Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3230382e302f32332d3233203d3e20323632353335.roa
File:                     3137372e38342e3230382e302f32332d3233203d3e20323632353335.roa (raw, json)
Hash identifier:          plqplmQXKLwCaR6tQZkO1rBUOHrZPSa3qAT5NdCz+Lc=
Subject key identifier:   55:26:1F:CB:CF:92:CB:E1:FD:1D:11:5C:28:C7:BA:F4:85:92:E7:EB
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       588ADF07B9B3A427D99F3667897B8DD64AA6EB3C
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3230382e302f32332d3233203d3e20323632353335.roa
Signing time:             Wed 09 Apr 2025 12:53:27 +0000
ROA not before:           Wed 09 Apr 2025 12:48:27 +0000
ROA not after:            Wed 08 Apr 2026 12:53:27 +0000
asID:                     262535
IP address blocks:        177.84.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 13:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:8a:df:07:b9:b3:a4:27:d9:9f:36:67:89:7b:8d:d6:4a:a6:eb:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: Apr  9 12:48:27 2025 GMT
            Not After : Apr  8 12:53:27 2026 GMT
        Subject: CN=55261FCBCF92CBE1FD1D115C28C7BAF48592E7EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:50:a0:72:b9:4e:de:d1:b3:71:b0:f2:3a:d1:
                    0d:ea:17:6e:1f:a8:3f:1e:c1:a6:83:4c:71:31:7e:
                    2c:90:f8:40:2a:bf:83:0b:0a:50:29:3e:e3:bd:a3:
                    aa:04:ee:17:b0:c9:ca:7e:48:6a:1a:33:8d:5c:ff:
                    aa:3f:39:61:73:3b:42:bf:97:0d:d7:bb:c9:c6:a6:
                    41:69:f6:e5:50:36:1d:b5:59:d9:60:16:77:9a:e1:
                    4a:9b:7d:43:7a:9d:03:78:96:f5:8f:2e:37:bc:23:
                    f2:cb:8e:b5:c2:cf:12:43:7b:2e:0b:62:1b:95:ac:
                    6b:9b:80:f0:bc:cd:42:bb:cb:ce:1e:a5:ae:03:9d:
                    00:f7:25:05:2b:6d:53:89:4c:34:84:59:a6:7a:d8:
                    14:b1:a6:af:36:65:3b:36:53:95:9b:5a:8b:df:25:
                    27:d5:8b:db:68:05:80:af:75:04:ea:9d:74:c9:4c:
                    20:80:fb:04:3f:77:72:67:8c:06:b6:7e:11:9c:e8:
                    4b:87:97:16:c4:dc:d9:3a:a3:11:ee:37:e5:e2:14:
                    3a:b1:eb:f6:64:57:7a:4f:2e:9a:5d:25:0b:35:2a:
                    50:d3:16:46:01:af:d3:4d:a0:ab:68:18:7a:06:45:
                    04:78:a2:17:4f:24:5b:d4:86:38:28:50:25:90:e5:
                    17:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:26:1F:CB:CF:92:CB:E1:FD:1D:11:5C:28:C7:BA:F4:85:92:E7:EB
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3230382e302f32332d3233203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:fe:f5:85:bb:6d:f1:22:97:9e:4c:2d:9c:09:b1:9f:1a:35:
         24:b1:0d:11:93:fb:dc:5f:e3:d3:54:c4:5d:7d:f0:44:91:85:
         5f:1c:0e:4c:cd:20:ff:64:0e:71:48:ef:86:15:71:87:8a:92:
         3d:69:45:26:d6:dd:8f:99:a6:32:1e:cd:2f:ae:77:0a:4a:15:
         ae:d2:75:5e:82:50:6f:77:03:63:41:43:d8:89:25:be:c6:f0:
         9f:96:f3:d3:f3:87:86:bf:45:15:ab:9d:47:4e:26:1a:bd:47:
         2f:5c:ef:43:f6:54:d0:98:ba:7f:4a:00:7e:8c:fa:8f:b0:96:
         63:19:6d:ba:94:9e:78:15:5b:98:f1:34:91:17:e0:38:b1:de:
         e8:8e:7e:ea:1f:0e:e9:ee:0d:54:d8:c0:2b:1b:e3:79:28:fe:
         d4:06:43:f6:6c:05:9a:fc:b3:e5:ed:01:b0:b4:97:a5:e7:d4:
         b4:4c:5f:54:fc:28:64:ad:4c:bb:23:98:80:e7:e3:38:94:2f:
         ad:9e:e7:7c:1c:39:25:44:3f:86:b1:f8:38:1b:96:35:70:b7:
         e0:1b:10:59:89:7b:b1:e5:8e:ce:59:b4:1f:5c:87:93:e4:aa:
         fc:0c:ed:fa:98:1a:56:bc:81:35:94:47:25:5a:a7:e3:28:cc:
         f6:30:76:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:24:32 2025 by rpki-client