Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234352e302f32342d3234203d3e20323632353335.roa
File:                     3137372e36372e3234352e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          YhInV0Bz28BTsAJgFyO0zYVGIDnUy4ia1/v4dj//1yo=
Subject key identifier:   D8:EC:0C:F4:E5:38:76:6F:D1:3D:72:E6:B4:58:28:CC:9F:0C:D3:E1
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       1880E0AFF5E13F2568F5BFFD328B6B96CB2042AB
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234352e302f32342d3234203d3e20323632353335.roa
Signing time:             Wed 08 May 2024 12:08:25 +0000
ROA not before:           Wed 08 May 2024 12:03:25 +0000
ROA not after:            Wed 07 May 2025 12:08:25 +0000
asID:                     262535
IP address blocks:        177.67.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:80:e0:af:f5:e1:3f:25:68:f5:bf:fd:32:8b:6b:96:cb:20:42:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: May  8 12:03:25 2024 GMT
            Not After : May  7 12:08:25 2025 GMT
        Subject: CN=D8EC0CF4E538766FD13D72E6B45828CC9F0CD3E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0b:06:d3:69:c6:a8:66:40:19:fd:1e:c3:26:
                    ea:8d:5a:62:3a:24:68:32:a3:24:81:b1:aa:64:e0:
                    4d:67:a0:12:37:90:94:91:52:4b:40:7f:3b:3b:c2:
                    43:3d:c4:f3:92:aa:ac:09:f9:7c:84:fe:af:1f:99:
                    0e:ca:ec:e9:bd:bf:5d:98:60:e0:2e:ad:c9:09:78:
                    8f:0a:23:81:09:69:24:5a:3b:fa:ce:ae:8f:95:05:
                    8d:25:22:8c:fa:a1:ec:ef:a0:ba:7f:ae:fd:50:da:
                    19:ad:e1:ea:ae:16:eb:15:87:fd:be:29:c8:aa:ef:
                    2c:43:8a:2c:dd:f9:ad:df:44:b2:53:ec:7a:d0:a5:
                    ca:c5:ef:63:66:3c:cc:eb:1d:14:24:d1:7f:28:18:
                    5c:79:63:bb:25:7c:69:86:4b:21:b4:62:8a:4a:64:
                    a1:94:ad:83:3d:fd:00:6b:ae:47:d2:ce:d6:30:fd:
                    0b:46:6f:48:fc:26:96:55:a7:3b:dc:3a:5b:0d:94:
                    15:6d:0d:0b:c2:d6:e0:52:91:90:07:d1:4b:64:45:
                    d7:d5:38:ba:f9:0d:84:ff:9e:f9:b7:84:94:75:da:
                    14:ef:f2:46:da:a8:f0:84:cf:1a:af:17:18:5f:94:
                    d6:60:b3:fe:b4:54:89:b5:39:12:48:8a:16:3a:e3:
                    e1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:EC:0C:F4:E5:38:76:6F:D1:3D:72:E6:B4:58:28:CC:9F:0C:D3:E1
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234352e302f32342d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:a1:87:80:75:ce:c6:56:63:ae:31:f1:46:b9:00:39:21:87:
         9c:43:f4:6e:d6:84:98:b4:e1:fb:12:5b:b5:f8:5b:2f:05:6b:
         08:04:04:dd:e8:ba:a4:4b:43:93:22:05:08:ce:d9:b0:83:c1:
         24:21:50:c5:0d:94:65:06:29:da:bd:48:78:3c:87:f3:3f:25:
         ea:03:e4:a9:7b:64:8f:f0:c4:38:02:e4:7e:af:d9:30:ea:d4:
         21:c3:f4:25:6f:aa:cf:e2:50:e2:00:60:07:c6:e0:7b:96:34:
         7b:13:1a:3b:26:73:99:02:af:38:7d:57:5b:77:9c:87:42:6e:
         a7:80:88:c7:94:98:a9:ab:05:90:0f:0a:17:6e:fc:74:4d:fd:
         16:05:da:ca:94:06:db:78:24:31:9e:95:90:d0:c4:10:07:de:
         a1:91:7c:0d:8b:31:91:4c:6f:f2:0f:f6:43:b4:fd:75:0b:6c:
         2c:46:5f:37:30:88:d5:23:51:7c:09:9f:df:db:e2:96:f0:6c:
         80:4b:1f:e3:08:34:ef:72:8f:f4:c9:55:0e:5d:68:76:13:79:
         e4:d4:86:7d:69:f8:72:f1:78:aa:fb:f0:48:bb:a2:17:5c:e3:
         79:60:dc:23:c3:89:18:98:ae:dc:e1:dc:e1:bc:67:b1:f1:06:
         08:b3:fc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 15:56:41 2024 by rpki-client on console-ams.rpki-client.org