Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3231342e302f32342d3234203d3e20323632353335.roa
File:                     3137372e38342e3231342e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          thoonQf7SYDWmUdUD1fmb41TuFVe6HsIXHW+STfb2eQ=
Subject key identifier:   80:7F:4E:91:DB:6F:8D:EA:F3:84:D2:04:F2:CE:F1:2B:C6:19:8A:0B
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       1C07AFBFD6BEC5D1F83957354E3F25FA76474BFE
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3231342e302f32342d3234203d3e20323632353335.roa
Signing time:             Wed 09 Apr 2025 12:53:28 +0000
ROA not before:           Wed 09 Apr 2025 12:48:28 +0000
ROA not after:            Wed 08 Apr 2026 12:53:28 +0000
asID:                     262535
IP address blocks:        177.84.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:07:af:bf:d6:be:c5:d1:f8:39:57:35:4e:3f:25:fa:76:47:4b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: Apr  9 12:48:28 2025 GMT
            Not After : Apr  8 12:53:28 2026 GMT
        Subject: CN=807F4E91DB6F8DEAF384D204F2CEF12BC6198A0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9d:48:fe:69:6c:41:b2:86:f6:9b:64:47:4e:
                    3a:c2:1b:a3:e9:97:7f:d8:63:82:e7:1c:b4:40:35:
                    ca:4b:8b:3c:d3:9a:71:b7:f2:55:22:dc:f1:8f:0c:
                    84:1c:e5:0e:20:c8:c1:53:35:00:84:b8:92:3c:eb:
                    68:81:98:ed:d7:eb:60:4d:c3:fd:32:6c:5e:53:78:
                    8d:a7:cc:ad:24:04:be:77:d1:cf:8f:b9:4f:8e:0a:
                    47:b4:1b:f7:26:e6:a1:75:9e:62:be:ac:8a:1f:0b:
                    90:f2:1f:2f:93:1b:ab:08:3e:8b:4c:be:05:bf:93:
                    c3:cb:11:03:4b:4a:9f:80:03:aa:f7:e2:7c:c3:e9:
                    a9:cb:7b:bb:d5:17:4c:39:71:f2:50:5b:98:eb:71:
                    9b:a9:d0:ff:87:ec:af:0b:a4:be:c7:70:bb:ea:01:
                    63:e7:f2:79:8d:a3:bd:89:ac:05:dc:94:23:aa:d7:
                    6d:a0:56:f3:2f:41:e0:bc:0c:8e:3e:99:cb:56:d3:
                    9f:ff:40:85:69:5d:0e:e8:76:e3:d6:88:43:fa:f6:
                    18:16:1e:f7:eb:87:d0:97:e0:e1:4c:94:56:fb:5b:
                    f2:51:62:47:14:56:3f:59:1b:30:11:78:e5:3e:f6:
                    ae:6d:1f:06:73:8e:60:be:aa:09:af:f4:8c:cc:42:
                    73:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7F:4E:91:DB:6F:8D:EA:F3:84:D2:04:F2:CE:F1:2B:C6:19:8A:0B
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3231342e302f32342d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:f4:8a:6d:92:7d:52:4c:67:33:c7:dc:64:dd:4a:be:8b:fa:
         c1:12:dd:2b:a5:58:8c:74:41:4d:2e:0f:f0:5d:81:c6:a3:57:
         4c:26:aa:a8:fe:a6:49:2c:47:33:44:f1:c9:22:4f:82:23:6e:
         f0:b9:22:b4:8d:4a:c5:89:4e:75:7b:89:be:a3:cd:dd:2a:13:
         76:22:20:1c:97:37:1a:18:ee:a9:ff:c8:a8:cb:08:e3:62:42:
         10:dd:fb:71:d1:c9:52:e3:04:4b:29:f8:8b:07:b1:34:e1:9f:
         a5:91:25:db:7b:7c:c5:06:e8:24:33:b3:2f:8b:a4:e0:65:34:
         39:a4:17:27:fc:d0:99:e1:b0:6a:77:fe:df:4d:1a:4c:a4:18:
         53:a4:0c:c3:26:15:15:71:23:92:0e:3a:a4:46:1d:11:5a:ce:
         6f:8f:89:a7:db:c4:72:77:16:2a:5c:0a:de:09:03:e8:2c:70:
         91:96:ed:be:a6:4e:1f:31:11:2f:f5:e1:80:47:69:99:4e:73:
         c7:84:f6:1c:9e:9d:5d:9a:c0:0a:55:8c:39:68:b7:21:37:92:
         73:01:c0:c7:cd:2a:88:ba:2e:6e:c3:6b:53:76:58:32:e8:53:
         70:42:5c:97:17:6c:08:73:19:78:35:8d:6d:f2:c7:b2:ad:84:
         12:28:a4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:44 2025 by rpki-client on console.sobornost.net