Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3136372e3234392e35382e302f32342d3234203d3e20323632353335.roa
File:                     3136372e3234392e35382e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          GPccZGworHuE3nOaHWwgXyS5XqNKnYr276N1cZV6LQA=
Subject key identifier:   7A:B3:07:A8:FA:6F:F1:34:EE:F5:5A:02:9D:F2:17:A3:C1:4B:99:20
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       03108E3109D221D926F38371512B7CC38077E89E
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3136372e3234392e35382e302f32342d3234203d3e20323632353335.roa
Signing time:             Wed 11 Sep 2024 20:57:07 +0000
ROA not before:           Wed 11 Sep 2024 20:52:07 +0000
ROA not after:            Wed 10 Sep 2025 20:57:07 +0000
asID:                     262535
IP address blocks:        167.249.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:10:8e:31:09:d2:21:d9:26:f3:83:71:51:2b:7c:c3:80:77:e8:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: Sep 11 20:52:07 2024 GMT
            Not After : Sep 10 20:57:07 2025 GMT
        Subject: CN=7AB307A8FA6FF134EEF55A029DF217A3C14B9920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:67:47:a2:7a:bd:83:f4:0f:ce:e8:9a:8e:88:
                    22:1f:95:12:fd:4d:aa:04:ea:2c:9b:3d:ba:c4:f7:
                    20:e7:d7:8e:dd:1c:1f:ce:18:eb:3b:ed:ca:68:e4:
                    4a:f1:fc:53:2e:6a:11:80:88:8d:39:2f:a3:e0:fd:
                    d4:7f:e3:38:26:c8:d8:e7:2e:41:5f:fc:24:1a:a2:
                    4d:17:d1:4d:20:ad:50:66:e9:62:87:8a:38:58:d4:
                    b0:5f:c0:dc:7c:78:e8:d5:8f:7c:99:6b:50:01:28:
                    8c:35:a8:1f:75:9b:bf:c5:6d:9e:38:cd:a2:fe:31:
                    3a:1d:ce:35:b7:97:e1:a1:cb:01:2e:fe:7d:ce:71:
                    52:42:6e:f1:05:6c:00:1e:3e:fa:ad:a5:76:ca:80:
                    ff:79:d6:2d:2c:32:75:ae:e0:96:5b:d3:ec:c0:20:
                    6e:5e:3f:8a:8e:ac:f6:25:bb:b5:30:d2:ef:e6:33:
                    c5:3b:bf:34:c1:21:dc:c9:e4:98:35:72:5b:53:c1:
                    20:0c:bd:04:6e:30:3f:4a:92:07:89:2a:02:97:1f:
                    ee:9c:7b:93:d5:f4:d9:22:94:16:a2:e2:8c:fa:b9:
                    70:b7:b0:6d:82:74:51:a8:72:6b:e7:c3:37:73:ef:
                    8e:5e:ed:96:39:1c:fb:ed:09:07:9c:0b:66:e9:26:
                    f7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B3:07:A8:FA:6F:F1:34:EE:F5:5A:02:9D:F2:17:A3:C1:4B:99:20
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3136372e3234392e35382e302f32342d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:f9:ce:cd:99:3e:d9:70:cb:a8:84:87:53:7c:79:a1:c1:72:
         d8:f5:e6:81:d5:66:1e:0e:c3:35:08:c3:c2:63:23:0b:ed:a6:
         2f:17:f0:c3:e0:29:2c:d9:cf:ee:9d:45:3d:f0:0e:4b:e1:38:
         53:a1:60:7d:f1:f1:5d:d8:23:d4:92:d7:d2:37:de:01:15:c2:
         c3:71:a6:c0:2b:3a:a5:6e:9d:cd:ee:14:1c:0b:eb:5e:63:f8:
         fc:ce:9b:e3:21:43:81:1f:81:3a:58:42:e4:4a:e9:14:10:f8:
         16:ca:8b:56:1a:fc:0e:37:db:99:e8:15:84:68:73:57:09:56:
         e8:31:60:59:f1:da:25:ad:a7:01:a3:06:01:5c:4d:67:83:47:
         b9:b9:a8:92:49:fb:2b:e5:dd:f4:d3:e5:4c:61:a0:fb:a3:5c:
         05:88:a6:90:a1:cc:5d:53:a2:e9:04:cb:02:85:72:1a:35:10:
         33:9a:84:d5:ea:f1:b0:34:47:53:4f:de:60:db:cb:19:b9:b5:
         f6:64:f6:40:29:08:4d:40:51:20:d8:e5:00:b5:ca:86:44:1e:
         64:71:a6:d3:de:34:57:d7:c1:90:88:77:4e:ed:27:15:05:e6:
         cd:a5:6e:de:c2:d8:c3:d7:cd:bd:dd:e4:ab:60:24:12:84:1d:
         23:30:3d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:31 2024 by rpki-client on console-fra.rpki-client.org