Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131392e302f32342d3234203d3e20323733363831.roa
File:                     3230312e3135392e3131392e302f32342d3234203d3e20323733363831.roa (raw, json)
Hash identifier:          i7lZNmS3J4AgpWEe6Wn8rr9HuYTQ4As3IP77qqLEhn4=
Subject key identifier:   48:E8:19:F9:1A:9D:69:1E:0A:26:CB:EE:DA:AE:43:62:B8:B7:67:0E
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       67FD7D1FC0BC0287DB81854CE0EF10A534F53A82
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131392e302f32342d3234203d3e20323733363831.roa
Signing time:             Wed 08 May 2024 12:08:24 +0000
ROA not before:           Wed 08 May 2024 12:03:24 +0000
ROA not after:            Wed 07 May 2025 12:08:24 +0000
asID:                     273681
IP address blocks:        201.159.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:fd:7d:1f:c0:bc:02:87:db:81:85:4c:e0:ef:10:a5:34:f5:3a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: May  8 12:03:24 2024 GMT
            Not After : May  7 12:08:24 2025 GMT
        Subject: CN=48E819F91A9D691E0A26CBEEDAAE4362B8B7670E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d6:10:a4:e3:44:ea:c4:ef:27:2e:e4:0e:d0:
                    81:ed:63:88:ce:68:db:00:26:7f:43:21:8a:f0:15:
                    06:f1:81:46:f5:a1:71:9d:8f:62:7f:16:53:60:2c:
                    91:06:84:97:d6:55:5d:4e:2d:6b:e4:f0:28:a3:4c:
                    f1:ce:89:49:20:ac:79:88:f0:23:c6:0f:20:d1:4f:
                    82:43:4d:f2:21:15:4a:3f:c5:0e:89:53:81:03:13:
                    08:50:0d:a7:10:44:39:f6:66:e8:3e:81:c8:76:e2:
                    6a:f4:a1:3c:31:aa:0a:f0:cf:3f:ed:83:5a:69:01:
                    ba:c9:4f:91:22:cf:3f:48:4b:aa:75:e6:1d:2d:5c:
                    f0:a1:e7:66:8a:76:39:95:7d:db:c5:5a:3b:52:c2:
                    8d:48:f4:31:dd:c8:6e:28:fa:a7:c2:4f:df:27:f8:
                    53:3c:96:4d:62:32:db:0e:45:8f:1b:e4:1e:84:dc:
                    04:04:76:fe:8c:62:9c:48:bb:23:3e:ed:e9:a7:33:
                    cc:20:da:9d:a5:a9:44:ff:2b:5f:86:cc:48:5f:9d:
                    10:d5:d0:95:c3:b7:d7:56:73:cc:1e:a5:80:ed:c0:
                    f4:68:9f:06:4a:35:46:f1:1e:a9:46:cd:ad:6c:3b:
                    8d:c4:db:77:6a:33:b0:06:64:e1:b9:3b:df:d5:ce:
                    86:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E8:19:F9:1A:9D:69:1E:0A:26:CB:EE:DA:AE:43:62:B8:B7:67:0E
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131392e302f32342d3234203d3e20323733363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:ba:7d:d8:a6:e7:43:0c:f2:26:7b:97:39:4f:61:75:6d:8a:
         bc:f1:4b:21:d6:e5:64:7a:3e:56:9d:70:5a:32:00:dd:3d:8c:
