Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131362e302f32322d3232203d3e20323733363831.roa
File:                     3230312e3135392e3131362e302f32322d3232203d3e20323733363831.roa (raw, json)
Hash identifier:          2xzyrr9QO9baGCSi+fujwVHjnvY9agktm8mwzFEWoMc=
Subject key identifier:   67:B9:04:4D:9A:F0:DF:B0:8C:95:0B:09:63:D7:47:34:E7:43:9D:9B
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       7E751E50A0FA64961E620FB39BF834C712D88490
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131362e302f32322d3232203d3e20323733363831.roa
Signing time:             Wed 08 May 2024 12:08:22 +0000
ROA not before:           Wed 08 May 2024 12:03:22 +0000
ROA not after:            Wed 07 May 2025 12:08:22 +0000
asID:                     273681
IP address blocks:        201.159.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:75:1e:50:a0:fa:64:96:1e:62:0f:b3:9b:f8:34:c7:12:d8:84:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: May  8 12:03:22 2024 GMT
            Not After : May  7 12:08:22 2025 GMT
        Subject: CN=67B9044D9AF0DFB08C950B0963D74734E7439D9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:22:03:f2:69:1c:9a:b0:e3:57:67:a3:ef:64:
                    4f:9f:f2:f4:d0:2e:e0:2d:8d:6a:44:a5:de:0d:ad:
                    a7:a1:cc:ab:b8:b0:2f:7d:67:dd:d7:e3:83:ea:1b:
                    6e:d4:05:19:57:b1:46:1b:63:19:bb:a9:69:f2:b5:
                    95:b5:c8:b0:c9:02:d5:63:f9:f4:29:af:ad:3e:b8:
                    95:b6:fc:c3:b1:bd:65:2f:d7:65:d8:69:89:64:83:
                    db:9f:55:40:c6:a5:a6:68:82:7b:41:03:19:1a:75:
                    9c:c8:da:d5:14:72:2f:ab:f3:c7:bf:25:c3:1a:69:
                    c1:3c:d6:b2:17:2a:e9:ac:e8:ad:69:1f:89:f8:06:
                    75:27:08:7a:4e:d9:9a:13:bb:30:4b:53:4a:64:21:
                    df:8f:6a:12:87:04:8e:e9:28:85:fd:7b:79:61:9f:
                    58:83:5d:84:c1:12:74:a4:77:48:72:25:d6:3f:12:
                    c9:02:eb:d9:ae:30:9c:9d:df:62:cd:e4:bc:4c:d2:
                    fd:b4:7e:38:b4:38:bd:c8:ff:a0:5e:52:29:69:cc:
                    64:81:32:c8:2d:e6:f0:13:c3:13:e1:db:bc:7e:1c:
                    4d:8d:1c:82:8a:d8:57:8d:c1:a9:af:cd:d3:65:fa:
                    2e:d1:ef:fe:2f:09:f0:60:72:3c:f3:48:8a:63:2c:
                    04:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B9:04:4D:9A:F0:DF:B0:8C:95:0B:09:63:D7:47:34:E7:43:9D:9B
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131362e302f32322d3232203d3e20323733363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:ba:a9:d4:d7:45:5f:87:82:d4:3d:4c:68:5c:2b:ed:be:88:
         c8:94:4c:ec:a6:50:fc:d5:f1:d2:5b:ca:a9:a8:2c:77:90:ff:
         40:b3:d8:e9:5b:e8:ca:27:34:c5:78:cb:b1:58:4a:13:67:de:
         5a:9d:f0:3d:41:d2:7f:62:4d:1f:5d:0a:e8:a8:a3:2d:26:fc:
         89:bc:05:87:4d:f2:86:f3:79:a8:c7:6d:d4:e9:09:fd:6d:2d:
         1c:e3:db:73:dd:da:59:d2:04:e1:1f:25:4e:31:ad:5f:9a:26:
         7b:3b:50:53:e0:59:1e:19:04:3b:7d:46:c3:6f:e4:ea:cd:d4:
         7b:2e:52:97:d4:08:2f:3c:f0:ec:e7:0e:9a:87:e3:c8:32:d9:
         5a:c9:26:f9:35:5e:78:39:ea:be:10:9a:58:f6:37:96:11:ef:
         c8:e7:79:9e:a6:91:b0:10:8c:38:33:c8:1f:66:d3:f3:22:9e:
         db:a7:16:af:13:b2:36:17:26:33:7b:ba:af:58:8a:20:71:4a:
         fc:ca:ba:91:89:2a:f8:6b:d5:13:ec:46:24:6b:cd:20:6d:a4:
         68:ec:85:ff:ee:39:17:e5:bf:ac:79:6d:ac:fa:85:d1:ce:99:
         85:ed:e6:ba:c7:88:26:62:e7:47:63:b6:1a:25:4a:da:89:5a:
         67:bd:ce:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 15:20:17 2024 by rpki-client on console-fra.rpki-client.org