Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234352e302f32342d3234203d3e20323632353335.roa
File:                     3137372e36372e3234352e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          QL3IYm0hAyNe4s/o3XlpvmEEmfkHDn1pDorMOKY/XeU=
Subject key identifier:   89:91:19:13:0E:13:69:AD:89:C9:68:4F:8D:C9:8B:F5:51:C2:23:09
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       100D9A4C69AE100B3C634E3FBF17AFEED4740718
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234352e302f32342d3234203d3e20323632353335.roa
Signing time:             Wed 09 Apr 2025 12:53:25 +0000
ROA not before:           Wed 09 Apr 2025 12:48:25 +0000
ROA not after:            Wed 08 Apr 2026 12:53:25 +0000
asID:                     262535
IP address blocks:        177.67.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:0d:9a:4c:69:ae:10:0b:3c:63:4e:3f:bf:17:af:ee:d4:74:07:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: Apr  9 12:48:25 2025 GMT
            Not After : Apr  8 12:53:25 2026 GMT
        Subject: CN=899119130E1369AD89C9684F8DC98BF551C22309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9d:f9:c9:af:b4:39:ab:fb:a6:f9:a7:8c:49:
                    dd:60:6a:56:0a:e5:75:cd:ce:37:d3:ae:01:23:74:
                    7e:aa:15:3e:e3:8a:07:a6:f3:69:9a:65:96:2c:94:
                    a2:92:d4:0f:f1:50:25:c5:a7:ba:80:48:5d:fd:24:
                    b2:48:99:97:33:1b:f6:6b:24:d4:54:8d:e8:16:6d:
                    6a:55:80:69:97:50:a1:1c:6d:0c:74:a3:77:e5:40:
                    d8:66:fb:20:f8:e8:88:b2:37:87:72:18:21:96:ff:
                    d3:c2:fb:af:ab:f6:31:2b:7c:df:75:9f:f9:90:39:
                    1c:14:92:7f:9f:2e:dd:04:7f:fd:78:8c:5e:2c:a8:
                    46:5a:9c:8c:23:5b:da:62:64:48:63:94:b4:ce:35:
                    a4:a4:12:a7:dd:85:37:cd:2f:e7:17:cc:f1:81:46:
                    db:d1:47:e4:86:81:ed:c3:73:52:4b:e9:7e:74:e4:
                    a9:6d:a2:5e:ad:3f:c8:ec:4f:3a:44:30:48:90:98:
                    ae:52:6f:78:25:0c:e1:fd:b2:40:bc:b8:cf:57:d3:
                    d2:3c:07:ed:04:10:eb:aa:a8:dd:0c:11:46:7f:66:
                    47:66:da:a7:73:21:b3:27:e9:41:b6:86:e9:f7:87:
                    c7:0f:4b:34:63:25:fc:c6:be:20:3e:58:f4:b7:78:
                    62:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:91:19:13:0E:13:69:AD:89:C9:68:4F:8D:C9:8B:F5:51:C2:23:09
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234352e302f32342d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:8f:cc:df:a8:39:2a:c3:0d:f4:eb:10:1f:b3:c1:f7:ed:58:
         64:3d:58:2b:77:d0:6c:9a:db:35:fd:f7:ba:01:29:00:43:da:
         f1:f7:c8:7c:de:e2:d8:fd:90:ff:bb:03:ea:90:fa:c3:a7:ba:
         57:76:fd:65:30:ef:43:7b:85:2b:27:c9:e7:71:fa:3a:5a:c4:
         b1:bc:20:b5:1f:a9:a4:3c:bf:52:01:f4:17:37:88:5d:db:70:
         eb:18:e7:79:40:aa:40:67:e6:b1:32:63:45:08:09:38:aa:84:
         b3:7c:2d:5e:b5:ce:a7:3a:bc:77:f0:d3:ce:31:5d:51:51:2d:
         9a:3e:35:76:3e:da:b9:ae:4d:a8:b6:13:e1:5b:ef:3b:13:51:
         20:97:50:5a:44:5f:9d:69:82:af:6b:cf:f6:4f:5f:b4:79:64:
         65:c9:51:bf:f5:72:95:3a:8a:3d:41:00:68:88:1f:c3:b8:8c:
         09:6a:74:4f:f8:3f:38:2e:10:aa:2a:72:92:cd:5d:2c:8e:ae:
         b6:e4:df:ec:39:dc:05:6b:68:fe:8c:3f:91:5d:b5:21:49:5c:
         58:3d:20:f1:51:c3:ae:57:d6:f9:0d:56:39:f6:89:43:1f:db:
         27:c5:86:ec:9b:65:2a:97:ff:14:c5:18:11:73:95:41:3c:51:
         35:9f:3f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:36 2025 by rpki-client on console.sobornost.net