Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234342e302f32342d3234203d3e20323632353335.roa
File:                     3137372e36372e3234342e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          ez2lBKyxScNlR3Q/TrdU97BbpbdV8JfeXX3AK2TNQ8g=
Subject key identifier:   03:CD:4B:C8:9A:83:86:4D:7D:7E:06:59:17:E1:C5:A5:AF:07:94:20
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       7FC8FE861F43E6403E2BB6F12B41FFA185A3BBDF
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234342e302f32342d3234203d3e20323632353335.roa
Signing time:             Wed 09 Apr 2025 12:53:25 +0000
ROA not before:           Wed 09 Apr 2025 12:48:25 +0000
ROA not after:            Wed 08 Apr 2026 12:53:25 +0000
asID:                     262535
IP address blocks:        177.67.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 13:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c8:fe:86:1f:43:e6:40:3e:2b:b6:f1:2b:41:ff:a1:85:a3:bb:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: Apr  9 12:48:25 2025 GMT
            Not After : Apr  8 12:53:25 2026 GMT
        Subject: CN=03CD4BC89A83864D7D7E065917E1C5A5AF079420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b9:3d:65:3c:ad:af:8e:1d:58:fa:c5:5c:41:
                    66:13:07:1b:09:1c:16:8c:37:5e:28:f4:6c:61:cf:
                    02:6c:0c:a5:47:15:3e:bf:e1:59:f5:23:9f:16:96:
                    f0:ff:26:33:4b:56:75:d1:5b:ae:61:97:2c:e8:77:
                    fd:f2:c0:04:0d:48:8d:20:b0:6b:88:a9:92:82:cf:
                    39:3e:9e:21:a4:c9:e1:5b:e0:14:20:2f:4b:4c:9a:
                    0e:a7:7f:9f:66:f4:27:e0:c4:ab:51:e5:d9:fd:4a:
                    f8:e7:e6:69:a3:61:2c:63:71:fb:88:04:aa:d3:e0:
                    8a:7c:3e:be:46:4f:2b:33:62:23:01:3f:e7:9a:e0:
                    e3:a0:14:2c:76:84:29:30:7f:72:c4:1e:27:8f:5e:
                    ea:ac:67:ab:42:89:f9:66:1b:2c:62:14:a8:85:44:
                    96:15:24:41:f9:3c:fb:06:09:94:58:21:d8:56:9f:
                    8e:dc:01:2f:15:1a:ff:b5:4b:87:5d:5e:23:34:c3:
                    c4:c6:6e:3a:ae:4f:0b:53:31:ea:d1:cf:81:7f:f5:
                    3e:bf:30:cd:20:dd:e4:3a:7f:3d:67:1d:e8:0b:d0:
                    d2:48:94:be:2f:b6:c6:43:0e:93:1c:55:81:af:1b:
                    f5:5c:f8:d7:1f:2f:55:2b:ee:30:1d:14:0c:bd:df:
                    d7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:CD:4B:C8:9A:83:86:4D:7D:7E:06:59:17:E1:C5:A5:AF:07:94:20
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234342e302f32342d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:93:6d:18:47:12:6f:53:f6:23:bb:a2:ed:5b:a4:d9:a7:36:
         dc:25:e5:0c:e3:1f:49:51:1e:f9:9f:4b:39:af:3f:de:72:4d:
         c2:52:7f:f1:d3:f8:c2:07:5a:83:e7:f3:a4:29:e6:ef:c5:39:
         52:27:72:ec:b0:7f:0c:bc:c5:73:7a:0d:13:60:28:68:5a:29:
         13:0c:b2:06:cb:2d:0e:cf:4a:cb:a7:fc:c7:4f:9e:85:35:19:
         8d:c6:9c:58:1a:3e:07:bc:df:30:9b:61:19:5b:b9:9e:d7:4b:
         06:95:3b:f0:e8:47:f2:5b:66:c4:86:17:f7:90:34:99:71:3e:
         7a:90:c0:94:6d:01:21:c5:b0:e8:3e:ed:e9:64:87:58:fe:3c:
         9b:4f:ff:53:28:59:42:39:75:50:53:ec:17:d4:1f:55:f9:f5:
         09:be:45:90:85:ed:18:1f:48:17:bf:0e:f8:5d:6d:89:32:39:
         31:f6:7d:8a:f4:af:8c:ca:7d:7c:95:70:61:7d:fc:8b:31:46:
         0b:26:c8:09:36:70:1d:f7:e7:b4:3d:75:71:09:71:d3:c7:8a:
         ef:19:e2:d7:78:d9:8b:e3:04:51:d1:c6:d0:1c:d7:b1:6a:f8:
         f1:bc:f4:63:16:7e:1d:67:09:8e:aa:7a:66:cd:e7:64:ac:34:
         48:59:c2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:24:39 2025 by rpki-client