Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3231302e302f32332d3233203d3e20323632353335.roa
File:                     3137372e38342e3231302e302f32332d3233203d3e20323632353335.roa (raw, json)
Hash identifier:          JniwxHlhAS1Hvz/qr0olqxdlspNriknbEmf6PfrYUGU=
Subject key identifier:   8C:89:2F:03:ED:6E:79:79:5A:12:4A:3C:2C:C7:ED:12:FC:0F:B1:AB
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       6642A84DE059A9CC0158208B20B11594AD2031DF
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3231302e302f32332d3233203d3e20323632353335.roa
Signing time:             Wed 08 May 2024 12:08:19 +0000
ROA not before:           Wed 08 May 2024 12:03:19 +0000
ROA not after:            Wed 07 May 2025 12:08:19 +0000
asID:                     262535
IP address blocks:        177.84.210.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:42:a8:4d:e0:59:a9:cc:01:58:20:8b:20:b1:15:94:ad:20:31:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: May  8 12:03:19 2024 GMT
            Not After : May  7 12:08:19 2025 GMT
        Subject: CN=8C892F03ED6E79795A124A3C2CC7ED12FC0FB1AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:33:c3:9b:de:78:85:b7:b5:f3:64:91:eb:3c:
                    bf:64:c9:57:75:20:0b:19:da:7c:7e:69:bc:04:26:
                    1b:4e:76:a2:b5:fe:77:be:fd:66:1e:0d:8d:6e:37:
                    0d:f7:e9:5c:d4:98:67:56:37:59:6d:f0:c7:09:98:
                    2b:49:f4:f4:be:f5:4b:94:c7:bd:c9:21:97:09:2c:
                    f7:2c:d4:32:b6:e6:3a:48:38:ad:a3:7a:7c:a5:da:
                    ce:78:c4:40:df:1a:db:21:6e:fd:34:a4:12:69:8f:
                    71:11:6b:be:13:26:87:56:ba:1e:de:85:11:65:03:
                    45:21:86:04:20:3c:59:ad:20:3c:b5:e9:4a:b9:df:
                    fe:4c:c4:88:a0:05:fc:9b:64:68:8c:5a:ca:ac:65:
                    d8:93:6a:b2:d1:5c:41:0c:27:a2:f5:b5:f0:d6:12:
                    9f:11:4f:77:e5:22:d4:a7:74:ab:ee:11:6c:27:7d:
                    6c:7b:cf:6c:fa:49:da:82:97:7c:60:e2:cf:2e:11:
                    de:73:cf:09:a9:52:ee:0a:9a:44:c4:4c:6f:e3:56:
                    66:d9:6e:03:db:84:c2:2f:35:c6:46:9a:f6:5e:2b:
                    07:e2:29:3a:97:70:c2:64:28:46:92:91:e2:55:9b:
                    c4:20:69:ea:bf:1a:35:0d:58:d6:55:5e:c0:f3:1f:
                    7d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:89:2F:03:ED:6E:79:79:5A:12:4A:3C:2C:C7:ED:12:FC:0F:B1:AB
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3231302e302f32332d3233203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:f0:cd:53:1a:14:37:cc:a4:33:69:b6:8d:28:67:31:99:d5:
         b1:2e:27:c8:1c:4e:1f:79:3b:c3:0c:d1:55:4f:de:b6:03:8c:
         ff:db:f5:d3:3f:4b:dc:06:a4:6e:99:9f:1e:24:a7:ae:2e:ea:
         d1:5d:b8:3d:8b:5a:83:23:a9:b6:80:d9:9a:6d:3e:e5:17:80:
         b5:2e:a1:36:59:ce:d6:c3:fc:26:d4:b1:d3:2a:ca:29:f2:92:
         6d:46:af:97:75:3a:e1:70:d5:ee:f4:13:57:43:48:c9:39:33:
         ff:90:39:4e:47:7d:96:99:16:9f:3d:01:b9:7d:48:03:75:62:
         71:42:0b:70:34:d4:96:38:5a:13:eb:6f:9a:5d:f5:38:02:99:
         e8:46:71:c8:f8:cc:ba:03:29:40:69:08:5d:c1:18:de:f3:8d:
         b4:aa:67:51:f6:e3:8e:95:de:c1:08:f5:57:f6:4d:75:04:ee:
         9c:e0:bd:39:43:b3:0c:0c:ae:cd:d0:81:ad:8a:e2:66:f4:db:
         65:a6:ce:84:d0:b6:d4:71:c5:00:94:8a:00:f7:f6:85:e6:26:
         ab:91:2c:5e:7e:ff:b4:fd:59:bf:a7:72:ec:df:5e:a7:a4:0a:
         7d:c9:0e:11:22:d2:70:68:2a:08:d0:4c:f8:c6:46:7f:c8:35:
         8d:93:af:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 15:20:17 2024 by rpki-client on console-fra.rpki-client.org