Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3230302e302f32332d3233203d3e20323632363137.roa
File:                     3138372e36322e3230302e302f32332d3233203d3e20323632363137.roa (raw, json)
Hash identifier:          paXLuEzXJcCdB9kklTF3/hm5jaV6aFGMyF/ZWaPGKt8=
Subject key identifier:   2B:45:E4:1C:47:05:B1:BE:92:C3:71:B6:B1:BD:76:99:CA:F1:3B:22
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       17E0A95D0272CF4060161500BF7DCFCEBDCF2C32
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3230302e302f32332d3233203d3e20323632363137.roa
Signing time:             Wed 03 Apr 2024 19:48:33 +0000
ROA not before:           Wed 03 Apr 2024 19:43:33 +0000
ROA not after:            Wed 02 Apr 2025 19:48:33 +0000
asID:                     262617
IP address blocks:        187.62.200.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
                          rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e0:a9:5d:02:72:cf:40:60:16:15:00:bf:7d:cf:ce:bd:cf:2c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Apr  3 19:43:33 2024 GMT
            Not After : Apr  2 19:48:33 2025 GMT
        Subject: CN=2B45E41C4705B1BE92C371B6B1BD7699CAF13B22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ee:91:81:19:76:fc:aa:93:22:e2:09:83:85:
                    ba:de:92:09:e9:d6:f4:0d:e6:d0:49:ac:8d:e9:25:
                    0e:ad:c4:f1:cf:9c:bf:d6:db:e8:57:0a:bb:bf:22:
                    40:86:43:5e:5e:5b:f6:67:38:25:c4:34:76:a4:3d:
                    44:2b:18:16:a2:c9:63:b7:43:1c:25:92:1e:51:3d:
                    4b:4a:23:2c:b5:4d:62:4c:68:94:d7:8b:07:9b:2d:
                    0d:6f:74:b6:1f:db:59:54:97:d8:4a:e3:8f:7f:95:
                    16:a6:73:99:1c:71:32:29:f2:cc:39:26:0f:7c:1a:
                    01:c6:cf:12:97:61:a3:d3:c7:b2:37:51:d6:49:73:
                    cc:b0:51:31:e7:61:75:c9:18:0c:0e:e7:a9:ba:0a:
                    3b:d9:40:b4:55:03:bc:78:84:c5:fb:d1:b9:5b:e6:
                    58:39:11:ec:ae:11:ec:02:e9:84:cf:11:61:b5:07:
                    81:39:b7:b4:c4:f9:d0:15:37:d0:69:b7:16:7a:8d:
                    c8:33:ea:ea:42:13:1a:76:62:97:b4:20:1c:53:50:
                    41:14:24:00:e4:2a:ee:b4:7a:b6:7b:11:48:f0:bd:
                    8f:51:5b:ec:1d:b3:f0:40:ba:41:6b:32:09:ca:c0:
                    c2:e0:08:4a:9e:e8:59:56:17:1a:b8:4f:cd:8c:31:
                    f8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:45:E4:1C:47:05:B1:BE:92:C3:71:B6:B1:BD:76:99:CA:F1:3B:22
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3230302e302f32332d3233203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:45:b5:5e:7c:49:7e:b1:af:5d:1f:92:3d:a5:d6:a1:20:92:
         d8:c6:1d:15:eb:61:d3:a7:1d:4f:68:a4:84:33:55:f9:e4:03:
         c8:62:b2:44:3b:e7:c5:eb:5e:a8:89:d4:81:9e:33:7a:a8:f7:
         c0:0a:1d:61:02:98:29:71:ae:0a:2b:a2:0f:13:4a:ed:3d:44:
         09:28:12:e4:dc:2c:a5:66:08:c7:ed:5e:7d:34:90:98:71:65:
         9e:0a:9a:0d:e9:67:0f:a3:b2:fa:1e:14:44:ad:f2:e0:92:57:
         7b:70:34:db:00:9a:c3:56:8c:b3:3d:ac:bc:fc:f6:2b:07:e8:
         a1:35:ac:0b:e8:89:7d:2a:e5:eb:0a:90:ad:f6:37:5a:76:06:
         62:45:c9:34:51:cc:d2:57:54:8a:aa:87:b7:98:76:e8:86:a1:
         d1:cb:d0:3b:ae:9e:62:e4:37:74:71:d8:7b:04:5a:43:29:8c:
         de:a1:48:1f:58:f8:ad:54:63:32:80:52:33:6f:95:c0:6d:b8:
         9a:95:92:a6:e8:ec:19:32:8d:14:a9:c0:de:88:02:1d:9e:30:
         24:62:d3:81:2d:74:65:70:2d:77:37:66:6f:3d:24:30:b4:10:
         4c:f9:3b:f7:72:74:15:d0:42:a5:65:e2:f5:88:45:4b:55:cb:
         c1:c7:14:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:26 2024 by rpki-client on console-ams.rpki-client.org