Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e34382e302f32332d3233203d3e20323632343933.roa
File:                     3137372e35352e34382e302f32332d3233203d3e20323632343933.roa (raw, json)
Hash identifier:          l4gua1cC/ou+Ut0a/elqX64zLBbuScP9SAkUzh/cqok=
Subject key identifier:   B7:F2:81:33:8A:ED:2E:B2:B0:23:D7:70:3C:D7:3E:70:98:C1:B1:67
Certificate issuer:       /CN=0B641968F54E16F4A6E72B1F243A760255821D7E
Certificate serial:       37E4DBBD3A3C4B3C62AE1BE416469E5B29044B84
Authority key identifier: 0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e34382e302f32332d3233203d3e20323632343933.roa
Signing time:             Mon 09 Sep 2024 15:04:54 +0000
ROA not before:           Mon 09 Sep 2024 14:59:54 +0000
ROA not after:            Mon 08 Sep 2025 15:04:54 +0000
asID:                     262493
IP address blocks:        177.55.48.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Oct 2024 13:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:e4:db:bd:3a:3c:4b:3c:62:ae:1b:e4:16:46:9e:5b:29:04:4b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Validity
            Not Before: Sep  9 14:59:54 2024 GMT
            Not After : Sep  8 15:04:54 2025 GMT
        Subject: CN=B7F281338AED2EB2B023D7703CD73E7098C1B167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:98:a6:9a:33:b3:7b:96:f5:c5:3d:95:88:52:
                    9c:35:d7:f6:cf:8c:f2:47:b3:a5:57:b8:42:b7:c0:
                    d8:53:d3:91:4b:e0:5a:d2:f5:fa:66:f3:bb:38:7f:
                    fa:95:09:5d:28:cf:f6:78:59:34:42:ab:7e:fb:26:
                    e0:5c:c2:13:3b:94:66:dd:8f:88:a4:2f:c3:f3:1f:
                    49:d8:0e:c4:6c:83:b4:52:c1:8f:bb:60:8a:a2:94:
                    5b:e6:9b:0e:81:01:2a:c8:36:da:33:5b:cf:b5:c1:
                    fd:e6:a4:ff:6f:b3:94:79:c1:74:1d:23:8c:2e:9e:
                    9b:b3:27:77:9a:7e:6f:4d:3e:4f:fd:72:bf:d6:32:
                    f1:69:bf:24:6b:1f:f9:ac:04:b2:7f:26:89:ea:09:
                    d9:c0:51:23:02:93:82:8b:32:48:62:af:a4:cf:54:
                    60:1f:f9:27:f6:27:2d:92:7d:dc:98:b3:11:73:89:
                    57:06:1f:70:67:e8:44:9b:f3:73:ad:6f:b1:a8:5f:
                    f5:14:5d:ab:ec:eb:4a:1e:e3:40:de:d1:fa:d4:b3:
                    03:85:56:98:c1:c1:8a:ff:ec:ad:2d:96:7e:2c:99:
                    10:e1:30:46:b2:83:8a:4d:1c:ed:3d:f6:90:c2:bf:
                    ce:9b:05:8c:81:1b:3d:95:c2:e0:65:85:2a:66:a0:
                    b5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F2:81:33:8A:ED:2E:B2:B0:23:D7:70:3C:D7:3E:70:98:C1:B1:67
            X509v3 Authority Key Identifier:
                keyid:0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e34382e302f32332d3233203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:f8:a5:55:fb:7d:86:80:30:70:65:aa:19:12:5a:1f:bc:88:
         bd:22:35:08:4c:6f:84:e9:e3:b0:e7:ea:84:30:0f:4b:6f:4b:
         b6:9f:19:4c:62:55:55:d6:66:5b:52:a3:86:69:b7:ff:79:d3:
         e0:00:5e:73:76:b1:8f:55:35:bc:09:a1:ff:a1:d5:f2:4a:69:
         95:65:fa:dc:f7:9c:ac:19:0f:68:28:b4:92:72:13:9c:99:56:
         f3:10:ff:81:07:b4:e4:49:17:4d:0e:00:cc:e4:a8:98:64:a0:
         b9:8f:28:54:bc:3e:d3:ed:1d:55:b6:cf:e3:d4:d2:bc:b0:34:
         49:d3:78:20:1f:6d:e3:67:30:57:4a:28:2e:83:92:d6:37:a6:
         b9:e1:be:b3:e9:e5:10:52:6b:8c:eb:bc:ce:e7:75:fd:f0:b1:
         fd:36:6b:d9:1d:70:a8:96:8d:3d:94:58:36:82:7f:9e:2b:bc:
         8b:7c:25:7e:a3:a2:7a:a3:59:49:7f:9e:fa:b8:49:42:ac:a1:
         6d:bb:94:37:fd:34:62:84:ff:c0:70:f3:63:66:87:1e:37:60:
         dc:52:a0:68:c9:46:f1:4f:8c:6a:84:05:31:9a:a2:02:c4:d4:
         d7:70:e6:2b:8f:eb:ef:ba:7d:f8:0e:b9:72:67:20:cc:40:e7:
         0c:89:aa:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 13:55:32 2024 by rpki-client on console-ams.rpki-client.org