Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3136372e3234392e35362e302f32322d3232203d3e20323632353335.roa
File:                     3136372e3234392e35362e302f32322d3232203d3e20323632353335.roa (raw, json)
Hash identifier:          LwIgoG48+/B863Nlyi6QuoAsOTYnkfaFwL3a5zJN0SQ=
Subject key identifier:   DA:BC:EB:69:15:18:A1:A1:95:22:39:F8:7C:14:06:E9:79:1E:E2:42
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       7DCCCFBF0C8C6EAF2A11768DE2B9317A52B6F48F
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3136372e3234392e35362e302f32322d3232203d3e20323632353335.roa
Signing time:             Wed 09 Apr 2025 12:53:24 +0000
ROA not before:           Wed 09 Apr 2025 12:48:24 +0000
ROA not after:            Wed 08 Apr 2026 12:53:24 +0000
asID:                     262535
IP address blocks:        167.249.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 13:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:cc:cf:bf:0c:8c:6e:af:2a:11:76:8d:e2:b9:31:7a:52:b6:f4:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: Apr  9 12:48:24 2025 GMT
            Not After : Apr  8 12:53:24 2026 GMT
        Subject: CN=DABCEB691518A1A1952239F87C1406E9791EE242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3f:ae:c9:38:c2:ec:91:c7:94:94:3c:5e:12:
                    a8:e8:4a:bf:c6:12:17:e2:56:a9:f9:89:8b:51:fb:
                    61:99:7e:6d:2a:66:ce:ed:9a:9b:e9:26:77:15:98:
                    b7:f6:08:b5:f6:a2:97:5c:b1:c6:6b:c0:d8:43:58:
                    3e:27:d3:fc:b5:2f:b1:50:b5:04:8d:c9:7e:a5:40:
                    3a:76:7d:2a:0e:16:13:aa:b0:df:b6:b6:d1:b6:31:
                    43:e4:85:31:ea:fa:4b:da:d9:93:a0:32:61:78:ec:
                    1a:4c:4f:90:97:8c:57:bb:df:f7:bb:88:25:46:3c:
                    ec:03:7f:d9:c6:9c:76:05:83:52:f9:c1:ea:0b:03:
                    f6:99:ac:fd:4f:e7:3f:d6:bf:54:4c:d5:1c:24:bf:
                    40:d1:81:82:cd:fe:ce:48:2a:60:dd:dc:d9:43:21:
                    fa:37:2c:11:bb:6f:60:23:09:2a:cd:8b:c1:5a:4e:
                    4c:53:03:5f:20:75:81:46:60:ed:41:b5:25:7e:c3:
                    2b:4b:89:4f:14:81:e7:ee:09:33:8a:4f:e7:37:af:
                    3a:0f:fa:4e:96:ac:0b:3e:93:50:79:b1:74:ed:17:
                    3a:ca:88:5e:8b:22:b5:12:99:91:e6:12:b5:32:56:
                    b6:3e:25:95:17:59:25:95:b7:a3:b9:3f:02:c6:f8:
                    95:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:BC:EB:69:15:18:A1:A1:95:22:39:F8:7C:14:06:E9:79:1E:E2:42
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3136372e3234392e35362e302f32322d3232203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:15:08:ec:f4:4b:61:20:35:06:e2:61:35:9b:63:25:06:6a:
         71:ab:45:6e:36:48:44:3f:18:70:70:0c:09:11:ed:38:7e:9d:
         0b:fa:dd:36:b9:d8:99:8f:39:c6:59:74:07:90:97:3f:91:60:
         4f:a7:cd:6f:0b:81:3b:d5:4d:6d:b9:57:b4:7c:ae:51:f6:df:
         62:05:24:43:a4:1c:11:b4:0f:7e:da:64:24:00:75:f6:e7:67:
         7b:b3:4d:23:09:db:04:fd:1b:41:b0:c3:e1:70:2e:8f:dd:a5:
         7a:c0:56:d9:3b:32:07:96:99:86:34:37:be:e7:c9:0a:9f:96:
         bc:41:95:5d:2d:d5:4f:8a:21:5d:3c:0b:fe:f7:e8:52:97:cf:
         6c:c0:99:63:42:aa:b6:e1:8b:8e:5d:ee:0d:11:9e:81:f7:29:
         12:15:97:f2:61:19:64:76:27:14:f5:80:55:3a:ee:77:55:74:
         8c:a9:74:de:45:f9:c3:c2:b0:82:20:9b:52:3c:ad:e0:ea:85:
         65:2d:d1:f0:b7:70:6b:09:b4:a1:f9:8c:10:37:56:64:04:21:
         b5:7f:c7:fa:99:ee:56:fa:0e:6e:67:c1:2d:c0:6b:57:b7:0d:
         29:8a:62:97:ce:db:77:bc:88:af:a1:23:8e:f2:c8:8e:c1:f3:
         70:35:bf:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:21:29 2025 by rpki-client