Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131372e302f32342d3234203d3e20323733363831.roa
File:                     3230312e3135392e3131372e302f32342d3234203d3e20323733363831.roa (raw, json)
Hash identifier:          7n3pfC6fHDA1r87ALfS3HZy/1ne/HvUAmxw4MVRHzgg=
Subject key identifier:   69:C1:70:A8:F8:92:3D:22:14:9A:FE:07:67:26:94:87:ED:2A:A2:70
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       18BBCB3570D022D572B13BA1BE3ECC34C540757B
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131372e302f32342d3234203d3e20323733363831.roa
Signing time:             Wed 08 May 2024 12:08:28 +0000
ROA not before:           Wed 08 May 2024 12:03:28 +0000
ROA not after:            Wed 07 May 2025 12:08:28 +0000
asID:                     273681
IP address blocks:        201.159.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:bb:cb:35:70:d0:22:d5:72:b1:3b:a1:be:3e:cc:34:c5:40:75:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: May  8 12:03:28 2024 GMT
            Not After : May  7 12:08:28 2025 GMT
        Subject: CN=69C170A8F8923D22149AFE0767269487ED2AA270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c8:a0:3c:a8:49:6f:d8:06:0c:49:74:d5:e4:
                    eb:3b:15:1b:95:30:68:63:0e:05:22:db:46:a2:f4:
                    83:f7:f3:f3:b6:e8:4e:ba:93:ec:72:0d:7b:aa:b5:
                    d3:87:be:d5:95:ab:af:40:1b:e9:85:e1:08:e9:07:
                    8b:a8:29:c7:6a:cd:3a:64:41:83:86:fb:40:a8:be:
                    0c:94:13:b3:62:f4:ed:bf:c9:0e:e7:57:54:8d:3a:
                    4f:26:1d:32:94:a9:5a:1f:ae:fb:a2:6a:8d:69:1c:
                    8b:24:6e:d8:9d:e0:b2:d2:fc:f5:2e:57:7e:ad:59:
                    38:c1:b0:bd:2e:c1:14:4e:6e:4b:9a:1b:ba:75:2d:
                    8a:79:51:b7:a2:10:3b:cb:be:87:91:2e:8f:3e:b1:
                    90:ee:aa:97:0e:50:5b:ec:1e:97:c8:4b:21:55:9e:
                    3d:e1:ba:6a:94:f4:59:a6:01:cd:15:ba:78:9d:98:
                    cc:ac:d4:e6:57:ba:14:54:19:67:a9:75:fe:73:24:
                    23:46:9c:ab:31:ac:9f:0a:7c:78:39:ac:23:4b:51:
                    5f:70:74:35:da:59:02:9b:ee:a7:55:ee:76:78:66:
                    23:0d:a2:e2:af:c5:ec:21:6c:47:79:97:1a:00:c4:
                    a7:e9:21:a4:6e:dc:d7:cb:35:92:f1:15:aa:cb:31:
                    cb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C1:70:A8:F8:92:3D:22:14:9A:FE:07:67:26:94:87:ED:2A:A2:70
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131372e302f32342d3234203d3e20323733363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:19:5a:77:c5:59:cb:4d:cb:22:83:8f:46:4d:9a:96:38:ed:
         b1:78:2f:c5:88:af:6c:77:6e:09:e6:8b:9d:81:f7:86:2c:01:
