Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e34382e302f32332d3233203d3e20323632343933.roa
File:                     3137372e35352e34382e302f32332d3233203d3e20323632343933.roa (raw, json)
Hash identifier:          Z4vbisNAbojrnoZRu1CGTOB75mKQI2Kd8hbD2yL5jhE=
Subject key identifier:   72:57:D1:7C:03:59:3D:01:80:71:53:4C:5E:D9:AA:7B:63:B3:5D:4C
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       3686859C49711671278A1400295C0A1CD48189A5
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e34382e302f32332d3233203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:41 +0000
ROA not before:           Thu 07 Nov 2024 20:49:41 +0000
ROA not after:            Thu 06 Nov 2025 20:54:41 +0000
asID:                     262493
IP address blocks:        177.55.48.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:86:85:9c:49:71:16:71:27:8a:14:00:29:5c:0a:1c:d4:81:89:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:41 2024 GMT
            Not After : Nov  6 20:54:41 2025 GMT
        Subject: CN=7257D17C03593D018071534C5ED9AA7B63B35D4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c3:da:77:e5:f1:57:ce:40:1d:56:00:3b:29:
                    e5:64:03:95:1e:f0:82:0a:eb:2c:97:f7:0e:fd:53:
                    3e:89:d3:4a:b2:bd:7c:b2:98:48:5b:04:18:02:87:
                    f4:99:b8:94:88:07:42:85:62:81:4a:43:9f:4c:12:
                    93:2d:33:89:40:5c:61:61:d9:87:52:32:f4:0e:c6:
                    16:78:70:83:1c:bc:37:cb:b7:ed:2e:bd:37:ae:6c:
                    2f:46:66:f4:fa:c9:5a:34:69:5d:fe:ba:be:48:69:
                    b0:3c:16:04:58:c6:c2:fd:3e:8f:6e:e0:e9:9f:14:
                    78:c9:93:16:6c:76:86:b9:8d:d2:fd:2a:50:2d:9e:
                    3c:40:26:4e:58:81:6b:6a:ea:a1:b3:6f:ae:af:91:
                    6c:3d:b6:af:52:71:b4:bf:08:2c:b6:1e:44:01:d0:
                    e7:94:30:00:76:f1:50:c5:c7:3c:03:e7:8e:96:d4:
                    77:5b:db:39:a7:2c:02:7f:dd:40:a8:4e:16:37:54:
                    24:b7:92:08:23:7e:5f:e5:d6:83:ab:bf:51:86:0c:
                    ac:2e:07:a1:f2:96:37:5c:de:11:f4:d6:2c:7c:a3:
                    6a:f0:55:c2:0b:8f:57:76:96:e4:fe:b9:43:9b:eb:
                    f5:85:fa:ff:e9:71:1b:f1:3c:d9:56:43:28:9d:6f:
                    47:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:57:D1:7C:03:59:3D:01:80:71:53:4C:5E:D9:AA:7B:63:B3:5D:4C
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e34382e302f32332d3233203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:27:68:53:e2:17:3d:bc:3d:ba:4c:1d:01:52:f4:2d:17:88:
         e0:7f:e8:7b:8f:7b:92:7f:2e:12:78:1b:85:b9:15:30:f4:32:
         03:25:c9:da:de:9b:2b:58:93:dd:61:53:f4:9c:a4:2d:78:5b:
         5f:dc:7b:07:8e:f8:6d:83:54:05:58:3c:fd:c1:ca:a2:7a:dc:
         f8:b2:22:18:6a:56:0a:ad:a5:3c:53:b1:88:74:d1:8e:0e:31:
         27:d0:44:df:88:f8:62:5d:16:10:af:44:0d:f8:8a:93:7f:db:
         fa:7a:90:bb:93:3a:be:c4:fa:bf:f7:f4:74:f8:c8:e3:03:18:
         8a:02:53:40:93:99:b9:61:b2:61:ba:19:8b:0c:f3:6b:12:63:
         06:c7:ec:d4:84:8a:76:c2:d5:f7:d3:70:46:d9:fe:62:a3:54:
         43:f7:58:24:8e:00:88:4f:5f:8f:8e:5e:f5:f9:aa:d9:a3:4d:
         27:23:05:d1:d8:76:2c:0e:5c:80:46:3f:24:d4:89:db:8c:10:
         52:cb:8c:1c:8e:ac:99:87:4a:fe:99:99:4c:a2:59:22:16:30:
         de:d6:cf:a0:30:c1:96:e8:78:55:2d:3f:11:7c:2b:cf:02:d5:
         3c:ce:3f:42:af:35:cb:84:09:f8:e2:7c:05:60:77:a3:76:cd:
         9c:5f:86:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org