Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3231322e302f32332d3233203d3e20323632353335.roa
File:                     3137372e38342e3231322e302f32332d3233203d3e20323632353335.roa (raw, json)
Hash identifier:          9H+twF0VEe7BuFDPRvBG6Tfqqq/E5MRNvWt/W6qaUHM=
Subject key identifier:   19:67:8D:23:91:2D:D8:71:B3:C5:90:99:5C:FC:94:10:0F:F6:D0:6D
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       4E32C0987AFAB807C10F3642FCCE741CA096F984
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3231322e302f32332d3233203d3e20323632353335.roa
Signing time:             Wed 09 Apr 2025 12:53:32 +0000
ROA not before:           Wed 09 Apr 2025 12:48:32 +0000
ROA not after:            Wed 08 Apr 2026 12:53:32 +0000
asID:                     262535
IP address blocks:        177.84.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 13:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:32:c0:98:7a:fa:b8:07:c1:0f:36:42:fc:ce:74:1c:a0:96:f9:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: Apr  9 12:48:32 2025 GMT
            Not After : Apr  8 12:53:32 2026 GMT
        Subject: CN=19678D23912DD871B3C590995CFC94100FF6D06D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a6:e1:bf:d1:9d:45:3c:c0:cf:35:56:f6:d1:
                    12:3b:4b:f0:7c:19:4c:4d:1e:e1:6a:01:5d:09:2c:
                    c8:a2:bf:92:92:b2:fb:a5:d8:55:60:5b:0c:e0:8b:
                    ce:3b:a9:34:a2:48:3b:78:0a:ff:cf:a7:88:04:52:
                    16:65:56:fe:46:72:66:a8:7e:43:d3:fe:fe:4f:89:
                    70:88:74:cf:eb:ab:e4:46:08:4e:1b:57:95:c3:fd:
                    3c:01:0a:0d:38:53:d0:9e:38:4b:b2:58:b7:51:ea:
                    86:c0:e0:35:d1:be:5d:c1:b2:bb:37:e6:9f:0d:b4:
                    c1:b6:83:3f:9e:a8:66:a1:2a:dc:c1:01:37:69:21:
                    f4:43:49:2c:2e:5c:cd:37:23:e6:1c:26:bf:6b:08:
                    68:2c:ae:bf:dc:18:7b:b6:a2:97:3b:38:16:56:79:
                    3d:d5:16:ee:7f:0b:2b:42:ef:96:bf:9f:ef:c3:6d:
                    0c:97:91:66:60:f0:c6:24:9e:c4:d4:06:c1:b9:02:
                    3e:be:92:c8:33:52:bb:41:e3:51:83:35:c4:b7:39:
                    f1:a4:e8:62:48:7b:15:5e:ac:c3:d9:94:33:aa:9c:
                    82:85:c2:86:b2:d6:a8:2f:ba:a3:c4:38:88:50:fb:
                    85:8a:71:82:c9:0d:df:6f:75:af:29:13:8b:c4:0d:
                    31:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:67:8D:23:91:2D:D8:71:B3:C5:90:99:5C:FC:94:10:0F:F6:D0:6D
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3231322e302f32332d3233203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:de:e6:8e:14:30:92:aa:ee:95:44:84:2a:29:0a:7f:c5:87:
         cf:fb:a2:e4:6d:74:0a:b9:75:bb:e3:d0:4a:af:6f:47:85:ff:
         44:6b:d3:a3:22:a3:94:cc:b1:df:1e:58:11:7e:f2:8c:ec:a0:
         78:2c:0c:63:0c:d6:a5:34:f6:80:c2:ac:3c:23:45:03:2d:1d:
         fe:be:9e:83:a0:f1:06:db:f4:0a:7a:57:9c:4f:eb:86:59:33:
         5f:48:49:e2:48:7c:f9:2a:44:46:61:67:bb:6a:bd:b4:26:7f:
         92:bd:75:96:2b:69:23:8c:66:50:70:eb:1f:73:6e:22:6c:af:
         c5:42:b0:ff:64:9e:27:1f:a3:f4:81:2d:1a:2d:93:90:42:98:
         b0:80:0d:87:ae:91:2a:6d:b2:eb:7a:f7:fe:0f:17:d2:26:c4:
         ef:86:16:a1:47:80:63:3e:61:43:31:04:fa:7f:7c:ec:ca:8d:
         e9:6a:f5:df:99:6d:3e:15:a0:1f:97:85:cf:8d:ca:9a:e2:b9:
         23:27:bf:30:94:e9:f7:db:4b:4c:88:5c:a8:a8:a8:92:db:9a:
         71:ed:4f:fd:71:b9:4b:bd:1a:71:42:59:d3:b6:0e:20:7c:a0:
         d1:a9:d1:2f:fc:fc:8b:d7:80:77:0e:d1:e5:c2:c6:1d:2e:af:
         4b:d7:4d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:23:16 2025 by rpki-client