Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131382e302f32342d3234203d3e20323632353335.roa
File:                     3230312e3135392e3131382e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          Ceutn3znrQ/QGVbWCz3TBbIDVjbqRwwAdl+tcnzx+bM=
Subject key identifier:   D1:AD:45:C7:C8:EE:E7:2A:FD:0E:2A:4F:B0:18:46:D2:E6:A9:AD:1F
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       40429DA592B339C0326ACEA72818A29779A432F8
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131382e302f32342d3234203d3e20323632353335.roa
Signing time:             Mon 22 Jul 2024 13:09:17 +0000
ROA not before:           Mon 22 Jul 2024 13:04:17 +0000
ROA not after:            Mon 21 Jul 2025 13:09:17 +0000
asID:                     262535
IP address blocks:        201.159.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:42:9d:a5:92:b3:39:c0:32:6a:ce:a7:28:18:a2:97:79:a4:32:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: Jul 22 13:04:17 2024 GMT
            Not After : Jul 21 13:09:17 2025 GMT
        Subject: CN=D1AD45C7C8EEE72AFD0E2A4FB01846D2E6A9AD1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:16:78:6b:05:02:52:26:55:8b:15:6d:c1:33:
                    54:a8:51:f2:cf:1e:6d:a4:46:57:d2:ea:ad:7b:a6:
                    7b:8a:ca:de:2d:6e:e1:b1:26:92:fa:8b:ca:7e:18:
                    34:d1:3b:9f:46:2a:c7:bd:12:d7:33:b1:69:78:84:
                    86:2d:83:d6:08:97:e9:70:61:8a:66:13:c2:84:65:
                    d5:0e:38:00:f0:01:09:c5:4e:b7:d3:c1:30:16:65:
                    67:9e:9c:6a:3a:2d:74:1b:17:7c:8e:ef:6f:5b:d8:
                    45:b6:51:3d:c8:87:9c:ab:25:e0:63:c4:f3:ad:24:
                    6b:bc:6e:da:79:d3:84:74:d4:e6:04:12:e8:0c:45:
                    2d:1a:46:f1:8a:2d:bb:89:1f:73:61:77:fd:a7:91:
                    c1:7e:44:44:b2:45:71:ab:f6:9b:15:ce:07:f9:8e:
                    f1:33:ee:5e:f8:9a:9f:9b:d2:a8:cf:4d:51:a5:8c:
                    a1:ee:1a:ec:43:9f:f2:94:68:37:4a:6a:77:67:fc:
                    a5:e3:d8:15:8f:75:62:f7:07:a3:d4:cc:39:2a:27:
                    30:84:68:1e:44:61:5d:8e:ee:00:66:66:26:1a:66:
                    17:3b:17:7b:c9:35:b5:e6:d7:fe:2e:54:4b:6f:ff:
                    47:78:85:f3:3a:03:a4:bd:f8:99:bc:0c:85:ae:0e:
                    ea:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AD:45:C7:C8:EE:E7:2A:FD:0E:2A:4F:B0:18:46:D2:E6:A9:AD:1F
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131382e302f32342d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:b2:51:eb:9b:65:ea:f4:bb:3f:c6:4b:8c:25:8b:0c:ee:e6:
         92:5e:73:77:bf:bc:b7:bb:b9:8f:b7:c4:68:56:ad:86:a4:7d:
         bc:41:f1:7a:7a:6a:f7:40:ec:10:ff:7b:78:36:98:c0:77:9c:
         b2:3c:0b:b3:83:35:d1:4d:01:6e:f3:c0:c2:e8:bc:f1:12:51:
         04:fb:45:43:c3:90:6c:97:06:26:bb:77:22:e3:51:ae:c6:25:
         9d:c6:ad:29:16:ae:cb:a9:0a:07:f8:3a:ff:9c:d9:66:d2:38:
         cd:f4:1a:e9:db:85:49:bb:81:f6:ef:2c:93:6f:8c:d4:48:06:
         10:c6:93:6e:7b:6e:5b:4b:ee:e3:c1:e2:3e:44:2e:18:0a:5a:
         4d:28:98:d5:e5:a6:ba:51:d1:ca:f5:d6:0c:59:36:96:31:b3:
         2f:74:da:b6:44:0e:d1:0d:ba:d6:2f:0b:fc:b8:29:be:da:f1:
         9f:d5:87:54:3c:ec:67:3b:9d:0c:01:de:c9:08:a3:fb:5e:bc:
         aa:a4:9c:38:47:c1:61:79:2c:6c:22:9c:a4:79:ba:ac:e7:f2:
         aa:e6:7e:e8:a1:cc:11:8d:3f:2c:b8:e3:db:6a:94:93:07:13:
         3c:6a:1b:ca:3c:5e:a3:9b:9f:c9:93:ea:1d:15:b5:e5:6e:a1:
         cc:9b:84:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org