Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234342e302f32322d3232203d3e20323632353335.roa
File:                     3137372e36372e3234342e302f32322d3232203d3e20323632353335.roa (raw, json)
Hash identifier:          k9rKzpTQR3Ot4YQ2RTRndQdBhbb3WNwDt7/gDliRhRA=
Subject key identifier:   75:AA:28:8D:D9:E8:D6:1C:76:D4:2A:D0:6A:1E:85:FE:AD:CE:EF:F4
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       1B36F4E335DE07E52E1073FDE64EFAF80D6CD8E3
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234342e302f32322d3232203d3e20323632353335.roa
Signing time:             Wed 08 May 2024 12:08:23 +0000
ROA not before:           Wed 08 May 2024 12:03:23 +0000
ROA not after:            Wed 07 May 2025 12:08:23 +0000
asID:                     262535
IP address blocks:        177.67.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:36:f4:e3:35:de:07:e5:2e:10:73:fd:e6:4e:fa:f8:0d:6c:d8:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: May  8 12:03:23 2024 GMT
            Not After : May  7 12:08:23 2025 GMT
        Subject: CN=75AA288DD9E8D61C76D42AD06A1E85FEADCEEFF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4b:f3:c4:0d:f1:ae:18:51:bb:d6:42:c4:af:
                    5b:68:d0:93:5f:6e:8c:fd:3d:8f:32:47:2f:b8:7b:
                    49:a9:7b:31:b1:15:ce:c1:01:8a:cc:ff:91:e2:21:
                    d2:f3:d0:19:38:7e:e2:3f:1a:65:90:c8:1c:90:41:
                    97:1c:95:2b:4c:0d:1d:b0:b0:cb:3d:ac:65:d8:19:
                    4c:b0:b9:8b:fe:35:4a:fe:e0:4d:71:aa:18:4b:e5:
                    cb:9b:67:72:cd:9e:8c:ce:0b:21:06:52:cf:45:71:
                    c0:ab:bd:19:fc:04:fc:e9:f5:d9:11:9c:88:1e:fc:
                    ed:07:7d:d9:6c:a5:ed:dc:ca:08:7c:94:5b:e0:7c:
                    fe:d1:b2:65:47:bf:bb:bb:36:eb:a6:2d:30:d9:9a:
                    a5:eb:47:5a:2b:28:fe:dc:f6:07:d8:fd:ae:22:0b:
                    36:3d:c9:8e:ee:98:93:81:32:07:a8:fc:79:3b:4f:
                    ab:b7:f9:75:1f:00:d0:18:16:94:71:a1:7f:a3:7d:
                    98:ce:e1:29:cc:dc:ae:82:7d:93:45:f6:f5:76:19:
                    6f:ce:b2:56:3b:dc:5a:53:4f:49:23:2e:4f:63:18:
                    44:88:ff:d4:31:ba:08:85:28:53:53:79:e1:fe:0d:
                    a1:14:69:08:89:36:b6:00:5e:b3:45:37:77:00:af:
                    0a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AA:28:8D:D9:E8:D6:1C:76:D4:2A:D0:6A:1E:85:FE:AD:CE:EF:F4
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234342e302f32322d3232203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:9d:fc:8e:b2:5e:cd:24:9f:4a:35:c9:10:b1:4f:2f:11:f9:
         fe:e3:9e:13:29:5f:9b:e3:84:8b:51:2f:61:5f:4f:c1:eb:db:
         21:15:02:47:ae:43:fd:a8:b4:a1:48:85:5c:49:0a:bd:00:92:
         86:de:7a:f1:9d:fc:ec:45:40:13:6f:05:02:01:e5:15:5b:49:
         f3:01:af:76:4f:31:d2:f0:f9:b4:e8:6c:9f:64:3b:4c:65:58:
         83:c9:9b:74:ba:af:8e:32:03:8e:2a:46:de:f1:13:73:25:df:
         a0:51:6e:7a:b8:59:c4:c3:84:8d:6f:70:ca:2c:e6:9d:dc:03:
         d0:7e:25:b0:64:8a:13:cf:7a:3c:89:d5:ea:5f:4b:59:0b:ef:
         ed:d6:01:2e:3e:98:03:32:11:e7:fb:60:40:26:f7:27:ae:bd:
         89:b9:91:fb:ab:1d:e3:f3:70:a2:6c:ff:b4:45:e4:c4:74:0d:
         18:66:ba:4e:92:12:fc:d2:9a:8f:57:0b:61:e5:e9:9f:b0:8e:
         a0:0b:a0:0a:a3:43:63:da:b3:b8:1e:0d:a5:b8:47:1a:1f:86:
         0d:97:0e:9a:87:29:45:6c:b8:e6:29:cd:f8:04:55:a6:3a:47:
         51:01:45:40:4e:0d:2b:e4:dc:2d:37:8a:05:92:3e:23:94:b8:
         19:4c:ad:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 15:56:41 2024 by rpki-client on console-ams.rpki-client.org