Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234362e302f32342d3234203d3e20323632353335.roa
File:                     3137372e36372e3234362e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          BfX0O31BnOr40hrIQKBibezUzpAKLX2pGYOVDwyTk+s=
Subject key identifier:   34:6F:58:0F:9A:49:09:9F:3F:59:D9:E0:A0:56:2C:26:E2:4E:4F:60
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       2EBE3B7B718CEB36E273DAD448D7D4F9CD4359F9
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234362e302f32342d3234203d3e20323632353335.roa
Signing time:             Wed 09 Apr 2025 12:53:25 +0000
ROA not before:           Wed 09 Apr 2025 12:48:25 +0000
ROA not after:            Wed 08 Apr 2026 12:53:25 +0000
asID:                     262535
IP address blocks:        177.67.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 13:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:be:3b:7b:71:8c:eb:36:e2:73:da:d4:48:d7:d4:f9:cd:43:59:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: Apr  9 12:48:25 2025 GMT
            Not After : Apr  8 12:53:25 2026 GMT
        Subject: CN=346F580F9A49099F3F59D9E0A0562C26E24E4F60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f8:e2:69:26:65:1b:63:fe:8a:34:5b:ef:83:
                    fe:61:43:bc:28:53:37:64:08:8d:09:6c:dd:54:2b:
                    84:a0:0d:ae:52:19:35:b6:88:e4:d3:90:ce:92:d6:
                    00:e8:cd:3b:f4:94:d3:4e:12:97:e9:a7:30:39:6d:
                    a7:78:84:ad:42:40:d9:6e:b4:91:22:16:2d:6f:4d:
                    8e:10:95:32:0a:95:9b:5b:9f:23:be:17:2e:9b:59:
                    1e:28:4b:20:f5:72:be:ba:28:15:61:1a:56:2b:a9:
                    4f:b2:b5:2b:20:00:d0:e8:28:2a:5d:ad:1d:df:84:
                    9b:5c:1f:a6:95:6a:e6:f2:a2:38:ae:d2:10:46:0f:
                    79:e3:1f:47:46:d5:22:18:92:b7:93:05:89:e2:b7:
                    1c:9a:87:39:5e:ee:05:32:2c:da:2b:e3:bb:8b:93:
                    db:29:6c:62:8b:aa:f3:13:fe:b6:be:b5:ec:ca:24:
                    34:1f:d6:47:d0:b2:f2:4e:39:5d:5c:37:c4:5a:87:
                    43:f8:12:a1:65:ff:6e:ee:a4:43:5f:de:59:76:77:
                    6f:e9:e0:0d:78:8a:df:b7:31:ee:e2:03:78:b4:99:
                    51:6d:a2:2b:7b:e0:5a:b2:a1:cb:c5:83:9c:ec:e3:
                    80:cc:88:5d:5b:9d:66:00:e1:4a:16:67:82:6f:de:
                    60:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6F:58:0F:9A:49:09:9F:3F:59:D9:E0:A0:56:2C:26:E2:4E:4F:60
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234362e302f32342d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:26:d3:df:d0:03:76:64:06:71:d4:67:86:12:34:54:60:ec:
         b8:38:ae:e6:1f:1f:27:6d:be:7d:c0:1b:56:a0:78:1b:72:89:
         28:f6:cc:6b:8e:bf:cc:da:bd:6f:bc:84:00:df:ff:d5:48:84:
         98:81:47:c2:b2:19:50:94:e7:92:c8:26:62:00:7a:65:26:61:
         16:9b:18:1b:bd:62:a2:dc:85:a0:2f:c1:09:6d:f6:0e:fc:19:
         62:01:d5:cf:a7:6d:ff:aa:e5:e9:45:46:35:11:ca:01:79:ec:
         c1:ce:b7:a7:a8:86:ea:99:f6:78:b6:67:8c:90:37:1a:15:c5:
         a7:03:66:78:c8:2d:82:e4:27:60:7d:94:fc:ce:77:ec:5b:df:
         eb:f3:60:00:84:bf:f7:d9:34:8c:59:bd:55:b5:f8:6e:0f:8e:
         dc:52:98:a1:82:a8:47:65:6f:4f:42:fb:35:3a:ae:e8:4a:99:
         33:60:c2:35:7c:34:68:97:ab:37:19:92:46:95:cd:8d:ee:81:
         ef:b0:a6:06:f9:2c:e3:13:18:04:1d:27:06:98:a5:1e:14:46:
         54:99:97:ec:61:a2:7d:52:99:97:03:6a:a7:26:59:eb:5d:90:
         91:79:7b:f1:38:e5:31:6f:49:69:9c:9c:57:fd:00:d4:b8:ea:
         33:f6:e2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:24:34 2025 by rpki-client