Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234342e302f32322d3232203d3e20323632353335.roa
File:                     3137372e36372e3234342e302f32322d3232203d3e20323632353335.roa (raw, json)
Hash identifier:          rmjUX7eLr3cAUCt972PXWWCX9I2ApIGXlrjef95jDIs=
Subject key identifier:   4B:20:4F:E1:11:67:0B:49:4A:ED:7F:69:DE:E4:A8:34:50:F1:29:89
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       7923C44C009A7EEC296B80C1B2DD2FC7A5E7FCFC
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234342e302f32322d3232203d3e20323632353335.roa
Signing time:             Wed 09 Apr 2025 12:53:28 +0000
ROA not before:           Wed 09 Apr 2025 12:48:28 +0000
ROA not after:            Wed 08 Apr 2026 12:53:28 +0000
asID:                     262535
IP address blocks:        177.67.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 13:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:23:c4:4c:00:9a:7e:ec:29:6b:80:c1:b2:dd:2f:c7:a5:e7:fc:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: Apr  9 12:48:28 2025 GMT
            Not After : Apr  8 12:53:28 2026 GMT
        Subject: CN=4B204FE111670B494AED7F69DEE4A83450F12989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c2:7c:bc:42:a3:e8:a1:81:a9:52:b4:fc:ec:
                    7c:b0:cd:b5:ef:f0:24:ca:f0:b7:51:32:af:cc:cd:
                    1f:74:89:ac:34:62:83:af:fe:d9:fa:cf:18:78:02:
                    33:00:0c:d7:a4:40:96:ba:90:a6:61:bf:24:3b:ec:
                    b1:24:9c:5d:e9:1b:11:49:52:91:70:a4:c4:ab:c1:
                    38:5a:33:25:96:e9:f1:e6:06:a3:96:77:01:bb:6b:
                    17:17:54:a8:f6:cc:d8:f7:4a:6d:93:59:12:c1:5a:
                    f6:3b:d0:b2:22:b8:5f:42:e6:3a:15:bc:b1:3a:63:
                    c3:ee:da:2d:da:19:70:81:5b:9a:86:0c:ad:95:0b:
                    7d:0d:c9:c3:c6:41:5d:2c:3d:d9:c1:c5:9e:ee:78:
                    81:61:ca:82:b6:30:35:a9:c1:b2:37:51:8b:77:76:
                    24:1b:ca:d3:9f:8d:ce:06:56:d9:bb:f0:bd:6d:3e:
                    24:21:e2:40:3f:bc:67:5d:07:47:1a:01:7d:f5:7d:
                    7c:20:ed:2e:3b:26:85:4b:ae:9f:98:66:89:3d:8a:
                    f9:5b:3f:52:6b:f1:51:c1:e7:25:18:a5:00:e9:ab:
                    7c:6b:2f:39:c9:13:5d:8a:b0:f0:03:db:36:32:a0:
                    a7:97:5e:5c:c0:47:c9:0d:b8:1f:91:bb:51:a2:6f:
                    40:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:20:4F:E1:11:67:0B:49:4A:ED:7F:69:DE:E4:A8:34:50:F1:29:89
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234342e302f32322d3232203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:05:59:99:11:6f:c5:d3:8a:92:2f:db:c9:bc:fb:24:32:f0:
         3e:7b:20:d8:4c:49:fc:61:28:c4:e3:3e:35:65:ca:9d:51:ca:
         6f:6a:0c:5c:eb:c2:80:9d:96:25:b2:21:07:ad:2e:a7:0a:01:
         b3:6b:fe:95:ac:b1:05:ec:96:0a:f3:16:a2:fa:8a:40:df:6f:
         fe:ae:d6:bf:2e:c9:41:4f:bc:b7:09:42:bc:1e:57:eb:26:a0:
         8a:1c:20:61:88:3f:ea:4a:7f:46:63:f3:e3:f8:70:aa:09:d9:
         eb:c1:fd:46:4e:69:d3:db:72:13:7a:6d:92:e9:7a:35:b1:c2:
         17:b0:d9:85:d4:78:27:9b:c6:6d:74:d0:e2:64:75:ea:f9:ef:
         41:3c:cf:4e:81:2d:cb:37:2c:17:b9:aa:a1:8b:bd:42:40:39:
         32:7b:c0:05:10:78:24:cf:ea:8e:d8:61:3d:fe:e9:da:c1:97:
         13:6d:12:aa:71:24:50:e2:1a:b3:8f:7c:f3:e4:67:3a:83:f4:
         a8:3d:7a:22:97:68:5f:d6:4d:7d:64:6c:62:ea:33:80:16:c4:
         17:94:a2:b7:1f:79:c1:03:ae:d5:cc:c1:03:af:c3:5b:60:f6:
         bc:ed:b4:85:81:cd:45:f0:bc:cc:15:77:ac:40:57:34:26:33:
         2b:d4:40:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:21:26 2025 by rpki-client