Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3136372e3234392e35372e302f32342d3234203d3e20323632353335.roa
File:                     3136372e3234392e35372e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          tpVk2SOKYvV8Una/1Zv4KbKDzvEkvsVeIqiLJB90faM=
Subject key identifier:   08:FA:94:CC:EF:8D:95:E4:7F:E9:F7:58:76:96:82:68:67:8B:98:20
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       75DF15AB60F23166569A218C905A8B0063E88DB3
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3136372e3234392e35372e302f32342d3234203d3e20323632353335.roa
Signing time:             Wed 08 May 2024 12:08:20 +0000
ROA not before:           Wed 08 May 2024 12:03:20 +0000
ROA not after:            Wed 07 May 2025 12:08:20 +0000
asID:                     262535
IP address blocks:        167.249.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:df:15:ab:60:f2:31:66:56:9a:21:8c:90:5a:8b:00:63:e8:8d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: May  8 12:03:20 2024 GMT
            Not After : May  7 12:08:20 2025 GMT
        Subject: CN=08FA94CCEF8D95E47FE9F75876968268678B9820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:57:b0:c3:0f:fa:a4:07:5f:64:ca:7f:85:09:
                    51:4f:c5:6f:ec:f8:22:a0:69:72:de:33:e3:e0:7c:
                    89:96:6d:3c:97:60:33:6e:73:a9:18:29:76:8c:06:
                    eb:02:4c:ee:1b:20:b0:b1:b1:b3:f9:5e:e6:ad:f7:
                    45:4d:5d:ff:c9:57:eb:b5:92:5b:97:cd:46:e3:c5:
                    48:9c:d1:37:38:99:32:d7:53:87:54:82:fb:06:39:
                    97:f0:ab:56:74:0c:74:4d:3f:6e:1a:b4:12:f4:71:
                    db:51:49:46:17:2c:61:c2:e8:ec:3b:85:f6:5d:0b:
                    f8:68:17:1e:30:43:8e:66:94:88:2d:d4:85:05:20:
                    f0:0d:e2:53:74:a6:1b:00:65:be:db:3e:26:ea:e9:
                    d3:7c:a0:76:9b:bf:51:d0:ea:0a:be:55:42:9f:92:
                    27:4a:eb:ce:5b:d3:89:97:28:a3:7a:11:5a:32:52:
                    46:0a:64:fd:82:5b:fc:52:cf:3e:55:36:03:e4:06:
                    dc:b2:f7:fd:ac:ac:c2:91:27:7c:1b:8c:29:94:01:
                    f5:e4:41:99:dc:1c:c3:5a:e0:59:04:1b:ed:fa:b5:
                    da:53:ad:69:15:e3:28:70:17:f5:8a:19:ed:fb:18:
                    0a:8f:d3:56:b9:2c:16:e1:63:66:39:42:3d:94:16:
                    40:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:FA:94:CC:EF:8D:95:E4:7F:E9:F7:58:76:96:82:68:67:8B:98:20
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3136372e3234392e35372e302f32342d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:b1:99:84:52:cf:7f:d3:64:9b:34:05:c5:21:ae:bc:3a:f6:
         44:bc:97:43:06:39:66:03:26:53:da:07:53:0b:b9:9b:c6:b7:
         78:04:c1:4f:28:f5:ac:fa:14:0b:46:a8:50:81:9f:db:7c:c6:
         c5:a7:91:7b:10:88:01:22:5d:cd:f4:58:13:fb:f2:e2:78:65:
         09:30:13:4c:27:d2:1c:17:3f:1b:a5:43:ca:40:42:8b:75:b0:
         d9:cc:0e:d2:92:8b:7f:eb:07:c3:01:b2:5a:34:d8:68:6b:c0:
         7f:bc:1d:0f:c8:83:40:36:98:38:78:9f:3c:a6:e2:69:7b:26:
         bd:21:4d:26:8b:66:f8:97:98:20:68:23:23:95:3e:4f:7d:ae:
         02:d5:8b:90:50:32:87:3b:13:40:ab:e4:a4:be:44:2e:ea:90:
         9f:05:df:8c:30:f0:7b:43:9b:90:3b:e6:e6:57:28:4a:06:17:
         8a:bd:3a:c7:19:a6:31:27:a2:4a:f4:b4:d7:76:5f:85:80:27:
         84:4f:f2:1e:80:d8:4b:91:9f:df:9b:0d:d8:6b:c1:06:91:d4:
         38:90:17:84:fb:e9:d2:eb:60:24:2e:e4:53:20:52:e1:ec:6c:
         77:cd:7b:8c:b3:2e:8c:f9:9e:3a:7c:59:58:6b:89:64:4a:5a:
         ab:5e:a7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 15:20:17 2024 by rpki-client on console-fra.rpki-client.org