Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3230302e302f32342d3234203d3e20323632363137.roa
File:                     3138372e36322e3230302e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          S7+Vf/n4l0F72mPSkLmbsSiDHYTLaIUUNPxaiRXELQA=
Subject key identifier:   E5:0E:AF:D1:B2:22:D5:D1:6B:6D:A4:6D:59:4E:3F:6D:75:AB:84:F0
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       2B5E38C6C015F8549C2C5429F3F8659CE732D5B6
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3230302e302f32342d3234203d3e20323632363137.roa
Signing time:             Wed 03 Apr 2024 19:48:33 +0000
ROA not before:           Wed 03 Apr 2024 19:43:33 +0000
ROA not after:            Wed 02 Apr 2025 19:48:33 +0000
asID:                     262617
IP address blocks:        187.62.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
                          rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:5e:38:c6:c0:15:f8:54:9c:2c:54:29:f3:f8:65:9c:e7:32:d5:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Apr  3 19:43:33 2024 GMT
            Not After : Apr  2 19:48:33 2025 GMT
        Subject: CN=E50EAFD1B222D5D16B6DA46D594E3F6D75AB84F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:88:c3:ac:fe:9b:1b:24:c2:8a:fa:dc:06:70:
                    1c:bf:81:9a:86:86:cb:8b:23:a0:9c:f2:b2:2e:a9:
                    96:9e:81:6e:fd:d6:d3:5d:77:fd:27:07:9f:a7:14:
                    66:42:23:dc:e6:c4:57:06:44:9c:47:61:7f:c0:c0:
                    de:c4:28:87:91:0e:66:77:cb:7b:7c:94:b8:4d:da:
                    d2:e3:43:bd:f3:f2:9a:d1:df:d6:38:27:99:67:4e:
                    5e:87:41:4c:84:88:52:31:d4:17:0a:85:37:2f:90:
                    9c:30:2b:cc:f7:ff:ea:18:9f:74:6c:35:53:42:12:
                    13:fd:fe:e2:d0:4c:d2:eb:ba:21:12:cd:3e:2f:35:
                    85:ac:e1:c7:a8:90:62:50:5c:8f:96:fa:83:9a:27:
                    64:85:f3:8e:0a:5d:43:9f:16:2e:d7:c9:e1:7b:ca:
                    7f:76:31:d5:9c:69:6b:53:e4:25:1d:1a:2c:46:bd:
                    5c:1b:86:07:20:d6:19:1b:d8:f0:b9:0b:3f:aa:35:
                    76:46:42:92:12:35:a2:44:a1:c1:72:9a:d5:18:95:
                    30:12:e0:3f:4b:d7:0c:a3:8f:aa:fa:d6:55:17:3c:
                    40:0d:e3:aa:ec:a8:9d:3e:ef:6c:ea:44:36:d8:f7:
                    a6:e9:e8:64:94:f6:72:ad:03:c5:76:ec:75:b4:97:
                    50:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:0E:AF:D1:B2:22:D5:D1:6B:6D:A4:6D:59:4E:3F:6D:75:AB:84:F0
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3230302e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:21:4b:60:58:8e:5b:a5:0e:fb:a7:9e:a0:9b:6f:0d:dd:c9:
         99:cb:d8:5d:db:18:6a:4e:c5:30:64:16:95:db:0b:39:ef:60:
         8e:90:af:b3:aa:f2:6c:21:a4:42:0a:48:6b:93:f9:ce:66:d3:
         ca:70:2c:c9:b0:da:52:4e:6e:55:bf:ad:ae:3c:4d:a8:3f:b9:
         03:aa:05:51:0b:6d:70:12:a9:bc:db:21:fb:ab:31:e8:4d:ac:
         fb:b6:e9:69:56:84:b0:b8:aa:2b:c0:45:bf:a7:6a:53:6a:ca:
         a2:14:b8:f9:1b:00:31:f9:b0:1c:1d:fd:81:ef:0e:3e:0b:75:
         f4:09:9c:fe:c0:72:e0:02:f8:80:75:de:7f:04:c9:39:f3:b0:
         73:06:90:1a:bc:b2:60:a6:89:58:f1:0f:a3:0c:fc:08:59:0c:
         e3:d8:09:92:1e:9c:d2:a9:69:47:7c:8b:4c:6a:8b:58:30:4c:
         67:1e:d4:d3:62:4a:34:bf:26:55:22:11:37:09:e2:ef:af:6e:
         ff:3a:29:93:d5:5e:e7:7c:94:dd:bf:68:ea:f5:c1:be:42:7b:
         9b:69:62:04:b5:54:56:8a:e1:50:30:a8:0b:25:47:70:eb:9c:
         a0:82:10:0a:5a:f8:cb:79:f7:d2:5e:99:d7:e9:1f:92:f5:11:
         42:95:94:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 07:56:08 2024 by rpki-client on console-fra.rpki-client.org