Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234322e302f32342d3234203d3e20323632353335.roa
File:                     3137372e36372e3234322e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          rGP6KeznHdjTrdyHrJt3O5kOTRphdqtsqusf6VOekUA=
Subject key identifier:   1B:73:88:E1:74:2C:92:8F:41:CA:89:BF:EC:F2:AA:4F:D2:2F:E2:63
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       05FF61D985473EC4DE86D3D04285B9EB568E71FC
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234322e302f32342d3234203d3e20323632353335.roa
Signing time:             Wed 08 May 2024 12:08:21 +0000
ROA not before:           Wed 08 May 2024 12:03:21 +0000
ROA not after:            Wed 07 May 2025 12:08:21 +0000
asID:                     262535
IP address blocks:        177.67.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:53:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ff:61:d9:85:47:3e:c4:de:86:d3:d0:42:85:b9:eb:56:8e:71:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: May  8 12:03:21 2024 GMT
            Not After : May  7 12:08:21 2025 GMT
        Subject: CN=1B7388E1742C928F41CA89BFECF2AA4FD22FE263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:35:b9:99:39:e9:0d:85:b2:b2:c6:95:fa:ac:
                    33:02:70:4b:76:f5:4f:67:07:b8:54:0b:79:02:b0:
                    c9:21:2a:4b:9f:d3:02:f8:fd:b7:9a:26:f6:ac:66:
                    9b:b9:8d:e7:a4:ec:04:e2:2b:28:00:f3:0e:65:fb:
                    91:8c:0c:1f:84:66:f1:39:5b:a9:2e:43:27:be:94:
                    da:bb:9a:08:08:24:13:b4:99:62:8e:e4:a2:42:f8:
                    ec:14:a4:1a:a1:9f:22:45:d0:b5:27:49:f4:69:0d:
                    a2:f5:4d:eb:f1:0c:71:73:2f:bc:14:d8:84:fb:f8:
                    c6:11:e0:13:33:cb:d1:08:de:ab:c0:bf:09:bc:60:
                    8f:ef:78:48:86:20:b0:68:a6:d5:33:33:48:57:50:
                    e6:80:37:95:0f:0f:91:ed:67:6e:8d:a2:ce:d1:9b:
                    f6:bd:91:78:6e:b4:90:77:d9:9e:a8:46:1b:ea:dd:
                    b9:ea:61:99:5b:c5:10:6f:7b:e6:0e:87:74:36:d0:
                    ca:77:ed:e0:a1:0f:1f:a6:6e:7b:f7:e2:07:03:f1:
                    6b:d7:27:87:eb:ca:13:2f:e0:62:fb:e4:1a:fd:b7:
                    ff:53:f4:20:a6:17:d2:9a:99:e1:49:02:4e:fb:72:
                    89:99:99:a1:b1:05:e4:a6:c0:ae:38:0e:78:fc:32:
                    21:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:73:88:E1:74:2C:92:8F:41:CA:89:BF:EC:F2:AA:4F:D2:2F:E2:63
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234322e302f32342d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:50:c0:a8:8e:69:bf:20:0c:43:28:c4:45:69:1e:04:e9:e6:
         31:62:15:e1:80:9c:be:5b:b8:43:dc:bc:f3:98:46:ed:52:d4:
         79:05:13:24:f2:bc:ac:52:a0:cc:e1:c7:f5:6d:1a:62:27:59:
         cd:b7:05:b5:e3:3c:5c:3c:de:10:f7:80:bf:df:29:42:10:b8:
         b3:8b:5e:48:0b:24:1e:91:69:c2:00:ac:e0:8e:64:2f:1d:80:
         ee:05:a0:c2:a3:6a:8d:6b:04:47:c7:a0:83:99:6c:8d:8d:c9:
         ad:8f:6c:54:95:e0:a3:35:54:6a:5d:e5:b3:f1:90:a3:32:8a:
         9b:a5:d6:1e:f3:af:d4:50:84:bf:d4:a9:9c:ff:10:31:ac:2c:
         51:81:a6:4f:b5:82:8a:80:e6:96:81:97:85:bd:89:fb:49:9c:
         e1:f6:73:62:12:b2:86:4e:f9:ea:91:bd:05:8d:03:de:16:cf:
         eb:6e:53:ed:91:d7:43:f6:35:1f:21:7e:4e:c0:2a:2d:57:8c:
         73:68:d5:6e:26:71:7b:0b:1c:fc:cb:32:85:69:7e:e8:d3:6e:
         56:bc:d9:56:52:dd:61:57:db:04:ed:29:ce:54:67:50:90:59:
         36:4e:83:24:62:95:64:7c:f8:65:55:c2:a1:6e:ed:fd:91:cd:
         33:ce:9e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:59 2024 by rpki-client on console-fra.rpki-client.org