Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234302e302f32312d3231203d3e20323632353335.roa
File:                     3137372e36372e3234302e302f32312d3231203d3e20323632353335.roa (raw, json)
Hash identifier:          d9QGT3V/gJcybvhEJnKXB1YAVy8OZWxsVBRHdU2ndj4=
Subject key identifier:   A7:79:B0:A9:2C:70:C5:D7:5E:2B:B1:56:C0:C7:DC:BF:80:4F:C5:86
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       1539F5000D418230FDDF0EE288D0EEA0A9C212FC
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234302e302f32312d3231203d3e20323632353335.roa
Signing time:             Wed 08 May 2024 12:08:32 +0000
ROA not before:           Wed 08 May 2024 12:03:32 +0000
ROA not after:            Wed 07 May 2025 12:08:32 +0000
asID:                     262535
IP address blocks:        177.67.240.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:53:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:39:f5:00:0d:41:82:30:fd:df:0e:e2:88:d0:ee:a0:a9:c2:12:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: May  8 12:03:32 2024 GMT
            Not After : May  7 12:08:32 2025 GMT
        Subject: CN=A779B0A92C70C5D75E2BB156C0C7DCBF804FC586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e5:c9:22:d6:9a:96:0c:b4:c7:d1:57:a5:b5:
                    72:f5:37:e5:45:07:b9:b0:6a:73:c0:b1:b4:a2:af:
                    68:3d:30:04:89:e5:ba:90:67:d3:40:1e:1e:94:5a:
                    9e:4b:c3:4b:7e:f8:55:60:ea:ac:e6:e2:73:a9:85:
                    d6:cc:6b:32:b6:ec:dd:3b:f0:76:f6:8a:20:c2:6c:
                    4c:84:21:4b:b4:f2:ff:67:3c:08:d8:c0:fc:2f:7e:
                    61:ec:89:eb:df:4c:f8:0b:21:64:a8:15:44:8d:7b:
                    81:3b:c8:0f:71:72:8f:52:b6:fb:be:c0:57:d8:fa:
                    d9:7f:c5:eb:ea:ae:d4:6b:4b:5f:c5:6d:2a:80:b9:
                    e1:67:7a:71:69:a1:ae:4a:42:f5:07:7a:c5:80:5e:
                    16:b3:af:37:58:3f:2e:6e:67:58:d8:50:65:4e:f5:
                    12:08:bc:c4:69:11:d3:c8:45:aa:6c:5b:c9:db:96:
                    ab:9f:9d:65:84:40:00:78:98:5d:ea:d7:f8:cb:78:
                    3e:2c:36:23:2f:99:e2:56:d7:2a:12:93:da:16:f2:
                    84:e3:01:6e:6e:c8:07:07:92:66:98:05:df:14:c4:
                    30:61:c3:cc:e6:6e:45:ec:91:d5:47:71:eb:ae:e0:
                    e5:ba:8e:37:c3:c7:d9:c2:08:6a:2c:7c:f3:45:ee:
                    80:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:79:B0:A9:2C:70:C5:D7:5E:2B:B1:56:C0:C7:DC:BF:80:4F:C5:86
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234302e302f32312d3231203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         85:9c:6c:86:89:bf:25:11:8d:b4:94:58:32:6e:51:ea:ef:6a:
         29:2e:69:55:78:eb:cc:6e:8b:c8:4c:6f:ba:78:5b:1d:fd:29:
         f6:7b:01:b6:94:5a:46:51:e6:44:59:77:50:1e:22:f6:6f:68:
         ae:98:e0:92:12:8b:99:19:77:fb:04:f5:69:67:65:d6:6d:5c:
         7a:ba:cd:c6:65:48:c8:a5:33:51:9e:a2:6f:83:eb:69:1e:08:
         b5:94:45:f0:40:66:b5:3c:9e:c1:cc:70:e7:d0:59:5d:b0:d3:
         c9:ef:5b:26:d0:cc:4a:a3:a9:d3:31:23:44:7c:fa:69:c3:90:
         c1:2c:5c:35:50:eb:f9:22:69:1d:d7:c1:05:5e:b8:ab:c4:73:
         22:1f:f1:d7:16:bb:92:77:20:27:f5:7b:a4:62:0a:6c:7d:b0:
         68:b0:08:8f:05:57:c5:35:3a:19:92:3a:b3:a6:52:31:d2:41:
         18:63:35:4f:20:bc:13:63:73:b8:61:ef:e8:be:47:a8:7b:e2:
         fe:5e:e1:cb:43:2a:35:8a:1d:43:06:f0:72:ad:36:9f:ba:01:
         85:16:ee:73:32:22:a5:1b:cd:96:3f:2f:82:b4:59:56:1e:e5:
         ad:15:29:5e:77:f7:b9:91:19:00:68:60:f0:10:8e:02:96:13:
         e0:7d:ab:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:59 2024 by rpki-client on console-fra.rpki-client.org