Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/2/3138372e36322e37362e302f32322d3234203d3e20323639373133.roa
File:                     3138372e36322e37362e302f32322d3234203d3e20323639373133.roa (raw, json)
Hash identifier:          r0WJYkMe+0PpBuWkfXU06GvOae+CYSkCspiWq8Eo2Zw=
Subject key identifier:   60:33:09:7E:CC:C4:8F:B2:0F:C9:D4:75:7E:1C:7E:D9:12:DE:FC:E1
Certificate issuer:       /CN=714DBA4ABCB1DE4B97627125F21027C00193E5D9
Certificate serial:       33C8C39D092A1F23C289736F332CCD59A3D3E600
Authority key identifier: 71:4D:BA:4A:BC:B1:DE:4B:97:62:71:25:F2:10:27:C0:01:93:E5:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/714DBA4ABCB1DE4B97627125F21027C00193E5D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/2/3138372e36322e37362e302f32322d3234203d3e20323639373133.roa
Signing time:             Tue 23 Apr 2024 11:37:58 +0000
ROA not before:           Tue 23 Apr 2024 11:32:58 +0000
ROA not after:            Tue 22 Apr 2025 11:37:58 +0000
asID:                     269713
IP address blocks:        187.62.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/2/714DBA4ABCB1DE4B97627125F21027C00193E5D9.crl
                          rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/2/714DBA4ABCB1DE4B97627125F21027C00193E5D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/714DBA4ABCB1DE4B97627125F21027C00193E5D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c8:c3:9d:09:2a:1f:23:c2:89:73:6f:33:2c:cd:59:a3:d3:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=714DBA4ABCB1DE4B97627125F21027C00193E5D9
        Validity
            Not Before: Apr 23 11:32:58 2024 GMT
            Not After : Apr 22 11:37:58 2025 GMT
        Subject: CN=6033097ECCC48FB20FC9D4757E1C7ED912DEFCE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:3d:3e:ed:b2:c8:00:89:15:9c:2f:b6:cf:
                    b7:44:16:6a:b4:cf:0a:0e:29:e1:96:45:db:5d:44:
                    c0:c9:b3:ca:43:95:e3:95:ef:bf:73:19:94:2b:35:
                    fc:48:d0:28:03:f5:e9:34:1e:46:28:dd:50:5b:e0:
                    fd:86:53:00:69:86:a9:da:85:f9:9c:3c:24:8d:3b:
                    8f:38:e4:8a:f4:7e:8a:59:f9:47:98:df:1b:d9:3d:
                    80:f2:e6:14:7a:32:61:c6:df:32:9a:ab:b8:f5:20:
                    14:3d:5e:9d:e1:dd:a3:47:ee:a3:3f:61:99:7a:60:
                    73:b2:d0:2b:98:04:15:d2:f8:ae:3a:62:80:50:b2:
                    68:eb:21:bc:dc:df:4d:61:24:83:6c:6e:64:9b:c6:
                    14:2b:ba:3e:20:1d:1a:2a:3a:c1:f9:19:ef:70:18:
                    c4:19:d2:4f:9a:7d:d3:7d:0b:9b:9d:71:d6:ea:7e:
                    35:0b:50:35:88:ba:f3:75:51:54:e8:91:8e:4c:9b:
                    9e:45:33:81:36:92:f9:83:e1:3f:89:43:ab:13:a8:
                    bb:8c:f5:33:6c:e7:be:ae:f7:82:98:6a:d1:a4:af:
                    f8:7b:68:87:3d:9a:3f:05:64:ed:0c:2a:f6:a0:4b:
                    6d:79:05:e1:ff:85:24:1b:00:06:87:0d:d9:13:53:
                    fc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:33:09:7E:CC:C4:8F:B2:0F:C9:D4:75:7E:1C:7E:D9:12:DE:FC:E1
            X509v3 Authority Key Identifier:
                keyid:71:4D:BA:4A:BC:B1:DE:4B:97:62:71:25:F2:10:27:C0:01:93:E5:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/2/714DBA4ABCB1DE4B97627125F21027C00193E5D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/714DBA4ABCB1DE4B97627125F21027C00193E5D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/2/3138372e36322e37362e302f32322d3234203d3e20323639373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:6b:de:05:b1:d3:04:27:e7:2a:38:94:98:c3:f0:a1:d3:0f:
         ed:51:c9:0a:c8:c7:9c:53:84:36:36:e2:48:7e:30:ee:d9:49:
         8a:77:5e:a5:9f:d0:fc:4c:e8:04:e5:a4:98:5f:08:f3:df:36:
         3b:2c:9b:a1:c1:b4:72:b8:b4:fa:cf:0e:35:ac:a4:3f:63:73:
         e5:37:10:cd:ac:04:43:87:63:2f:8d:90:d4:07:2b:e3:c1:39:
         fa:39:a5:8f:20:47:de:ed:77:a9:cd:76:79:7a:64:17:44:68:
         11:ed:73:a5:75:41:84:a5:65:e7:ad:6e:66:96:3e:d9:e8:ae:
         15:d6:d2:77:e1:e9:46:91:09:8d:3a:84:8a:56:78:90:18:0a:
         18:8a:44:1f:3d:7d:9b:0b:b0:99:af:6f:d3:54:69:56:99:5a:
         f0:89:9d:8d:24:e8:58:ac:00:4a:89:2f:e9:24:e8:47:b3:9a:
         a0:24:9f:49:bd:9c:00:bd:50:fe:ba:9e:73:4f:b4:da:bb:da:
         14:13:df:5a:70:9e:8b:cc:d6:3c:30:e7:89:72:60:f2:81:4b:
         76:61:36:b2:25:fd:59:f8:a9:20:59:99:e8:85:e6:a3:c7:d2:
         a7:8c:65:fc:7e:99:28:33:01:fb:65:6f:6d:10:55:46:e6:4d:
         fc:97:7f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:45:01 2024 by rpki-client on console-ams.rpki-client.org