Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3231342e302f32342d3234203d3e20323632353335.roa
File:                     3137372e38342e3231342e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          g8Po8pEKX6VzDCkWhPvQsTdzgYGySc3lr68OuhWNQhM=
Subject key identifier:   28:A0:6F:67:1C:D3:71:9B:C8:FE:22:7A:44:9C:49:3F:1D:99:DC:35
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       59B16054911BDB11026DDD6AE7E9410C292C5555
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3231342e302f32342d3234203d3e20323632353335.roa
Signing time:             Wed 08 May 2024 12:08:33 +0000
ROA not before:           Wed 08 May 2024 12:03:33 +0000
ROA not after:            Wed 07 May 2025 12:08:33 +0000
asID:                     262535
IP address blocks:        177.84.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b1:60:54:91:1b:db:11:02:6d:dd:6a:e7:e9:41:0c:29:2c:55:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: May  8 12:03:33 2024 GMT
            Not After : May  7 12:08:33 2025 GMT
        Subject: CN=28A06F671CD3719BC8FE227A449C493F1D99DC35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:26:77:c9:95:c7:44:4d:2b:8e:d5:4d:19:4c:
                    ca:c2:11:d0:4e:23:35:ce:32:fe:4e:3b:11:d0:91:
                    74:d7:83:44:f8:45:a1:78:5f:26:66:a5:e7:51:14:
                    b2:3e:d2:b9:62:22:96:39:80:47:77:c3:43:67:81:
                    79:1b:4d:7e:87:bb:67:7a:25:8c:f4:41:19:28:bd:
                    3c:1d:b1:63:97:fa:ae:c9:4f:9e:a5:44:9c:ef:c2:
                    73:be:64:92:1b:41:71:23:85:73:fc:3e:38:e8:31:
                    91:4b:c4:5b:d0:aa:bb:47:0c:4f:51:ea:21:a9:0c:
                    ff:12:81:65:0d:55:18:1b:18:9b:cc:49:82:b3:5f:
                    46:d7:5a:6a:46:8a:2e:5e:95:fd:f1:4b:b8:35:13:
                    39:74:9d:ae:23:de:e1:55:fc:24:41:4a:a2:33:0b:
                    d9:6e:49:35:6d:a0:91:c3:9e:d4:df:cb:97:de:49:
                    ad:64:98:96:94:f1:fa:29:f0:a6:78:25:20:e3:f9:
                    be:10:79:61:13:a2:5b:fe:4b:bd:91:05:52:64:bb:
                    bf:8a:62:ef:f7:51:e2:39:e1:bc:f3:33:eb:69:0c:
                    5f:b6:10:37:7d:5e:34:cc:44:20:7f:07:f1:fc:39:
                    b7:ab:4e:72:f8:c7:ef:56:e5:3d:c4:dd:82:17:25:
                    f7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A0:6F:67:1C:D3:71:9B:C8:FE:22:7A:44:9C:49:3F:1D:99:DC:35
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3231342e302f32342d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:0e:71:fc:a9:2d:6d:a4:4a:fa:86:51:8a:f7:23:f1:e3:41:
         f0:bb:af:ac:e8:d9:cf:40:48:d7:ec:c5:cb:c3:09:7d:25:8f:
         31:43:60:e7:51:34:eb:4c:58:08:61:92:ea:79:9a:fb:44:72:
         50:db:ad:02:5c:5c:32:6e:1a:8e:77:52:52:66:d1:8d:fd:19:
         82:86:b6:2f:e8:98:fd:b0:30:09:3a:06:78:b9:f7:de:88:17:
         32:44:fb:25:c9:aa:78:04:c2:50:77:c7:e5:cb:6f:6a:03:e6:
         b3:18:81:22:21:c4:05:e7:a3:d9:c9:c8:25:26:0d:9f:54:47:
         f4:27:a8:e8:3d:32:fa:84:b0:0b:92:e9:1f:ae:8f:6b:74:a0:
         49:d6:d3:43:98:ea:b0:c3:7b:02:26:93:e0:c2:40:99:93:a8:
         4a:9a:23:db:ed:b6:d6:56:86:3c:64:89:ed:34:44:bd:8d:cd:
         14:3f:db:4d:1f:61:18:5c:79:41:1a:2d:e1:e5:9d:8b:bc:c6:
         99:50:57:9c:a8:7a:5c:45:29:86:bb:0c:09:63:d0:e7:9c:21:
         30:a3:e0:9c:31:e4:86:d2:2c:31:7f:ac:b8:af:66:f5:38:30:
         79:f6:12:a7:3c:a4:56:66:06:04:6b:18:63:91:57:34:95:76:
         c6:14:f2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 15:20:17 2024 by rpki-client on console-fra.rpki-client.org