Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3136372e3234392e35362e302f32342d3234203d3e20323632353335.roa
File:                     3136372e3234392e35362e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          gzm5ygWsAPTcURNlBqQKkMjEK1DAamnC9jKg9eVt9jE=
Subject key identifier:   F3:F5:ED:5B:88:0A:88:C0:1D:90:6E:5F:81:3A:35:16:8C:C9:E5:49
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       5CE63C32D2AB0BF213E0C9A4931DA850ACB457E5
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3136372e3234392e35362e302f32342d3234203d3e20323632353335.roa
Signing time:             Wed 09 Apr 2025 12:53:31 +0000
ROA not before:           Wed 09 Apr 2025 12:48:31 +0000
ROA not after:            Wed 08 Apr 2026 12:53:31 +0000
asID:                     262535
IP address blocks:        167.249.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 13:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e6:3c:32:d2:ab:0b:f2:13:e0:c9:a4:93:1d:a8:50:ac:b4:57:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: Apr  9 12:48:31 2025 GMT
            Not After : Apr  8 12:53:31 2026 GMT
        Subject: CN=F3F5ED5B880A88C01D906E5F813A35168CC9E549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:31:39:16:29:07:19:25:ba:ab:79:a1:77:7c:
                    eb:9c:40:7e:6e:50:46:70:8f:4d:95:4f:1a:5e:b2:
                    d4:8a:69:e8:71:33:89:0f:4c:ed:f6:09:12:97:48:
                    40:33:23:3b:5c:71:14:12:0a:54:04:b3:86:70:9f:
                    e4:58:73:82:b1:51:d8:e2:9e:84:ee:38:07:a2:a0:
                    51:5a:02:6e:c0:29:ac:73:97:0d:5c:d1:79:51:83:
                    14:f9:01:1c:3e:7f:f0:f6:13:92:af:3b:8f:ce:cc:
                    cf:c9:04:96:d4:10:5e:23:f9:cd:85:94:bb:96:91:
                    c7:b9:26:e6:84:40:e8:f4:88:65:9a:9d:0f:34:18:
                    e3:bc:ba:a0:ff:0d:fd:62:1a:f1:85:0b:d7:e7:33:
                    68:3b:e1:b6:dc:88:58:a4:10:5e:2a:c9:f9:9e:46:
                    67:f6:97:45:a8:bc:f8:c5:23:b3:5f:2c:40:e1:59:
                    50:fb:53:bf:5c:72:a2:6b:10:9c:67:93:45:5d:8f:
                    05:26:de:4e:16:ec:36:25:c3:8c:71:b5:fa:59:93:
                    79:09:10:f1:1f:f6:5a:d6:86:9c:6d:7a:85:fa:9c:
                    8a:9b:ef:1d:35:e4:b0:dc:7a:fe:2c:72:42:c8:de:
                    f0:6f:40:e7:29:a3:e7:f0:62:38:8f:65:b1:7c:6c:
                    2c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F5:ED:5B:88:0A:88:C0:1D:90:6E:5F:81:3A:35:16:8C:C9:E5:49
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3136372e3234392e35362e302f32342d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:7e:de:5b:ed:cb:e2:39:1c:9a:f4:12:d4:33:ea:64:88:67:
         c9:03:30:af:ec:dd:b1:b6:d7:b2:20:54:b4:01:be:5d:ee:d7:
         21:7d:db:cc:d0:34:1d:33:80:d2:6c:a4:a2:f9:bc:bf:b3:0f:
         8c:a3:34:55:0c:9f:0a:c7:65:03:bc:b8:48:1e:e2:96:88:51:
         58:fc:92:d6:d3:73:63:37:9a:51:ce:50:d3:8c:b6:d9:e4:ed:
         bb:44:1e:d9:5d:5b:03:b2:f4:20:1c:39:81:39:2f:2a:98:09:
         5d:42:52:fa:91:25:96:cb:b0:47:78:2d:21:87:d9:8f:3d:cf:
         5f:9a:dc:77:5d:7d:a9:b9:eb:0d:60:45:31:54:6b:2e:92:dc:
         03:da:15:47:d7:31:b9:e2:76:83:5f:df:43:93:f2:02:02:0d:
         b3:80:ea:11:2f:bc:71:10:dd:3e:8a:54:73:75:cc:89:cf:62:
         9e:e3:d5:3b:39:8f:d3:bf:1b:46:0e:20:6b:21:ac:ca:20:97:
         85:42:25:66:db:74:f0:e5:bf:57:d9:d4:e8:1d:35:00:89:3b:
         c5:58:c9:41:8c:c1:58:da:17:21:2c:ab:12:10:79:16:82:3c:
         e3:4c:c6:f3:fa:67:83:12:0e:eb:c6:43:5e:48:0c:76:9a:64:
         c2:9a:40:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:23:14 2025 by rpki-client