Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3230322e302f32342d3234203d3e20323632363137.roa
File:                     3138372e36322e3230322e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          36pcCcaPpXVsSo/G0AxpwWWzEiV3P8AAmY+X4g1D/bA=
Subject key identifier:   F4:33:1A:31:CF:70:27:20:DB:AD:E4:FD:73:6F:1C:C6:D3:E8:C9:6A
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       57C1289C7E0CB3348E9CF60F6E9523C49BFB47AC
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3230322e302f32342d3234203d3e20323632363137.roa
Signing time:             Wed 05 Mar 2025 20:35:59 +0000
ROA not before:           Wed 05 Mar 2025 20:30:59 +0000
ROA not after:            Wed 04 Mar 2026 20:35:59 +0000
asID:                     262617
IP address blocks:        187.62.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
                          rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 07:18:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c1:28:9c:7e:0c:b3:34:8e:9c:f6:0f:6e:95:23:c4:9b:fb:47:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Mar  5 20:30:59 2025 GMT
            Not After : Mar  4 20:35:59 2026 GMT
        Subject: CN=F4331A31CF702720DBADE4FD736F1CC6D3E8C96A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c5:90:78:3c:67:0c:c2:16:5f:7e:23:26:8e:
                    c2:fc:14:2c:26:13:2e:a6:1a:b7:ef:08:13:2b:d8:
                    c7:c0:ff:33:8b:af:00:49:c8:a6:e4:80:c2:8d:57:
                    a8:cf:8a:55:7d:31:e6:76:6f:e7:bf:1b:de:d2:37:
                    82:aa:05:28:65:7a:36:d1:9c:28:37:1f:c6:af:82:
                    45:1c:17:e1:ce:6f:1f:ae:e3:c8:51:e4:6c:1c:3b:
                    82:4a:09:fb:a3:9d:32:1e:f2:c2:69:1b:85:94:96:
                    13:68:b9:ac:bd:2f:fa:9f:66:07:43:f2:07:38:b2:
                    6a:d8:4f:31:f3:a7:20:f9:b6:5a:f0:67:ff:78:d3:
                    d1:4d:88:8f:12:33:b1:a0:fb:b1:10:88:33:89:32:
                    17:5e:07:46:db:ef:14:e0:45:ac:e3:4a:75:64:63:
                    54:95:f9:80:78:7a:75:d6:af:38:e6:6b:bd:bb:ec:
                    a0:24:b0:7d:8c:0f:c5:69:46:ed:b1:00:50:f8:18:
                    57:b1:6a:7b:03:fa:e7:cd:87:d5:9f:a1:66:d0:0a:
                    01:e6:90:c0:61:8d:b5:ba:0d:53:34:35:ec:73:21:
                    12:91:b2:bb:dd:5f:7f:7c:c9:b4:2c:11:4e:16:55:
                    f5:40:88:67:c5:56:6e:24:6b:30:95:88:d0:e0:19:
                    f1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:33:1A:31:CF:70:27:20:DB:AD:E4:FD:73:6F:1C:C6:D3:E8:C9:6A
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3230322e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:ea:80:90:bd:09:33:91:c2:4e:e8:f2:dd:61:d5:d5:74:22:
         08:d8:fe:a7:a3:20:1c:c6:01:1f:9a:27:cd:a7:32:7a:f4:57:
         3e:12:15:ad:3b:61:f0:1f:84:74:6b:af:ea:1a:72:b9:7a:17:
         46:37:01:18:bc:6f:9b:dd:ef:f1:99:d3:f0:54:91:d6:68:e5:
         72:37:28:ac:cd:fd:bd:70:1b:52:fd:d8:26:a3:79:26:16:2b:
         b0:2c:35:9d:42:da:7f:c4:8c:d8:4c:0a:c5:0c:06:96:e0:f7:
         28:a5:0d:51:c8:3f:0a:16:60:a4:e4:05:79:4f:e7:27:46:1a:
         5b:a4:35:11:85:59:81:dc:63:88:9a:73:c6:15:0d:ff:7d:b5:
         50:d1:a8:2d:e9:08:03:4c:7a:b2:91:21:05:82:19:60:85:2d:
         3d:99:b1:a1:fc:7f:cf:96:5c:c9:26:07:71:5d:7a:54:cb:8e:
         f8:7c:89:ae:97:85:44:6f:25:fc:c6:0c:10:68:d8:16:9b:5a:
         77:d5:b2:31:46:e8:46:92:02:dd:56:35:37:7d:bc:6a:73:1c:
         36:ee:6d:1a:f2:ec:a6:7e:9a:52:b9:89:36:0e:15:8d:e0:fd:
         f9:fc:47:78:05:5c:da:56:75:5e:a8:47:72:89:93:61:76:71:
         de:d9:4c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:48:55 2025 by rpki-client