Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3230382e302f32342d3234203d3e20323632353335.roa
File:                     3137372e38342e3230382e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          tQtXt8lkhFHmFCkY3OMujCAwqFEQPYRT15fJmT/WS5k=
Subject key identifier:   55:BC:D3:35:AD:C0:42:8C:0D:CD:DA:8F:F2:5D:D0:89:4A:3B:C9:82
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       5D2669848546C26A3DE1B2C7551A006B860249D1
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3230382e302f32342d3234203d3e20323632353335.roa
Signing time:             Wed 08 May 2024 12:08:28 +0000
ROA not before:           Wed 08 May 2024 12:03:28 +0000
ROA not after:            Wed 07 May 2025 12:08:28 +0000
asID:                     262535
IP address blocks:        177.84.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 16:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:26:69:84:85:46:c2:6a:3d:e1:b2:c7:55:1a:00:6b:86:02:49:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: May  8 12:03:28 2024 GMT
            Not After : May  7 12:08:28 2025 GMT
        Subject: CN=55BCD335ADC0428C0DCDDA8FF25DD0894A3BC982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0b:a0:e3:ba:f7:47:a3:ee:05:32:ea:91:79:
                    13:57:07:8f:e0:7b:1c:bb:23:23:49:ba:0e:36:77:
                    f6:65:5f:13:00:c6:09:05:a8:68:0c:d4:42:ec:26:
                    5a:76:e5:ac:26:f4:14:72:94:f1:00:62:89:7e:fe:
                    97:89:e5:0b:b9:b8:74:57:c3:81:7d:ed:39:7d:02:
                    7a:90:a8:3e:92:e1:81:ca:75:84:d7:94:2c:e4:e7:
                    7d:9d:51:19:f4:13:9a:d2:0e:32:24:f1:87:22:a8:
                    c9:3f:eb:73:54:2e:de:99:b6:b3:60:db:80:80:08:
                    72:61:14:ab:6a:f4:cd:3d:a1:52:81:7a:0f:cb:42:
                    73:8f:28:ef:50:0d:b2:04:57:59:42:13:f3:16:53:
                    35:f6:16:09:bb:a3:95:4e:e1:cd:cb:61:8b:66:cc:
                    13:b3:c7:60:20:29:3a:98:15:d2:b8:25:09:d0:11:
                    f5:7f:26:19:b8:fe:e5:be:30:03:ea:e1:82:10:f1:
                    50:c2:df:eb:72:5e:d8:6a:71:db:5e:11:b8:bc:00:
                    f8:08:3b:1e:3a:46:62:da:68:9f:e6:32:66:32:89:
                    9d:3d:8a:1b:fc:f7:11:ab:4b:06:00:45:5b:4e:63:
                    7d:4b:78:da:fa:d4:11:fa:e4:25:a1:a9:f5:e2:8a:
                    84:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:BC:D3:35:AD:C0:42:8C:0D:CD:DA:8F:F2:5D:D0:89:4A:3B:C9:82
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3230382e302f32342d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:b1:6e:4f:fa:5e:36:e8:b0:c4:df:fa:4e:0b:ca:0c:63:2a:
         2b:d4:e4:10:99:3a:6a:ec:20:c1:93:66:06:89:19:e2:ed:04:
         65:42:e6:a5:82:1e:b4:e7:8b:38:c0:49:cd:8b:e0:ff:48:4d:
         de:50:b4:07:56:6d:47:5e:4e:98:8d:2f:85:b4:79:a2:dc:b5:
         b6:76:35:76:c2:69:91:f8:d8:e2:ba:e3:8e:56:45:28:1c:75:
         93:4e:41:ed:cb:9c:e4:0e:d2:ec:33:92:10:a9:42:75:6a:de:
         7c:82:8a:c3:c3:8d:4d:77:b8:87:03:af:f4:04:34:3a:37:95:
         f5:a8:1d:86:7b:9c:b7:8f:e8:84:fa:54:31:45:2e:29:ea:88:
         4c:fd:13:98:1c:ac:54:7b:1b:09:82:c3:a4:da:bf:a2:9b:39:
         06:50:d0:b1:32:a9:ea:e9:59:fb:7b:ed:53:2b:52:f0:2a:a9:
         f4:b9:a1:68:44:67:68:65:fc:e1:79:4e:88:5e:90:63:9c:3e:
         c0:2d:82:58:45:0a:ad:b0:50:94:24:04:01:59:88:0c:07:4b:
         f6:3e:24:f6:a1:be:c8:39:f8:59:d7:d1:ad:f9:e3:d3:ae:3e:
         ac:8d:66:e5:46:d0:69:67:75:1b:ad:9a:81:46:ac:d4:fc:22:
         89:58:b1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:50:04 2024 by rpki-client on console-ams.rpki-client.org