         cb:63:02:e7:07:4c:ba:7c:6a:32:9b:2c:91:e1:4b:c5:0d:e0:
         c1:99:06:67:c9:6d:7e:70:bd:83:13:c3:67:eb:86:d9:98:8c:
         11:2d:84:ba:9a:d6:79:01:2b:99:25:e0:55:fe:53:49:92:23:
         e5:1c:99:ee:c7:d7:65:b4:84:5c:49:23:a6:4c:92:1b:88:56:
         63:cf:44:82:cd:01:0a:62:16:f7:8f:bf:85:e3:38:e7:45:a0:
         94:b2:7a:de:6d:45:e8:f3:f7:66:1c:f8:38:0d:ff:43:72:5f:
         04:1a:fa:69:94:e3:63:fe:df:ad:5f:07:b5:56:df:d6:d1:85:
         d2:1e:e9:ea:e3:ca:08:12:d9:77:e8:01:08:01:75:29:ca:de:
         8c:01:9d:27:a4:bc:02:7d:dd:d1:18:bd:4c:f6:a0:a8:6d:36:
         59:b5:11:f2:d3:d2:f0:e5:ab:9f:48:3f:be:e4:2f:2a:42:2d:
         b6:4c:b2:dc:dd:ae:93:ea:c6:aa:5b:52:0c:17:f4:ff:d7:ff:
         94:4f:fc:91:b4:39:4d:0c:43:a8:86:82:24:1d:4a:5e:7c:b9:
         8c:34:3c:23
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGLvLNXDQItVysTuhvj7MNMVAdXswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhDNzcyRjgwMjk0MjAxODYwMTQ4ODA5NUFBNkM1NDdB
MzY5NDc4MjAeFw0yNDA1MDgxMjAzMjhaFw0yNTA1MDcxMjA4MjhaMDMxMTAvBgNV
BAMTKDY5QzE3MEE4Rjg5MjNEMjIxNDlBRkUwNzY3MjY5NDg3RUQyQUEyNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDByKA8qElv2AYMSXTV5Os7FRuV
MGhjDgUi20ai9IP38/O26E66k+xyDXuqtdOHvtWVq69AG+mF4QjpB4uoKcdqzTpk
QYOG+0CovgyUE7Ni9O2/yQ7nV1SNOk8mHTKUqVofrvuiao1pHIskbtid4LLS/PUu
V36tWTjBsL0uwRRObkuaG7p1LYp5UbeiEDvLvoeRLo8+sZDuqpcOUFvsHpfISyFV
nj3humqU9FmmAc0VunidmMys1OZXuhRUGWepdf5zJCNGnKsxrJ8KfHg5rCNLUV9w
dDXaWQKb7qdV7nZ4ZiMNouKvxewhbEd5lxoAxKfpIaRu3NfLNZLxFarLMcuTAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUacFwqPiSPSIUmv4HZyaUh+0qonAwHwYDVR0j
BBgwFoAUKMdy+AKUIBhgFIgJWqbFR6NpR4IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXFtMkFvNDVtOWI3a3JDQm91UWtyWTdSVjlYVzZwV1p1cnIxRXM1R2d4
cmkvMC8yOEM3NzJGODAyOTQyMDE4NjAxNDg4MDk1QUE2QzU0N0EzNjk0NzgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4Qzc3MkY4MDI5NDIwMTg2
MDE0ODgwOTVBQTZDNTQ3QTM2OTQ3ODIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VxbTJBbzQ1bTliN2tyQ0JvdVFrclk3UlY5WFc2cFdadXJyMUVzNUdneHJpLzAv
MzIzMDMxMmUzMTM1MzkyZTMxMzEzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMzM2MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMmfdTANBgkqhkiG9w0BAQsFAAOCAQEAYxla
d8VZy03LIoOPRk2aljjtsXgvxYivbHduCeaLnYH3hiwBy2MC5wdMunxqMpsskeFL
xQ3gwZkGZ8ltfnC9gxPDZ+uG2ZiMES2EuprWeQErmSXgVf5TSZIj5RyZ7sfXZbSE
XEkjpkySG4hWY89Egs0BCmIW94+/heM450WglLJ63m1F6PP3Zhz4OA3/Q3JfBBr6
aZTjY/7frV8HtVbf1tGF0h7p6uPKCBLZd+gBCAF1KcrejAGdJ6S8An3d0Ri9TPag
qG02WbUR8tPS8OWrn0g/vuQvKkIttkyy3N2uk+rGqltSDBf0/9f/lE/8kbQ5TQxD
qIaCJB1KXny5jDQ8Iw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 15:56:41 2024 by rpki-client on console-ams.rpki-client.org