Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234372e302f32342d3234203d3e20323632353335.roa
File:                     3137372e36372e3234372e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          pi3mdurJq5RvldX9FEeQ7tzqZ6F+UAv+FSQ6WfoyqNE=
Subject key identifier:   23:CF:46:9C:34:DB:80:FE:CA:96:E1:33:FA:7E:60:00:3B:8B:91:F1
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       203E51AD9724E8EF211DB90E8E63C63299FD1D33
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234372e302f32342d3234203d3e20323632353335.roa
Signing time:             Wed 09 Apr 2025 12:53:26 +0000
ROA not before:           Wed 09 Apr 2025 12:48:26 +0000
ROA not after:            Wed 08 Apr 2026 12:53:26 +0000
asID:                     262535
IP address blocks:        177.67.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 13:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:3e:51:ad:97:24:e8:ef:21:1d:b9:0e:8e:63:c6:32:99:fd:1d:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: Apr  9 12:48:26 2025 GMT
            Not After : Apr  8 12:53:26 2026 GMT
        Subject: CN=23CF469C34DB80FECA96E133FA7E60003B8B91F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0f:ae:16:21:35:83:0f:29:8a:18:a5:ee:25:
                    2b:8d:db:cd:84:2c:df:bd:7e:62:83:7b:ea:5b:88:
                    1e:01:49:2c:a2:7b:b8:12:b3:d6:0a:fc:be:14:7d:
                    1a:72:95:3d:32:00:14:96:3a:eb:5b:dd:1b:20:96:
                    b8:8c:ee:67:12:b8:f0:e8:41:ca:94:8e:f4:f4:72:
                    ae:c4:10:ae:5e:4b:8c:74:65:74:4d:65:e0:51:28:
                    30:76:cd:29:25:1f:45:64:34:a4:68:8b:c5:df:22:
                    27:f1:be:89:2a:2e:da:06:54:6d:27:c7:74:c6:07:
                    97:ca:29:4d:1f:c9:4f:ae:0e:38:b2:d8:46:f2:33:
                    03:3d:e6:bf:3f:f0:02:05:5a:6e:b4:b2:e0:97:05:
                    53:18:be:1d:76:5a:c0:cd:cd:e8:2c:3e:91:b6:bc:
                    fb:7a:77:37:d5:3a:ec:fa:0a:93:3f:2a:b1:bd:f6:
                    65:1e:ff:1b:08:06:81:d3:e6:25:17:89:e5:3c:17:
                    6c:a1:66:fa:69:8b:f2:4f:4f:7d:45:bf:bb:f6:a7:
                    c7:2f:ca:e4:fb:2a:03:d2:59:f1:a7:8a:65:d7:1e:
                    6e:4b:f2:e4:e0:28:24:29:ac:48:e2:e3:44:25:c9:
                    de:c4:fc:67:b1:2c:16:66:0f:bb:57:c8:5b:f3:db:
                    f7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:CF:46:9C:34:DB:80:FE:CA:96:E1:33:FA:7E:60:00:3B:8B:91:F1
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234372e302f32342d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:a2:2f:2c:f6:0f:10:45:75:69:2b:f1:69:4a:4d:cd:66:78:
         fc:de:10:07:d8:95:f7:72:a5:5e:a9:b2:ee:54:6b:a6:df:a0:
         93:b6:58:a5:df:ac:90:22:f7:68:1f:85:6d:6a:0d:8b:ee:22:
         7b:bc:3d:8a:fb:b5:7b:e9:b6:35:1f:72:24:a8:e5:79:16:32:
         29:7e:75:65:c4:d2:3e:6e:7b:2f:61:25:2d:e0:2b:d2:55:da:
         39:bb:2f:e1:dc:67:9c:47:d7:37:f5:bc:ab:27:3a:0c:e4:5b:
         c6:ea:1b:7d:46:d4:41:1e:e1:c2:f7:f1:0f:cf:c1:f3:e3:de:
         64:6d:56:8e:79:af:12:8d:fb:74:6b:68:b5:55:de:07:2f:c2:
         f5:99:06:69:9c:54:e6:6f:14:44:81:21:2b:86:52:29:10:3c:
         64:37:6c:e6:0a:4d:43:ba:b9:15:b3:0d:67:28:e2:f6:18:42:
         28:c2:c1:60:9f:b5:73:83:7f:0f:be:3b:99:c2:26:7d:a6:ca:
         de:83:a4:3d:5e:cf:45:91:60:f4:64:12:2e:f9:11:61:6c:9d:
         29:7d:5a:0d:5d:17:e3:24:94:b2:5c:b0:70:e9:90:b3:5c:ac:
         10:94:01:b6:b5:13:2d:c6:55:d2:42:9e:d5:68:d1:61:de:ff:
         d8:16:dd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:24:34 2025 by rpki-client