Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3133382e33362e3139352e302f32342d3234203d3e20323632353335.roa
File:                     3133382e33362e3139352e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          +9BP/kz86m7/gQMGKp8ok4Y3IrHP/iiTwz7IDghqzjo=
Subject key identifier:   33:AA:7C:09:45:DA:BB:89:6C:5F:85:E2:7F:B6:07:CD:6D:9C:C2:E5
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       71C9AB088C8BBB08306C639D7D13152EC15BA9C7
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3133382e33362e3139352e302f32342d3234203d3e20323632353335.roa
Signing time:             Thu 12 Sep 2024 23:01:39 +0000
ROA not before:           Thu 12 Sep 2024 22:56:39 +0000
ROA not after:            Thu 11 Sep 2025 23:01:39 +0000
asID:                     262535
IP address blocks:        138.36.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c9:ab:08:8c:8b:bb:08:30:6c:63:9d:7d:13:15:2e:c1:5b:a9:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: Sep 12 22:56:39 2024 GMT
            Not After : Sep 11 23:01:39 2025 GMT
        Subject: CN=33AA7C0945DABB896C5F85E27FB607CD6D9CC2E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e6:d1:4a:ee:3f:1e:8a:b2:a9:d2:ac:90:57:
                    37:29:e4:c5:07:f9:00:7c:67:95:cb:ed:39:b4:91:
                    c6:0e:7f:ce:02:38:7d:b7:63:01:95:25:3e:2a:52:
                    e6:79:9d:86:87:03:8d:05:37:be:ed:35:01:9c:b6:
                    c9:2a:3d:6a:27:d5:01:f0:ce:80:35:1e:49:54:64:
                    08:3b:72:fd:1b:7b:cc:12:5f:06:74:73:8a:45:2e:
                    68:38:bd:be:9f:ef:fe:53:3e:fc:e8:c4:c8:79:03:
                    ba:3e:59:ec:d0:9d:de:a3:a2:17:8f:b7:13:ba:c8:
                    0b:c1:fe:7f:16:4c:c3:ca:1e:d8:4e:75:df:de:ea:
                    73:30:e5:df:09:30:82:ca:61:d6:25:79:4b:d9:5f:
                    a6:dd:00:81:0e:bc:bc:3f:3c:1e:af:33:47:9d:ff:
                    99:eb:1e:06:13:83:36:b1:ef:eb:b4:df:84:a4:ad:
                    d4:08:14:9b:34:03:2a:1a:00:0e:6f:9e:61:b4:1b:
                    70:3e:62:b6:df:b6:fc:63:a2:db:47:bd:96:ac:43:
                    d5:ee:a6:1d:36:af:b0:cb:9f:90:ba:b8:c4:14:fa:
                    a7:fd:23:8f:09:95:b0:42:23:0d:e3:8d:43:18:cf:
                    15:9e:f5:b2:bc:10:3b:7f:9f:a6:e2:1a:4d:3e:99:
                    a3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:AA:7C:09:45:DA:BB:89:6C:5F:85:E2:7F:B6:07:CD:6D:9C:C2:E5
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3133382e33362e3139352e302f32342d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:62:92:dd:28:fd:a8:a1:b0:95:dd:7c:eb:ce:9a:45:5a:3e:
         c5:c2:bb:b4:f2:a3:fe:61:03:45:fa:79:aa:31:45:dd:b1:bd:
         10:86:65:4c:9e:1b:af:c3:0d:f5:4a:bc:6f:0a:78:66:ef:29:
         70:11:da:6e:e7:eb:dd:f2:dc:e3:bb:5c:08:bc:bf:d4:95:de:
         8e:3a:e0:89:40:c1:0a:00:99:7e:e4:07:68:e0:1d:5c:95:55:
         25:f0:d4:a0:45:57:0f:20:f4:77:4e:02:c6:27:53:ab:20:6e:
         78:37:ee:1e:19:70:53:38:93:75:0b:73:46:3e:83:34:f3:07:
         95:ef:d3:ae:bd:f4:87:51:fa:b9:be:54:4a:73:fe:c8:a8:fe:
         3c:ea:9f:09:77:8c:ed:33:13:e9:d9:95:ea:f1:44:37:29:64:
         d6:a8:48:47:d9:93:cd:c9:57:b3:55:f1:d7:cf:f8:36:e9:5e:
         cc:0a:8b:60:b2:a2:6b:9a:25:7b:90:25:f8:aa:81:82:1c:e4:
         50:f7:35:2c:83:48:2f:e8:3c:37:38:e4:67:06:a0:dd:5f:d3:
         ca:09:29:16:29:a8:71:6b:b2:90:80:58:14:d4:c3:ea:67:04:
         07:3c:2c:3e:ba:e3:62:37:f6:0b:e3:76:fe:ff:40:88:39:ca:
         21:9e:9b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org