Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3230392e302f32342d3234203d3e20323632353335.roa
File:                     3137372e38342e3230392e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          yJsV5oFAmbc/NBjBnTRiSzQyJW7c0rz9hDjnWq/A8SY=
Subject key identifier:   0E:57:46:09:48:0C:60:99:0E:37:0C:A3:60:82:97:D1:EE:60:E4:D7
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       5E80F5C6DF08D897F824633FB2E3554B823EA8F0
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3230392e302f32342d3234203d3e20323632353335.roa
Signing time:             Wed 08 May 2024 12:08:34 +0000
ROA not before:           Wed 08 May 2024 12:03:34 +0000
ROA not after:            Wed 07 May 2025 12:08:34 +0000
asID:                     262535
IP address blocks:        177.84.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:53:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:80:f5:c6:df:08:d8:97:f8:24:63:3f:b2:e3:55:4b:82:3e:a8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: May  8 12:03:34 2024 GMT
            Not After : May  7 12:08:34 2025 GMT
        Subject: CN=0E574609480C60990E370CA3608297D1EE60E4D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:99:20:ec:e6:99:b0:dc:3d:b9:a0:d4:ec:e9:
                    96:b4:09:a6:39:56:84:0c:b0:a3:47:23:ce:2b:9b:
                    cf:88:3a:cb:b3:bc:0f:dd:97:3e:3e:92:1f:f3:77:
                    4b:03:57:d3:7b:0c:5f:8d:d6:31:a6:bc:f1:f7:d3:
                    6e:8c:2f:23:09:54:3b:8d:29:af:e6:54:98:b1:5e:
                    f8:32:1a:0c:03:50:39:8c:74:36:9f:2c:e7:7a:fb:
                    95:c5:54:56:92:99:25:bd:e6:fc:dd:2b:ec:ca:eb:
                    85:28:5f:a1:ef:20:45:e1:98:29:53:04:8d:5c:a2:
                    aa:2c:39:27:45:e3:0c:7a:e1:a4:1d:f0:d0:9c:ea:
                    66:83:e4:75:2e:38:02:74:5c:c8:76:18:e5:26:5e:
                    df:4f:18:25:08:bb:14:03:98:a1:19:e8:bc:f7:d8:
                    f0:19:6d:a4:39:44:57:9b:03:45:c9:55:10:ee:b2:
                    44:65:78:8d:42:33:12:62:24:18:af:6b:a4:70:de:
                    4d:a6:f5:1e:72:0b:33:ea:2e:b1:90:d2:2f:aa:9f:
                    6a:8a:0b:40:9a:ae:39:f7:e4:5d:c4:b7:38:33:da:
                    cc:4f:19:91:f9:25:21:27:49:b0:73:76:1f:b3:8a:
                    c1:1a:3a:7f:ca:3b:31:ec:37:86:2b:cf:1e:f5:d9:
                    3f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:57:46:09:48:0C:60:99:0E:37:0C:A3:60:82:97:D1:EE:60:E4:D7
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3230392e302f32342d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:7c:e7:8f:3f:96:bf:b8:b7:a5:2e:3e:15:65:48:9e:27:85:
         25:02:12:8b:e6:3e:81:d5:56:73:60:7a:b2:a7:57:1e:db:01:
         56:6b:7a:42:55:ae:10:13:cf:e9:2e:e8:ac:7f:a9:12:06:5b:
         6e:ba:51:27:35:96:b4:02:40:b7:48:d7:c8:61:0a:1d:18:e9:
         b5:44:90:a9:5d:6e:a0:40:77:18:98:b8:d1:0d:69:f3:bd:78:
         71:db:a3:c0:43:88:d7:7d:5b:94:f9:05:42:c3:be:1c:33:e2:
         2b:29:b6:c8:47:ad:1a:56:e5:71:4b:b1:8e:e8:89:0f:68:23:
         fb:cd:46:00:e5:7e:a4:e2:bc:bc:1d:9f:6e:88:6d:a1:3f:72:
         d1:ba:ca:a5:f4:a8:76:ea:dd:13:5f:91:fb:5c:f8:56:8f:17:
         a8:54:5c:86:60:ae:6e:40:15:c9:86:9b:0c:7b:42:49:72:66:
         c7:e3:0a:e1:c3:bc:5d:52:f1:73:b7:46:b5:26:ae:1e:b8:1d:
         76:0e:d6:89:58:93:b4:e9:20:75:96:9e:f9:19:e2:a5:2a:72:
         9d:f3:7e:17:15:d1:e0:ee:bc:a7:ab:16:85:4b:8a:f9:e8:02:
         92:02:b8:cd:ba:72:64:69:0d:f6:19:5b:76:f7:3d:dc:2c:d3:
         cd:87:f9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:59 2024 by rpki-client on console-fra.rpki-client.org