Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35302e302f32342d3234203d3e20323632343933.roa
File:                     3137372e35352e35302e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          /PPB/dK9F/Bmt2QYNxLV4vahBT0qg0AuGNPgR+s4WhQ=
Subject key identifier:   50:37:F0:A6:6F:CA:63:C0:FF:A8:E3:B4:13:94:E8:E1:EB:F9:63:7F
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       266D1F6F578AF91DA732C26AF9814105D09841BB
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35302e302f32342d3234203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:37 +0000
ROA not before:           Thu 07 Nov 2024 20:49:37 +0000
ROA not after:            Thu 06 Nov 2025 20:54:37 +0000
asID:                     262493
IP address blocks:        177.55.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6d:1f:6f:57:8a:f9:1d:a7:32:c2:6a:f9:81:41:05:d0:98:41:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:37 2024 GMT
            Not After : Nov  6 20:54:37 2025 GMT
        Subject: CN=5037F0A66FCA63C0FFA8E3B41394E8E1EBF9637F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cc:47:d9:05:b6:10:1c:4a:0c:2b:4a:17:0a:
                    b5:2f:7f:1a:90:7d:8e:23:ca:1d:16:18:90:5f:77:
                    e7:0b:65:77:53:11:bb:40:31:8c:a1:2a:df:9f:75:
                    38:63:5a:46:49:ad:2d:94:79:4a:d2:64:14:46:3d:
                    61:89:d8:b8:2e:c8:e8:16:e7:6e:c5:96:87:4b:99:
                    4e:d7:00:fa:b1:83:f6:ca:98:84:cf:fd:4b:45:58:
                    de:4a:8b:d2:0d:2e:a8:37:da:b4:59:57:4a:82:ae:
                    0a:ea:16:f0:fc:8e:f3:0d:62:f5:11:ff:5f:4e:16:
                    93:54:00:d6:44:7d:fc:26:4a:dd:7f:f5:9f:92:c4:
                    03:a3:a1:64:7f:f8:85:b4:ec:ee:67:60:69:f5:2a:
                    b8:4c:03:60:e3:29:82:ea:ca:57:e5:7a:e7:25:6b:
                    40:a4:33:bb:af:92:09:e4:13:c9:d8:c8:18:55:5f:
                    c0:6a:5f:01:e7:6d:ca:01:ed:be:1c:bc:5c:e9:57:
                    f0:f7:3b:bb:e1:d4:44:e7:ee:d7:36:c7:9d:65:c2:
                    b0:c5:37:e0:7b:40:b4:90:9a:db:3a:b8:d1:28:94:
                    6f:f3:e6:83:50:3e:9d:8c:54:70:15:9b:65:a7:22:
                    fe:b4:a6:84:a6:64:ff:bd:97:8d:38:69:7f:68:60:
                    7f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:37:F0:A6:6F:CA:63:C0:FF:A8:E3:B4:13:94:E8:E1:EB:F9:63:7F
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35302e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e1:70:ee:3e:8d:0b:76:63:49:73:d6:cd:58:e4:6e:04:fb:11:
         98:32:50:10:73:42:30:b6:86:b9:55:48:7c:01:9a:58:4e:64:
         31:52:2b:dc:df:52:e3:a1:1e:bc:fc:49:d5:29:36:1a:4c:15:
         db:bf:a2:59:62:95:56:15:5d:9e:60:93:21:c2:51:4a:9b:92:
         13:16:c6:8f:f4:cd:3b:79:9c:b8:d0:72:8f:09:53:01:b9:be:
         ba:9c:34:d2:57:ce:ad:66:3d:4a:16:b1:c1:33:57:ee:b8:4f:
         b4:0a:95:9d:78:d4:f1:6b:31:b5:ed:c2:a4:26:d3:7b:ae:a4:
         49:20:83:93:2c:ae:f4:c2:fb:48:14:21:47:1b:24:75:fb:6f:
         77:7d:d8:c9:53:d4:45:27:43:cf:ba:62:cb:cf:1f:f4:be:dc:
         b7:0e:40:df:5a:be:d3:9a:7f:eb:4a:88:ed:11:93:d3:89:3d:
         7e:95:d0:5b:19:5d:ed:8a:54:aa:d9:c4:b7:71:58:1c:8f:8f:
         8a:4a:c5:11:64:44:8e:42:78:1c:a5:ba:f7:fe:53:57:dd:59:
         e9:4a:ef:23:54:7a:a6:c2:cd:db:2d:52:82:b4:0c:16:66:cd:
         0a:80:30:07:94:1f:42:04:97:e4:4b:a8:00:b2:c4:f5:6a:c1:
         98:ad:ae:f8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJm0fb1eK+R2nMsJq+YFBBdCYQbswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU0MzYzRTIxRjE5RkIzNTdDM0ZGNkI5NURCRThBOTE2
QTIzRUJDRjAeFw0yNDExMDcyMDQ5MzdaFw0yNTExMDYyMDU0MzdaMDMxMTAvBgNV
BAMTKDUwMzdGMEE2NkZDQTYzQzBGRkE4RTNCNDEzOTRFOEUxRUJGOTYzN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBzEfZBbYQHEoMK0oXCrUvfxqQ
fY4jyh0WGJBfd+cLZXdTEbtAMYyhKt+fdThjWkZJrS2UeUrSZBRGPWGJ2LguyOgW
527FlodLmU7XAPqxg/bKmITP/UtFWN5Ki9INLqg32rRZV0qCrgrqFvD8jvMNYvUR
/19OFpNUANZEffwmSt1/9Z+SxAOjoWR/+IW07O5nYGn1KrhMA2DjKYLqylfleucl
a0CkM7uvkgnkE8nYyBhVX8BqXwHnbcoB7b4cvFzpV/D3O7vh1ETn7tc2x51lwrDF
N+B7QLSQmts6uNEolG/z5oNQPp2MVHAVm2WnIv60poSmZP+9l404aX9oYH+1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUUDfwpm/KY8D/qOO0E5To4ev5Y38wHwYDVR0j
BBgwFoAULkNj4h8Z+zV8P/a5Xb6KkWoj688wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRU1QM3htYjVNU1ZnYW1ySml6c0IzYlBSOXdjTURpOVJuZHJ2cFloaHNR
ZDQvMC8yRTQzNjNFMjFGMTlGQjM1N0MzRkY2Qjk1REJFOEE5MTZBMjNFQkNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFNDM2M0UyMUYxOUZCMzU3
QzNGRjZCOTVEQkU4QTkxNkEyM0VCQ0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VNUDN4bWI1TVNWZ2FtckppenNCM2JQUjl3Y01EaTlSbmRydnBZaGhzUWQ0LzAv
MzEzNzM3MmUzNTM1MmUzNTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzQzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsTcyMA0GCSqGSIb3DQEBCwUAA4IBAQDhcO4+jQt2
Y0lz1s1Y5G4E+xGYMlAQc0Iwtoa5VUh8AZpYTmQxUivc31LjoR68/EnVKTYaTBXb
v6JZYpVWFV2eYJMhwlFKm5ITFsaP9M07eZy40HKPCVMBub66nDTSV86tZj1KFrHB
M1fuuE+0CpWdeNTxazG17cKkJtN7rqRJIIOTLK70wvtIFCFHGyR1+293fdjJU9RF
J0PPumLLzx/0vty3DkDfWr7Tmn/rSojtEZPTiT1+ldBbGV3tilSq2cS3cVgcj4+K
SsURZESOQngcpbr3/lNX3VnpSu8jVHqmws3bLVKCtAwWZs0KgDAHlB9CBJfkS6gA
ssT1asGYra74
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org