Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3136372e3234392e35362e302f32332d3233203d3e20323632353335.roa
File:                     3136372e3234392e35362e302f32332d3233203d3e20323632353335.roa (raw, json)
Hash identifier:          ET1Zo+mdbABL1b6KezeJIUeSS7/xYEBMxOu/cRNAIbk=
Subject key identifier:   30:86:CF:1D:66:1C:76:A7:14:82:85:A3:D1:71:61:35:06:1D:87:79
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       41B8E3CE3539949858C95E6FBE87161DE4DCC004
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3136372e3234392e35362e302f32332d3233203d3e20323632353335.roa
Signing time:             Wed 08 May 2024 12:08:26 +0000
ROA not before:           Wed 08 May 2024 12:03:26 +0000
ROA not after:            Wed 07 May 2025 12:08:26 +0000
asID:                     262535
IP address blocks:        167.249.56.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b8:e3:ce:35:39:94:98:58:c9:5e:6f:be:87:16:1d:e4:dc:c0:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: May  8 12:03:26 2024 GMT
            Not After : May  7 12:08:26 2025 GMT
        Subject: CN=3086CF1D661C76A7148285A3D1716135061D8779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1a:3b:fc:2a:cb:97:39:83:a3:9b:f2:96:d8:
                    b0:70:74:3c:b8:a1:4f:dc:5e:ce:35:d5:c1:ca:8b:
                    9b:16:a1:c3:a6:45:14:7e:ec:77:22:b9:d0:73:d6:
                    a4:d8:6f:56:2d:30:9e:0d:4f:f4:66:36:ae:e2:13:
                    c3:4a:67:5e:96:2b:b1:6d:68:c3:61:f1:9e:78:9a:
                    b9:15:8c:9c:50:03:2b:cd:38:7f:7d:88:8d:3d:2e:
                    0b:4a:8b:46:3c:1a:fc:f8:f0:73:80:c4:3d:9f:b1:
                    23:51:8a:96:81:d8:60:3a:09:98:d4:a2:af:83:db:
                    79:c8:db:0a:9a:b1:6d:2d:d2:64:b0:27:78:48:b3:
                    1c:97:f5:bf:04:8b:ea:7c:2b:41:5c:b6:3b:6a:07:
                    c0:1b:af:c8:ca:2b:ba:f9:15:2e:5b:c1:08:af:7e:
                    fc:a5:7b:47:c7:e6:df:45:86:0d:1d:1a:a8:bc:3e:
                    2d:22:b9:38:08:b5:9d:e4:0c:ef:77:16:be:f6:af:
                    49:1f:fc:bb:b1:38:e0:13:ea:91:85:0e:33:51:b4:
                    85:7a:79:43:66:ed:98:52:c9:5a:a1:02:c1:69:d4:
                    06:2d:38:2c:bd:d9:65:d4:5f:84:cb:d5:2e:7b:a0:
                    09:36:01:78:cc:36:9d:d1:23:7b:5d:fe:4a:7a:e4:
                    8a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:86:CF:1D:66:1C:76:A7:14:82:85:A3:D1:71:61:35:06:1D:87:79
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3136372e3234392e35362e302f32332d3233203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:31:44:32:38:6d:f7:34:dc:55:09:27:a6:ce:99:fe:8a:ac:
         6e:1a:28:80:2f:f6:23:59:26:bb:3d:78:65:a5:7e:15:aa:8e:
         1e:33:e6:fa:be:30:70:d5:0a:cc:e8:58:fa:f7:91:8c:1a:35:
         ce:e3:1d:c4:1c:04:26:9d:39:b0:63:25:4b:ee:53:63:1e:6b:
         ee:d5:d5:b4:de:6a:c5:d2:88:df:ec:ec:91:12:1b:40:6f:61:
         43:33:9e:75:c5:1c:04:3f:e4:a8:e9:fe:fd:ab:d2:cc:70:6f:
         e8:d6:71:2a:e2:a5:ab:bb:fd:9e:d2:be:c5:61:6a:e2:d5:97:
         17:4a:7d:aa:43:8f:1f:1e:27:b5:de:d3:ad:a5:a2:9a:2f:3f:
         fd:b4:f1:71:bc:0c:8d:cb:f9:c7:6b:67:70:b1:44:2f:60:a9:
         88:2c:dc:1d:4f:12:fe:cd:ef:6a:b8:81:5c:75:e8:2e:48:76:
         0c:03:60:e6:7a:b8:9b:f4:f7:c1:6f:33:a3:d7:33:6a:88:29:
         2f:0f:8e:9c:86:cd:31:64:e0:6b:08:f8:44:cb:24:e1:04:83:
         16:8d:84:31:49:37:b5:00:8d:8d:2d:9d:76:92:74:32:6f:5e:
         bd:84:b6:c8:e9:22:fa:fa:fc:f4:66:fe:a6:21:88:b3:77:0c:
         0b:6d:b2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 15:20:17 2024 by rpki-client on console-fra.rpki-client.org