Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3230392e302f32342d3234203d3e20323632353335.roa
File:                     3137372e38342e3230392e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          fhmO6ASblET/fWHeYIklun7/8JDgkZgG9YEBUdl8uP4=
Subject key identifier:   D6:E3:71:6A:DE:0A:5E:42:96:24:AF:D2:F8:8B:74:B2:39:9D:42:45
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       166FFF6D7329EC2844AE81A42ED61F571BF8C476
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3230392e302f32342d3234203d3e20323632353335.roa
Signing time:             Wed 09 Apr 2025 12:53:32 +0000
ROA not before:           Wed 09 Apr 2025 12:48:32 +0000
ROA not after:            Wed 08 Apr 2026 12:53:32 +0000
asID:                     262535
IP address blocks:        177.84.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 13:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:6f:ff:6d:73:29:ec:28:44:ae:81:a4:2e:d6:1f:57:1b:f8:c4:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: Apr  9 12:48:32 2025 GMT
            Not After : Apr  8 12:53:32 2026 GMT
        Subject: CN=D6E3716ADE0A5E429624AFD2F88B74B2399D4245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5f:bc:13:cd:fa:5a:77:db:83:07:99:e0:ad:
                    83:b7:7b:56:f1:03:e4:b0:44:94:b7:34:63:9a:a8:
                    66:b3:68:5c:3a:bc:64:9c:74:9d:c1:7a:e5:06:b5:
                    fb:38:10:52:8c:8f:43:21:88:ac:3a:b0:b5:ee:0a:
                    62:7b:c3:0e:83:c5:46:9f:8e:50:2c:7b:18:d4:ed:
                    3f:15:76:db:ab:6f:7b:1b:c4:81:df:1a:1f:b9:87:
                    2c:3e:39:b9:d8:3d:0a:8e:a5:b3:e5:8f:f6:bc:6d:
                    4b:83:25:b4:79:9f:c3:23:c9:1e:bf:77:43:fd:de:
                    13:86:ee:32:8d:a1:b3:e5:d2:6d:24:01:ea:1c:a0:
                    11:01:05:c5:04:99:f0:45:59:31:a8:e2:a5:e6:d5:
                    33:dd:15:7b:b3:52:7b:20:9d:88:f7:48:fe:a7:9f:
                    54:dd:fd:03:1d:65:f1:79:6a:db:f3:ff:90:f0:45:
                    8a:a2:f3:08:26:ce:3d:70:a0:1f:10:6f:38:76:7a:
                    39:be:f2:8d:ac:c3:b6:b9:25:8a:bf:bb:ef:5d:f2:
                    49:74:8a:a4:5b:de:76:9c:dc:60:01:63:4e:2b:44:
                    e9:a0:1e:72:1d:a5:44:2f:8a:b0:92:f9:c5:80:62:
                    ce:90:1d:6a:97:8b:2b:9b:68:ce:1e:a5:25:5d:b0:
                    4a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E3:71:6A:DE:0A:5E:42:96:24:AF:D2:F8:8B:74:B2:39:9D:42:45
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3230392e302f32342d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:e4:30:15:f2:21:1d:98:46:14:7d:7f:23:52:a4:22:c9:11:
         09:98:dc:b8:80:0e:bd:ec:f7:b4:20:21:a1:a1:e9:5d:98:e1:
         0f:3c:b7:2c:40:7a:b9:4d:18:c9:5e:35:de:d5:05:7b:17:55:
         c5:8c:07:12:e5:e2:bb:dc:d9:36:7f:9c:63:1c:9f:fd:78:8a:
         ee:1a:e2:9e:76:f9:14:20:9b:f7:43:e4:54:6f:92:90:10:08:
         c8:cc:bd:cd:8b:26:3d:84:92:fe:7e:36:f6:3c:6d:a4:be:34:
         dd:05:65:29:2a:6a:0b:53:1f:10:16:0a:a1:12:8f:9a:a0:a1:
         7e:51:ee:46:23:de:a9:db:fc:3b:b6:13:f3:1c:3b:41:bf:aa:
         f7:a7:ef:22:ff:d3:b9:54:6f:d8:d0:cb:cc:04:f1:4b:07:38:
         f7:4c:1a:e0:4f:2b:0a:a2:d6:7c:6a:84:57:04:b7:8b:d7:b4:
         b0:81:f1:d6:a7:0a:1a:4d:ae:40:a5:93:3e:a4:9a:ce:4f:62:
         60:8d:0a:23:9c:cd:93:67:c6:11:ef:f6:88:ec:67:db:ad:ca:
         fe:a3:48:5d:d3:a5:88:02:39:35:fb:a5:99:44:33:70:78:d5:
         ba:14:e4:c1:c3:8a:08:c9:61:ce:71:7d:c1:97:66:02:77:7a:
         89:dd:af:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:25:27 2025 by rpki-client