Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234342e302f32332d3233203d3e20323632353335.roa
File:                     3137372e36372e3234342e302f32332d3233203d3e20323632353335.roa (raw, json)
Hash identifier:          U5Fvn6XXB47kjPnW0Y6d4osH6P3yAI7NaBCxY+pR9w0=
Subject key identifier:   16:34:34:85:75:EC:86:2B:25:26:48:AD:BD:5C:E2:0D:18:DB:8A:A8
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       46139E59DF149646322D55615E930A36DDF50236
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234342e302f32332d3233203d3e20323632353335.roa
Signing time:             Wed 08 May 2024 12:08:25 +0000
ROA not before:           Wed 08 May 2024 12:03:25 +0000
ROA not after:            Wed 07 May 2025 12:08:25 +0000
asID:                     262535
IP address blocks:        177.67.244.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:13:9e:59:df:14:96:46:32:2d:55:61:5e:93:0a:36:dd:f5:02:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: May  8 12:03:25 2024 GMT
            Not After : May  7 12:08:25 2025 GMT
        Subject: CN=1634348575EC862B252648ADBD5CE20D18DB8AA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bf:99:2e:84:fd:55:7e:48:36:44:8f:49:99:
                    09:f1:a6:76:1f:b5:b1:2f:ef:ff:cb:52:09:3e:c9:
                    3e:ae:f7:56:0b:80:8b:8d:87:49:9a:4d:c8:1a:45:
                    44:27:bb:93:6b:ba:31:df:b8:ce:3c:9a:28:5b:7b:
                    60:8b:10:e2:96:71:a6:2d:d4:0d:c2:dd:68:44:53:
                    73:36:f3:17:5f:e2:b7:57:35:c7:f1:89:f7:8c:d6:
                    ef:da:e1:9c:24:a8:aa:96:ff:f3:11:17:8a:e5:a0:
                    73:16:21:90:83:81:b1:79:e3:c8:40:c7:0e:21:89:
                    93:ff:7e:7a:08:3c:91:8a:9e:33:15:17:4b:b5:49:
                    bd:26:72:b6:3c:71:50:ce:4b:67:c5:c1:2a:d8:b9:
                    65:04:e1:6c:3d:61:20:ea:5a:62:92:0e:e5:aa:ea:
                    4f:2d:af:89:72:17:28:fd:95:ae:5e:1f:19:ba:4e:
                    01:71:a6:75:cb:c5:85:d8:4d:80:3a:f9:3a:9f:c6:
                    8b:2e:04:48:3f:02:b8:9c:59:2b:89:d2:72:17:5c:
                    e2:e1:54:11:4d:1e:f9:7d:55:26:e8:2f:9e:33:ff:
                    38:05:20:34:f3:3b:52:75:18:d5:45:33:e3:4d:a0:
                    7f:ba:32:07:d3:d2:8e:df:4b:8e:31:26:df:2a:fe:
                    5c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:34:34:85:75:EC:86:2B:25:26:48:AD:BD:5C:E2:0D:18:DB:8A:A8
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234342e302f32332d3233203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:e6:1d:0e:e1:4b:d0:1f:d5:31:73:18:f9:7c:16:a7:e6:71:
         6e:b5:1a:51:cb:08:5e:8b:a1:78:3c:8c:50:9c:00:1c:60:28:
         ab:c0:f4:9d:5e:67:cd:e4:f4:e6:ab:0f:3b:c7:28:0b:a9:3c:
         a0:67:1d:45:a5:eb:71:64:db:69:e6:d0:d5:7a:71:b5:78:b2:
         d9:3a:a7:6a:6d:20:89:6c:72:33:db:77:75:39:af:cf:72:c2:
         50:c5:56:b9:da:1f:36:db:31:4b:67:24:c1:65:62:92:dd:90:
         e1:63:ca:6a:0c:18:69:bc:02:2a:2c:40:33:58:64:81:97:a8:
         d9:78:cd:9d:c4:e2:08:57:e5:8e:d0:85:5d:6f:b6:d8:ef:11:
         08:3d:36:02:e0:32:54:9f:f5:35:5c:ad:1e:9d:23:db:5d:b1:
         fe:00:73:23:2a:9b:69:37:39:bf:12:b4:f7:c7:30:3a:c0:d4:
         b6:25:a0:5a:bf:41:e0:7d:d1:81:54:63:0c:2a:e2:2f:35:5c:
         44:51:7c:fc:51:b4:e0:24:88:87:2a:b7:b4:91:70:07:a2:5b:
         5c:6d:d3:dc:56:a7:2e:76:77:97:64:7e:a7:51:a1:f8:15:18:
         08:7a:d9:7e:4f:8c:ee:9f:b1:61:f7:46:af:fe:e5:b3:7b:d1:
         33:1f:75:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 15:20:17 2024 by rpki-client on console-fra.rpki-client.org