         ea:00:59:f8:86:87:53:d8:cb:d5:df:08:84:1d:ae:f4:db:64:
         c7:69:74:60:34:68:47:4a:38:fa:b3:de:d8:68:ec:47:ad:33:
         98:78:d7:2d:1a:e0:ad:dc:b2:aa:77:b7:f7:4c:7f:5e:15:fc:
         f5:d0:a3:ae:69:6b:35:11:85:3c:2d:9c:6f:35:6b:c3:77:0b:
         20:5e:65:87:a8:a4:6d:b0:2d:47:c8:09:9a:b6:aa:ab:b5:64:
         32:e4:98:55:2d:f4:bd:b8:e3:b4:8e:95:60:42:34:82:b3:b8:
         79:95:f9:f0:ca:fe:26:cb:c8:64:38:f8:ce:18:a9:fc:4e:06:
         9b:3e:16:ad:4c:c4:aa:e0:5c:86:09:91:99:f7:e2:6f:a7:30:
         9b:88:a4:b8:99:15:01:4c:66:db:fd:3f:3a:26:a5:6f:fb:29:
         7a:41:4c:ca:9b:1f:6d:de:e6:8b:84:9e:3b:e1:e7:e5:64:ac:
         f6:3c:a4:49:fc:55:e0:29:d4:01:07:a3:72:a4:da:ea:44:7a:
         19:be:47:e9:c4:be:03:84:bb:3c:1a:08:c3:ba:77:05:42:1f:
         75:c8:15:6e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZ/19H8C8AofbgYVM4O8QpTT1OoIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhDNzcyRjgwMjk0MjAxODYwMTQ4ODA5NUFBNkM1NDdB
MzY5NDc4MjAeFw0yNDA1MDgxMjAzMjRaFw0yNTA1MDcxMjA4MjRaMDMxMTAvBgNV
BAMTKDQ4RTgxOUY5MUE5RDY5MUUwQTI2Q0JFRURBQUU0MzYyQjhCNzY3MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD1hCk40TqxO8nLuQO0IHtY4jO
aNsAJn9DIYrwFQbxgUb1oXGdj2J/FlNgLJEGhJfWVV1OLWvk8CijTPHOiUkgrHmI
8CPGDyDRT4JDTfIhFUo/xQ6JU4EDEwhQDacQRDn2Zug+gch24mr0oTwxqgrwzz/t
g1ppAbrJT5Eizz9IS6p15h0tXPCh52aKdjmVfdvFWjtSwo1I9DHdyG4o+qfCT98n
+FM8lk1iMtsORY8b5B6E3AQEdv6MYpxIuyM+7emnM8wg2p2lqUT/K1+GzEhfnRDV
0JXDt9dWc8wepYDtwPRonwZKNUbxHqlGza1sO43E23dqM7AGZOG5O9/VzoaVAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUSOgZ+RqdaR4KJsvu2q5DYri3Zw4wHwYDVR0j
BBgwFoAUKMdy+AKUIBhgFIgJWqbFR6NpR4IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXFtMkFvNDVtOWI3a3JDQm91UWtyWTdSVjlYVzZwV1p1cnIxRXM1R2d4
cmkvMC8yOEM3NzJGODAyOTQyMDE4NjAxNDg4MDk1QUE2QzU0N0EzNjk0NzgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4Qzc3MkY4MDI5NDIwMTg2
MDE0ODgwOTVBQTZDNTQ3QTM2OTQ3ODIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VxbTJBbzQ1bTliN2tyQ0JvdVFrclk3UlY5WFc2cFdadXJyMUVzNUdneHJpLzAv
MzIzMDMxMmUzMTM1MzkyZTMxMzEzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMzM2MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMmfdzANBgkqhkiG9w0BAQsFAAOCAQEAQ7p9
2KbnQwzyJnuXOU9hdW2KvPFLIdblZHo+Vp1wWjIA3T2M6gBZ+IaHU9jL1d8IhB2u
9Ntkx2l0YDRoR0o4+rPe2GjsR60zmHjXLRrgrdyyqne390x/XhX89dCjrmlrNRGF
PC2cbzVrw3cLIF5lh6ikbbAtR8gJmraqq7VkMuSYVS30vbjjtI6VYEI0grO4eZX5
8Mr+JsvIZDj4zhip/E4Gmz4WrUzEquBchgmRmffib6cwm4ikuJkVAUxm2/0/Oial
b/spekFMypsfbd7mi4SeO+Hn5WSs9jykSfxV4CnUAQejcqTa6kR6Gb5H6cS+A4S7
PBoIw7p3BUIfdcgVbg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 15:56:41 2024 by rpki-client on console-ams.rpki-client.org