Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234372e302f32342d3234203d3e20323632353335.roa
File:                     3137372e36372e3234372e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          UCvwUawX7nPZfmkQUd6jA4nmOvv6kX0GUw7UH4PguNE=
Subject key identifier:   38:CF:5E:11:D9:62:6C:FC:18:15:69:62:21:26:13:DB:71:FE:64:12
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       569784A85759F7EBFEACEC504A7B6E7B5C02AA03
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234372e302f32342d3234203d3e20323632353335.roa
Signing time:             Wed 08 May 2024 12:08:21 +0000
ROA not before:           Wed 08 May 2024 12:03:21 +0000
ROA not after:            Wed 07 May 2025 12:08:21 +0000
asID:                     262535
IP address blocks:        177.67.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:97:84:a8:57:59:f7:eb:fe:ac:ec:50:4a:7b:6e:7b:5c:02:aa:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: May  8 12:03:21 2024 GMT
            Not After : May  7 12:08:21 2025 GMT
        Subject: CN=38CF5E11D9626CFC18156962212613DB71FE6412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5a:3b:68:2c:f4:10:f9:93:21:04:4d:2c:40:
                    27:1d:95:97:53:d9:90:56:a9:8f:62:df:e4:95:a1:
                    49:72:56:d1:89:65:67:ea:84:86:86:7d:ad:85:07:
                    f7:c4:d7:2b:e6:a0:d7:d9:72:cd:3f:7b:95:84:f9:
                    da:1c:f3:66:af:0a:b0:8a:d4:17:dd:96:10:15:52:
                    e1:44:90:08:d5:1e:58:bb:07:e3:6c:25:a0:6d:04:
                    22:b5:a7:fe:3f:46:02:ed:56:c6:1f:b8:11:f5:a2:
                    5c:34:78:26:67:4e:fb:8f:13:7b:71:ad:ac:58:8c:
                    6b:e4:f7:e1:9c:64:85:ff:bd:c6:be:4e:b9:82:d6:
                    2b:ec:35:eb:09:1f:37:c8:b9:28:b3:0d:46:39:d8:
                    8e:e8:62:bd:16:73:1f:a4:f2:6a:a4:79:cd:e7:5b:
                    76:20:a7:67:27:4f:1f:2b:1b:0e:b2:80:ef:43:76:
                    77:fd:5e:33:9e:4f:eb:79:9b:4e:b3:00:fe:2f:b0:
                    61:2a:05:31:45:24:60:a6:99:35:3c:44:df:e3:2d:
                    a0:23:42:a9:98:de:e8:a1:a8:76:89:4e:80:45:dd:
                    1c:22:e8:be:a8:7e:08:3b:b1:62:4e:16:85:a5:1f:
                    5f:51:7c:b5:65:e0:ae:fe:65:37:61:c2:8e:40:e3:
                    68:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CF:5E:11:D9:62:6C:FC:18:15:69:62:21:26:13:DB:71:FE:64:12
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234372e302f32342d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:e2:34:d2:59:5d:f9:b4:ad:fd:13:79:23:34:e8:be:8f:7d:
         f4:56:ce:48:2f:60:23:a9:5b:92:cb:7c:87:7e:a7:18:bd:ad:
