Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35312e302f32342d3234203d3e20323632343933.roa
File:                     3137372e35352e35312e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          AEVF53JUYjmCmr6oO8HnbQkd1h3HIQVuxEbFOKV63cA=
Subject key identifier:   29:88:BA:81:FC:C4:44:B7:24:D9:8C:B4:1C:38:EE:67:3D:ED:1E:23
Certificate issuer:       /CN=0B641968F54E16F4A6E72B1F243A760255821D7E
Certificate serial:       3346E64FBC269E512A56DACCB9353F21C22A6857
Authority key identifier: 0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35312e302f32342d3234203d3e20323632343933.roa
Signing time:             Mon 09 Sep 2024 15:04:52 +0000
ROA not before:           Mon 09 Sep 2024 14:59:52 +0000
ROA not after:            Mon 08 Sep 2025 15:04:52 +0000
asID:                     262493
IP address blocks:        177.55.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Oct 2024 13:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:46:e6:4f:bc:26:9e:51:2a:56:da:cc:b9:35:3f:21:c2:2a:68:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Validity
            Not Before: Sep  9 14:59:52 2024 GMT
            Not After : Sep  8 15:04:52 2025 GMT
        Subject: CN=2988BA81FCC444B724D98CB41C38EE673DED1E23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a8:90:dc:4d:65:60:b5:e1:e2:be:4b:a8:8a:
                    cf:3e:51:25:a1:cf:f8:db:1a:69:de:2b:bc:8b:52:
                    61:17:ce:1f:16:82:a4:f6:b3:22:c8:05:95:09:e1:
                    d6:10:1e:d4:5c:de:02:99:7d:0f:8a:c5:b9:49:d6:
                    6c:eb:35:da:56:fc:f1:59:38:e3:66:ac:a8:1d:58:
                    13:de:26:bb:b3:87:13:7c:ef:ba:1c:05:72:6e:ed:
                    46:44:0e:ee:99:bb:24:e2:ed:f4:c5:45:5d:e6:77:
                    6b:53:a0:9e:44:f1:b6:40:b6:3a:c1:9e:7f:e8:51:
                    1c:35:f4:88:4b:5e:c4:95:5a:54:df:83:67:b4:3d:
                    7d:f9:2c:4c:79:06:d4:50:d8:f4:47:66:94:eb:81:
                    80:1a:02:e9:e7:2b:d0:7a:40:90:30:39:4e:b9:c0:
                    43:a5:dd:7f:8a:cc:95:02:19:cb:18:29:5f:43:c7:
                    11:0c:84:10:50:a6:ea:73:f2:d6:01:4a:cc:e7:d6:
                    21:7c:40:7c:49:33:aa:79:d0:d7:e8:3c:fd:b1:c8:
                    c0:b4:91:2c:45:87:4f:7d:be:0c:fd:62:53:1a:19:
                    62:47:5a:eb:f7:03:6e:4a:43:93:a1:b0:58:6e:41:
                    59:85:c3:bd:e8:1d:b0:13:8b:6f:1b:ca:5f:f9:08:
                    10:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:88:BA:81:FC:C4:44:B7:24:D9:8C:B4:1C:38:EE:67:3D:ED:1E:23
            X509v3 Authority Key Identifier:
                keyid:0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35312e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:fe:02:a3:82:29:b1:5b:07:61:27:a1:3a:c8:a8:ac:26:67:
         ae:e0:f5:8b:1f:af:16:66:35:7b:d0:81:bd:9d:85:4c:f7:6f:
         19:12:e0:d5:bd:cb:58:33:a2:6f:de:82:1e:0d:23:61:fe:a7:
         96:04:ef:b1:0b:b3:b2:c3:98:78:76:b6:3b:99:1f:05:32:b5:
         4b:35:60:d2:2e:11:5d:22:24:ba:dc:1a:17:6c:d2:fd:f3:40:
         16:00:4b:93:6d:65:fe:04:5d:65:a4:b4:51:d3:3a:ce:81:85:
         2c:2f:df:f6:4d:dc:88:4a:7f:49:d8:99:fb:2a:0c:cd:9d:0c:
         0b:ab:99:f1:ae:9f:6e:15:99:5d:dd:86:e6:6c:5e:fb:89:6d:
         02:e9:43:7c:d5:0f:02:5d:95:ac:69:14:0a:01:48:13:38:4f:
         01:db:07:e2:d7:84:a8:4b:3b:06:7f:65:f3:a9:3b:64:e3:62:
         ac:98:cc:67:29:70:71:7e:10:1e:2c:b0:70:6e:0b:d3:29:61:
         f8:b3:0d:95:2a:9a:6d:13:82:11:5e:08:4c:ab:d8:8c:ad:be:
         3b:a3:38:45:51:33:04:d1:41:fe:32:70:75:fc:59:25:9b:cd:
         9c:9f:4d:e7:61:f6:09:0d:50:42:e0:a3:29:c6:5d:74:1b:c2:
         36:f1:03:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 13:55:32 2024 by rpki-client on console-ams.rpki-client.org