68:4b:0f:25:f5:84:cd:75:a4:af:84:8f:41:d6:23:
         38:b1:09:e1:52:b9:fd:af:ef:a2:cc:c1:ee:f2:b0:34:b5:76:
         0f:59:c5:90:bd:c8:57:7d:72:1c:a6:0d:a1:b2:94:55:0b:8b:
         d2:bf:ad:06:ba:0e:80:17:d8:af:22:87:2a:ea:f9:64:8d:ea:
         e5:0e:cd:04:1c:a3:54:e8:60:4f:15:c9:9b:31:01:fe:24:02:
         a2:25:17:95:e1:81:13:68:c0:51:4b:9c:4d:d8:05:0b:82:a7:
         49:95:3c:04:1e:f8:de:ab:35:7e:b8:27:ec:f2:d6:9e:37:df:
         a3:a7:ea:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:19 2024 by rpki-client on console-fra.rpki-client.org