         ab:13:f1:fd:09:de:a5:6a:34:9f:2d:93:78:1f:16:c2:1b:58:
         d1:a3:ca:3a:f3:f9:3b:a0:6d:78:76:2e:bd:fc:83:8a:75:5b:
         83:fe:d4:f3:38:e4:6d:e9:f2:0e:e4:6a:23:04:22:d4:4c:80:
         8f:19:b4:4d:39:6f:dc:2a:ca:fe:c5:10:96:1e:8f:cc:0c:62:
         59:32:6c:7b:2d:fc:ad:10:d9:46:c4:7f:6f:be:c4:f3:21:e9:
         01:44:38:88:5d:45:66:a8:f4:16:f3:3b:60:a7:de:a5:2d:c7:
         98:6a:0f:49:ef:49:05:d5:a2:ca:b8:fd:1d:77:1e:34:d8:50:
         19:ce:2a:e8:62:e3:f2:0c:18:d1:aa:09:f7:e0:9b:69:b7:dd:
         1f:6b:7f:30:e7:c9:fd:68:da:6a:2b:12:b6:40:ce:9c:1c:b5:
         f1:ac:9a:95:cb:74:8d:a0:43:0d:c3:ea:bb:fc:49:a0:05:9e:
         ed:9a:a6:82:0e:70:61:5f:41:65:47:f3:49:7b:60:09:d3:1c:
         c0:21:9b:c7:98:52:b3:48:20:3b:3c:d7:35:f8:8c:0e:01:2d:
         b5:95:f1:ab
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVpeEqFdZ9+v+rOxQSntue1wCqgMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhDNzcyRjgwMjk0MjAxODYwMTQ4ODA5NUFBNkM1NDdB
MzY5NDc4MjAeFw0yNDA1MDgxMjAzMjFaFw0yNTA1MDcxMjA4MjFaMDMxMTAvBgNV
BAMTKDM4Q0Y1RTExRDk2MjZDRkMxODE1Njk2MjIxMjYxM0RCNzFGRTY0MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoWjtoLPQQ+ZMhBE0sQCcdlZdT
2ZBWqY9i3+SVoUlyVtGJZWfqhIaGfa2FB/fE1yvmoNfZcs0/e5WE+doc82avCrCK
1BfdlhAVUuFEkAjVHli7B+NsJaBtBCK1p/4/RgLtVsYfuBH1olw0eCZnTvuPE3tx
raxYjGvk9+GcZIX/vca+TrmC1ivsNesJHzfIuSizDUY52I7oYr0Wcx+k8mqkec3n
W3Ygp2cnTx8rGw6ygO9Ddnf9XjOeT+t5m06zAP4vsGEqBTFFJGCmmTU8RN/jLaAj
QqmY3uihqHaJToBF3Rwi6L6ofgg7sWJOFoWlH19RfLVl4K7+ZTdhwo5A42h1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOM9eEdlibPwYFWliISYT23H+ZBIwHwYDVR0j
BBgwFoAUKMdy+AKUIBhgFIgJWqbFR6NpR4IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXFtMkFvNDVtOWI3a3JDQm91UWtyWTdSVjlYVzZwV1p1cnIxRXM1R2d4
cmkvMC8yOEM3NzJGODAyOTQyMDE4NjAxNDg4MDk1QUE2QzU0N0EzNjk0NzgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4Qzc3MkY4MDI5NDIwMTg2
MDE0ODgwOTVBQTZDNTQ3QTM2OTQ3ODIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VxbTJBbzQ1bTliN2tyQ0JvdVFrclk3UlY5WFc2cFdadXJyMUVzNUdneHJpLzAv
MzEzNzM3MmUzNjM3MmUzMjM0MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNTMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxQ/cwDQYJKoZIhvcNAQELBQADggEBAFDiNNJZ
Xfm0rf0TeSM06L6PffRWzkgvYCOpW5LLfId+pxi9rasT8f0J3qVqNJ8tk3gfFsIb
WNGjyjrz+TugbXh2Lr38g4p1W4P+1PM45G3p8g7kaiMEItRMgI8ZtE05b9wqyv7F
EJYej8wMYlkybHst/K0Q2UbEf2++xPMh6QFEOIhdRWao9BbzO2Cn3qUtx5hqD0nv
SQXVosq4/R13HjTYUBnOKuhi4/IMGNGqCffgm2m33R9rfzDnyf1o2morErZAzpwc
tfGsmpXLdI2gQw3D6rv8SaAFnu2apoIOcGFfQWVH80l7YAnTHMAhm8eYUrNIIDs8
1zX4jA4BLbWV8as=
-----END CERTIFICATE-----
Generated at Sun Jun 16 15:56:41 2024 by rpki-client on console-ams.rpki-client.org