Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3136372e3234392e35392e302f32342d3234203d3e20323632353335.roa
File:                     3136372e3234392e35392e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          3LD/WfoTXYAlSURXI/jHDmqdRvif/pWA6LwuEmOPPbY=
Subject key identifier:   02:C3:16:D8:72:B4:EE:52:44:D9:F9:6B:16:E9:B7:23:C8:16:A4:EE
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       04737698BBDBDB13A7F196B880DB0A373F9B00F7
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3136372e3234392e35392e302f32342d3234203d3e20323632353335.roa
Signing time:             Wed 09 Apr 2025 12:53:29 +0000
ROA not before:           Wed 09 Apr 2025 12:48:29 +0000
ROA not after:            Wed 08 Apr 2026 12:53:29 +0000
asID:                     262535
IP address blocks:        167.249.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 13:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:73:76:98:bb:db:db:13:a7:f1:96:b8:80:db:0a:37:3f:9b:00:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: Apr  9 12:48:29 2025 GMT
            Not After : Apr  8 12:53:29 2026 GMT
        Subject: CN=02C316D872B4EE5244D9F96B16E9B723C816A4EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ba:e0:80:ba:b5:5e:88:80:be:14:34:3d:65:
                    4b:d5:d5:37:ed:1c:7c:3a:74:07:28:53:fa:c8:fc:
                    41:ac:28:1d:6a:4f:1d:f7:2c:b6:38:9f:20:fe:7b:
                    7b:4a:3f:de:4b:13:bc:7d:2f:61:67:76:56:fa:6e:
                    c7:a8:ab:f4:d7:fe:39:6c:9a:68:05:ce:2a:1e:5b:
                    16:8c:1e:a5:4e:d3:ec:9f:6b:c3:dd:d4:6b:56:cf:
                    89:7f:61:6c:d7:7c:9e:6d:fd:9c:6a:94:37:8b:75:
                    e1:da:a1:e6:15:93:ba:89:3b:00:09:d9:bc:a4:d4:
                    bc:c9:f4:5d:d4:10:bf:3f:7d:b0:c8:a2:83:95:1b:
                    f0:67:a5:ec:ba:cf:b6:ce:ad:ca:40:12:90:38:38:
                    5c:d2:43:b5:c2:ba:83:ed:23:7a:07:37:b7:fe:88:
                    d7:36:65:0c:ba:6d:04:2f:16:09:b1:39:51:0c:e1:
                    82:13:1b:44:e0:1b:96:d9:71:45:9b:ba:88:b9:7d:
                    b7:7a:e1:6f:26:83:04:be:2c:37:36:45:29:d0:fb:
                    54:72:70:8d:58:6e:b9:80:b4:25:be:c7:35:bb:70:
                    c2:ea:40:4b:aa:67:13:38:b6:41:06:00:9b:13:90:
                    f8:f6:72:26:66:89:87:4a:67:3c:ae:65:49:bd:76:
                    7d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C3:16:D8:72:B4:EE:52:44:D9:F9:6B:16:E9:B7:23:C8:16:A4:EE
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3136372e3234392e35392e302f32342d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:e6:b0:fc:14:8e:2c:be:76:e4:3e:44:75:bb:5a:00:b6:fb:
         20:ad:71:28:21:94:d0:5f:bf:08:fc:aa:4e:98:6c:e2:7f:a5:
         3f:e7:c6:8f:67:bb:79:73:08:f5:d2:40:34:1c:2b:b7:72:36:
         48:cf:54:fe:52:26:62:33:53:52:b8:68:d7:ee:68:21:49:35:
         fa:8a:ea:5d:66:37:ad:62:18:97:ce:b0:d1:c0:41:ff:94:47:
         34:b5:9c:ea:45:73:39:80:64:41:97:34:cc:69:96:29:31:13:
         93:a4:34:98:a0:3b:8a:b7:2b:9c:31:fa:46:d6:67:dc:99:bd:
         e6:98:cd:38:de:85:83:84:25:d5:d3:5e:86:cc:8d:a5:d6:3c:
         2f:af:f9:18:39:d3:40:ef:56:99:62:ed:e2:cc:cd:30:e7:5b:
         98:f6:93:95:72:21:72:ba:91:6a:fb:3f:ab:22:eb:c0:67:39:
         1e:d6:be:a0:4c:38:e8:e5:de:f4:0c:a6:59:e2:e6:99:cb:9d:
         02:19:c6:86:21:a7:96:8a:c7:2c:3b:bf:2c:a1:82:74:a1:9c:
         8a:e1:5a:9b:80:6e:43:62:d8:cd:70:3b:61:90:23:bd:e0:b3:
         38:fe:48:fd:ef:6a:c2:7e:36:e4:63:12:a9:d4:ba:15:c9:0d:
         34:5b:7f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:24:38 2025 by rpki-client