Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3230382e302f32332d3233203d3e20323632353335.roa
File:                     3137372e38342e3230382e302f32332d3233203d3e20323632353335.roa (raw, json)
Hash identifier:          toJt0N0ujFgwW11ybBkj/7fZXj+PVL/D+V/qRmcdy/I=
Subject key identifier:   46:76:F0:5B:19:1A:20:20:ED:CF:74:1E:13:76:83:3B:2F:90:69:F7
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       6E8C6055928AC528E0F9D3EDB5440FE0920FABE9
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3230382e302f32332d3233203d3e20323632353335.roa
Signing time:             Wed 08 May 2024 12:08:31 +0000
ROA not before:           Wed 08 May 2024 12:03:31 +0000
ROA not after:            Wed 07 May 2025 12:08:31 +0000
asID:                     262535
IP address blocks:        177.84.208.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 16:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:8c:60:55:92:8a:c5:28:e0:f9:d3:ed:b5:44:0f:e0:92:0f:ab:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: May  8 12:03:31 2024 GMT
            Not After : May  7 12:08:31 2025 GMT
        Subject: CN=4676F05B191A2020EDCF741E1376833B2F9069F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:06:15:1f:19:f5:e3:ba:9a:66:c6:99:19:f9:
                    90:50:8a:6b:32:06:1b:09:a6:56:23:93:c0:47:4b:
                    84:3e:13:22:45:6d:7b:a1:68:f3:58:f9:ec:26:50:
                    31:80:1c:7d:bd:05:a5:b5:0a:d3:ab:41:65:f1:21:
                    07:5b:d6:4d:f6:bf:6a:f3:a7:31:4b:da:46:b0:41:
                    48:41:c3:cc:ba:6c:18:51:47:1d:35:0a:41:02:01:
                    60:83:c7:20:81:4c:88:c8:d1:9c:ef:5b:0f:c0:6c:
                    5e:3e:f3:6b:13:9c:8b:8b:ab:36:4c:7f:d3:43:44:
                    b9:84:b2:84:a0:84:45:02:36:92:d3:a0:97:40:78:
                    66:ae:59:cc:58:6d:41:e1:1e:55:b8:59:ae:d7:d0:
                    70:a5:8b:44:d8:c8:8b:4c:60:e7:c8:db:37:ea:9c:
                    32:7b:8b:a3:d1:70:52:76:80:4e:5a:54:d6:6d:ed:
                    d0:7d:7f:b1:c9:24:f2:8a:70:e9:bc:a4:8d:79:5c:
                    3b:79:e5:28:44:66:40:54:5f:80:ca:62:d6:91:03:
                    98:77:93:0f:dd:e0:47:f5:4d:24:9d:95:53:63:0e:
                    54:09:f9:23:d4:ac:f3:e0:02:38:d5:0e:9f:39:91:
                    67:b5:e5:f7:1d:f8:b2:57:8e:64:f3:55:00:9c:71:
                    d0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:76:F0:5B:19:1A:20:20:ED:CF:74:1E:13:76:83:3B:2F:90:69:F7
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3230382e302f32332d3233203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:c3:26:86:9b:52:f8:0a:b4:66:18:28:db:3b:ba:94:d1:90:
         e6:d9:2b:aa:c0:38:3f:0e:3c:53:25:a4:ed:e4:0e:ed:53:e6:
