Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131362e302f32332d3233203d3e20323733363831.roa
File:                     3230312e3135392e3131362e302f32332d3233203d3e20323733363831.roa (raw, json)
Hash identifier:          zNnL9SzJt79ImD2uPViOKDodBSpJYWRPBrD4l8qGBb0=
Subject key identifier:   F2:61:09:32:FD:55:80:39:EE:D1:78:4E:6C:F3:E1:F4:8A:59:D0:70
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       0A340853613AE1A80A6B4C8F67930C2646F106E5
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131362e302f32332d3233203d3e20323733363831.roa
Signing time:             Wed 08 May 2024 12:08:32 +0000
ROA not before:           Wed 08 May 2024 12:03:32 +0000
ROA not after:            Wed 07 May 2025 12:08:32 +0000
asID:                     273681
IP address blocks:        201.159.116.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:34:08:53:61:3a:e1:a8:0a:6b:4c:8f:67:93:0c:26:46:f1:06:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: May  8 12:03:32 2024 GMT
            Not After : May  7 12:08:32 2025 GMT
        Subject: CN=F2610932FD558039EED1784E6CF3E1F48A59D070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2d:8e:45:f9:09:87:e3:64:39:bf:55:25:a9:
                    83:5f:b6:0c:d0:81:30:eb:27:c6:26:fb:3b:53:45:
                    a8:c0:4c:e3:b6:51:e4:bb:26:c8:fc:14:f8:b3:b1:
                    88:f1:be:a9:f5:7a:c8:c8:53:52:f8:67:1f:1a:ca:
                    17:8a:0c:cd:1e:c6:5d:b4:a7:b4:ed:cd:0b:cd:fc:
                    bc:41:12:70:bb:e4:af:c0:2c:2f:b2:41:6e:b8:e2:
                    e1:88:3d:74:6f:b5:3d:4e:19:54:fa:59:a8:e1:91:
                    a6:df:33:3e:77:b7:ab:f5:26:ad:66:e6:9c:a4:45:
                    6c:4c:92:33:99:24:40:8e:8e:93:68:1d:ab:ae:19:
                    50:6e:e3:b7:00:dc:6a:c0:e3:fb:a9:8d:de:4e:1b:
                    a5:f6:6e:46:74:34:4d:b7:1d:92:e9:96:3f:10:eb:
                    36:9f:9a:82:c4:69:19:bd:7d:3e:18:6b:a0:c1:a6:
                    cf:2c:6c:7b:62:99:99:8a:42:ef:68:3a:72:98:3f:
                    37:21:0a:b7:84:63:e0:8a:aa:0c:dc:96:12:9b:47:
                    e0:4a:7f:7c:8e:e8:c2:15:31:c0:c1:eb:61:16:38:
                    ea:bd:1c:4f:3c:8f:41:41:3b:c3:ac:cf:31:86:89:
                    54:14:2b:65:23:5d:73:00:3a:c9:34:0d:52:7b:04:
                    26:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:61:09:32:FD:55:80:39:EE:D1:78:4E:6C:F3:E1:F4:8A:59:D0:70
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131362e302f32332d3233203d3e20323733363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:cc:86:3a:27:59:b8:a9:b0:49:2f:e3:6e:5e:ca:09:07:46:
         7c:f1:6e:b0:04:42:88:4e:2d:a9:eb:5f:d7:fe:55:c3:36:48:
         47:dd:ce:b2:24:37:8d:ff:5b:5b:b2:0c:be:9e:90:68:ed:6a:
         4d:71:10:b9:88:4b:c3:bb:64:bd:92:5f:8a:94:07:99:5f:3e:
         5f:9c:a3:2f:6a:bf:de:29:7b:02:c9:da:95:cb:db:3c:8e:0f:
         f6:8d:a1:25:ae:f5:2c:c8:46:2f:c9:ad:a1:7b:a6:49:df:fc:
         a3:a3:a7:75:d0:ae:2f:12:77:7d:57:0f:db:cc:cb:49:92:d3:
         69:92:4c:43:ea:f2:f3:0e:18:eb:39:7d:d7:41:d4:44:71:76:
         59:a6:e7:1c:0d:c8:5e:13:6c:e2:38:6a:a8:ad:c9:70:aa:7a:
         a0:25:2c:c2:91:5e:e4:b9:a5:16:1f:b5:3a:55:8f:20:f2:8e:
         d6:60:19:70:fd:cf:5a:41:b3:f5:24:e9:c5:12:aa:2f:a7:fb:
         80:ea:32:14:4d:61:93:de:6f:bb:8a:68:5f:df:15:d0:30:e9:
         d5:cf:f4:36:43:33:26:09:98:f9:f9:c1:0d:e6:3e:eb:f7:ff:
         b5:57:20:d1:4f:a7:5c:4a:83:51:87:14:e3:d5:eb:55:ec:48:
         b8:29:8c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 15:56:41 2024 by rpki-client on console-ams.rpki-client.org