Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3136372e3234392e35362e302f32342d3234203d3e20323632353335.roa
File:                     3136372e3234392e35362e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          4ixclnoR0uKmszKKzVi0z0BB9dFuNudV3pSNRYvsMBM=
Subject key identifier:   FA:9B:9D:CC:1B:D7:AD:BC:1A:DA:DD:92:5E:27:E9:CA:5C:67:D5:2F
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       673BC296A2F4D7184C064F5ED9D6283EEDAE5E2D
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3136372e3234392e35362e302f32342d3234203d3e20323632353335.roa
Signing time:             Wed 08 May 2024 12:08:20 +0000
ROA not before:           Wed 08 May 2024 12:03:20 +0000
ROA not after:            Wed 07 May 2025 12:08:20 +0000
asID:                     262535
IP address blocks:        167.249.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:53:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:3b:c2:96:a2:f4:d7:18:4c:06:4f:5e:d9:d6:28:3e:ed:ae:5e:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: May  8 12:03:20 2024 GMT
            Not After : May  7 12:08:20 2025 GMT
        Subject: CN=FA9B9DCC1BD7ADBC1ADADD925E27E9CA5C67D52F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ba:aa:53:81:1e:12:64:37:df:db:e7:59:69:
                    69:da:d0:77:f8:66:fe:36:77:71:44:75:a5:f1:60:
                    76:5c:96:38:b2:28:96:26:c1:ca:bb:66:e3:ff:23:
                    f1:80:c8:b4:98:45:19:63:f8:09:4a:12:85:94:d5:
                    89:70:dc:05:e3:18:31:01:c0:93:7f:1a:8f:69:78:
                    92:94:f6:0f:c4:f0:71:2c:88:41:10:ac:2e:ff:1a:
                    81:e7:eb:53:3d:10:e9:35:0a:e8:e0:06:22:62:e8:
                    6c:66:03:5f:a0:aa:f4:58:18:71:15:6d:ed:56:ac:
                    0f:52:51:07:05:8a:70:73:ac:3c:4d:71:57:b3:60:
                    57:b4:5e:38:6f:7d:dc:db:5a:23:80:53:be:7d:73:
                    46:16:3f:63:5e:30:23:d6:87:33:ac:f7:63:ef:e3:
                    a8:50:7c:5c:94:00:52:15:c7:22:e2:02:b9:4b:cd:
                    93:be:91:1d:0c:7b:e0:6b:ca:7f:c8:67:2c:37:cc:
                    07:4c:8a:a3:69:2c:3d:c6:4a:70:0c:3e:f1:33:ea:
                    8b:9d:6b:e3:80:4e:66:6e:7b:ed:3a:91:a8:52:34:
                    c5:d4:1e:e4:7d:fd:91:ee:ef:f7:b6:c7:9a:32:91:
                    a4:d7:e2:3c:4c:09:45:42:3a:bb:b0:11:74:ba:fd:
                    b8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9B:9D:CC:1B:D7:AD:BC:1A:DA:DD:92:5E:27:E9:CA:5C:67:D5:2F
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3136372e3234392e35362e302f32342d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:42:ff:0b:f2:c6:0d:f0:45:0f:5d:cc:5c:4c:99:d7:45:6c:
         15:a3:d3:23:fd:ad:9e:d2:dd:29:41:00:52:65:fd:e8:28:d6:
         19:bc:df:84:60:4c:e3:99:60:cd:db:d3:b8:b2:68:32:c0:2a:
         b4:c6:61:aa:f6:62:89:72:f9:e7:7c:4a:17:ea:83:a8:57:ba:
         79:46:f4:b9:25:35:eb:72:f5:05:9e:98:48:de:38:24:16:fb:
         cd:7e:38:08:66:e0:f8:92:ce:4c:6a:ec:16:f1:68:df:24:e2:
         21:04:19:21:9b:02:11:0c:a6:aa:a6:1a:26:f8:32:1b:02:26:
         eb:d4:d2:c7:da:b1:20:b9:12:d6:50:5c:e7:4f:87:68:1f:c2:
         58:d0:b0:07:96:c6:68:4a:7b:e3:04:b1:fb:cc:62:26:77:4a:
         fe:2b:a7:03:c7:f6:36:0c:b6:d3:7e:fa:91:28:70:41:89:80:
         8c:3f:ae:98:fb:44:e4:40:bd:be:e6:fb:87:fa:7d:dc:71:b5:
         96:08:f5:ab:4a:95:e2:29:87:19:87:2f:3e:a8:a8:57:77:33:
         1b:7d:f2:5a:35:03:30:79:9e:5f:c2:cb:fc:46:3b:00:8a:8b:
         33:23:e8:dd:a4:28:c0:33:26:f5:a5:82:ec:eb:49:f8:d2:a8:
         4a:9d:06:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:59 2024 by rpki-client on console-fra.rpki-client.org