         d1:cb:1d:e5:77:a5:86:fa:2e:93:98:d1:6d:2c:3d:6e:1f:0d:
         57:2e:24:6d:98:7c:73:74:ed:10:c8:09:0a:1a:6e:b3:10:a6:
         9c:06:8f:db:cd:04:b5:81:e0:b1:7f:ea:4c:99:57:1f:4d:dd:
         f9:71:bb:03:80:09:3d:9f:03:63:02:d0:37:f3:da:e3:9d:a4:
         c0:38:45:fe:9f:24:b2:24:da:56:3c:fd:70:1a:eb:84:9f:a1:
         95:69:4e:2b:fe:6d:e2:d1:cb:cd:e8:0c:29:bc:e5:56:93:fa:
         68:e3:fd:4f:2f:e2:b9:e5:67:fb:9f:e8:d3:c0:17:74:2e:da:
         c5:6d:19:38:3d:f7:d8:ec:18:a9:e4:15:bb:f1:fd:ae:ab:83:
         a2:7b:43:5f:d9:b6:d7:8d:97:f2:87:43:66:51:08:06:2d:53:
         85:60:59:cf:27:bb:0e:0d:50:9a:f3:6c:87:ee:9f:90:93:e5:
         25:72:68:83:86:62:da:7e:26:f5:29:55:31:af:cb:4e:f5:47:
         89:f5:f2:cf:44:5b:d5:b4:63:8b:8c:3f:2c:3a:8e:5f:48:9e:
         d6:ae:ad:3c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUboxgVZKKxSjg+dPttUQP4JIPq+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhDNzcyRjgwMjk0MjAxODYwMTQ4ODA5NUFBNkM1NDdB
MzY5NDc4MjAeFw0yNDA1MDgxMjAzMzFaFw0yNTA1MDcxMjA4MzFaMDMxMTAvBgNV
BAMTKDQ2NzZGMDVCMTkxQTIwMjBFRENGNzQxRTEzNzY4MzNCMkY5MDY5RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkBhUfGfXjuppmxpkZ+ZBQimsy
BhsJplYjk8BHS4Q+EyJFbXuhaPNY+ewmUDGAHH29BaW1CtOrQWXxIQdb1k32v2rz
pzFL2kawQUhBw8y6bBhRRx01CkECAWCDxyCBTIjI0ZzvWw/AbF4+82sTnIuLqzZM
f9NDRLmEsoSghEUCNpLToJdAeGauWcxYbUHhHlW4Wa7X0HCli0TYyItMYOfI2zfq
nDJ7i6PRcFJ2gE5aVNZt7dB9f7HJJPKKcOm8pI15XDt55ShEZkBUX4DKYtaRA5h3
kw/d4Ef1TSSdlVNjDlQJ+SPUrPPgAjjVDp85kWe15fcd+LJXjmTzVQCccdBdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURnbwWxkaICDtz3QeE3aDOy+QafcwHwYDVR0j
BBgwFoAUKMdy+AKUIBhgFIgJWqbFR6NpR4IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXFtMkFvNDVtOWI3a3JDQm91UWtyWTdSVjlYVzZwV1p1cnIxRXM1R2d4
cmkvMC8yOEM3NzJGODAyOTQyMDE4NjAxNDg4MDk1QUE2QzU0N0EzNjk0NzgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4Qzc3MkY4MDI5NDIwMTg2
MDE0ODgwOTVBQTZDNTQ3QTM2OTQ3ODIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VxbTJBbzQ1bTliN2tyQ0JvdVFrclk3UlY5WFc2cFdadXJyMUVzNUdneHJpLzAv
MzEzNzM3MmUzODM0MmUzMjMwMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzNTMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxVNAwDQYJKoZIhvcNAQELBQADggEBAEnDJoab
UvgKtGYYKNs7upTRkObZK6rAOD8OPFMlpO3kDu1T5tHLHeV3pYb6LpOY0W0sPW4f
DVcuJG2YfHN07RDICQoabrMQppwGj9vNBLWB4LF/6kyZVx9N3flxuwOACT2fA2MC
0Dfz2uOdpMA4Rf6fJLIk2lY8/XAa64SfoZVpTiv+beLRy83oDCm85VaT+mjj/U8v
4rnlZ/uf6NPAF3Qu2sVtGTg999jsGKnkFbvx/a6rg6J7Q1/ZtteNl/KHQ2ZRCAYt
U4VgWc8nuw4NUJrzbIfun5CT5SVyaIOGYtp+JvUpVTGvy071R4n18s9EW9W0Y4uM
Pyw6jl9IntaurTw=
-----END CERTIFICATE-----
Generated at Mon Nov 25 15:27:11 2024 by rpki-client on console-fra.rpki-client.org