Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35332e302f32342d3234203d3e20323632343933.roa
File:                     3137372e35352e35332e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          fJwycT0ExRga3HiJl8ub0LvX5UJlutwT8CjbsqhdvHo=
Subject key identifier:   B6:2D:8C:2B:A3:A8:28:8A:25:AE:7C:9A:21:3D:F1:B2:8B:8A:0E:3D
Certificate issuer:       /CN=0B641968F54E16F4A6E72B1F243A760255821D7E
Certificate serial:       2F4601CE6DAB7EE65929BEB2B6464B5B911126
Authority key identifier: 0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35332e302f32342d3234203d3e20323632343933.roa
Signing time:             Mon 09 Sep 2024 15:04:50 +0000
ROA not before:           Mon 09 Sep 2024 14:59:50 +0000
ROA not after:            Mon 08 Sep 2025 15:04:50 +0000
asID:                     262493
IP address blocks:        177.55.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Oct 2024 13:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:46:01:ce:6d:ab:7e:e6:59:29:be:b2:b6:46:4b:5b:91:11:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Validity
            Not Before: Sep  9 14:59:50 2024 GMT
            Not After : Sep  8 15:04:50 2025 GMT
        Subject: CN=B62D8C2BA3A8288A25AE7C9A213DF1B28B8A0E3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:02:60:d4:62:b7:1d:6c:11:f6:e7:e2:73:2c:
                    d7:f2:36:03:a3:13:a7:ff:fe:b6:d2:da:87:a7:6c:
                    4e:5c:78:c2:4d:a9:7c:a8:a3:93:48:78:a4:aa:51:
                    0b:7f:3b:82:3e:9a:dc:38:eb:5d:db:b2:89:6c:80:
                    26:0a:40:28:c3:6a:0c:70:90:0d:16:49:fe:33:0b:
                    04:35:ac:09:ca:ba:c1:fb:d9:9c:08:d5:be:d9:0c:
                    56:7b:59:72:13:de:c1:52:f2:6d:1e:74:4e:e1:7a:
                    64:d4:f0:9e:60:23:22:4a:b3:a6:c8:5c:c2:09:09:
                    97:0a:9e:1f:50:97:92:d3:9d:74:fb:f8:2a:cc:3b:
                    6c:f9:fc:84:b0:78:bb:90:e5:7a:a1:5f:64:09:bf:
                    35:8d:bd:a1:5e:49:f6:26:2c:90:86:b0:76:cf:10:
                    14:7e:02:df:83:a9:92:51:a6:ec:7b:5d:b7:2d:6f:
                    b6:79:11:a4:8c:5e:03:2b:60:ee:7a:de:34:49:88:
                    83:24:08:e2:bd:9b:e2:3b:ff:50:f9:39:36:c5:24:
                    07:c4:f0:21:09:1d:37:62:8a:7a:7a:98:8a:2d:be:
                    77:fc:1b:d8:06:62:e8:11:3a:01:c7:1d:e0:4c:46:
                    52:e4:cf:a4:5d:0d:4e:4a:bc:d5:39:9a:6a:61:f2:
                    9c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2D:8C:2B:A3:A8:28:8A:25:AE:7C:9A:21:3D:F1:B2:8B:8A:0E:3D
            X509v3 Authority Key Identifier:
                keyid:0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35332e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:83:b5:b9:3b:6c:31:95:bd:6e:fc:79:4f:4d:6a:14:60:1f:
         3b:e4:dd:b7:1d:ba:8d:3c:8a:c5:d4:35:f8:a0:0e:c8:ea:4a:
         1b:09:86:05:1f:b1:48:97:97:2a:a6:96:31:83:1e:78:49:13:
         81:94:04:96:6c:d9:4f:76:da:81:c6:89:55:ef:1e:c1:66:1b:
         e6:0e:c1:51:97:61:5e:61:98:51:0c:30:d0:f4:18:6a:69:d8:
         cc:11:d8:ac:56:65:87:5a:39:34:b9:fd:7a:f6:3b:2b:b2:6f:
         bc:69:eb:52:30:2d:e5:5d:a2:16:41:b9:9b:16:e7:cc:6a:06:
         dd:e8:ee:54:3c:d1:38:7e:50:c1:23:a5:88:18:64:3e:1c:dc:
         fe:f2:df:9c:94:13:02:e7:b6:e9:16:e1:01:52:57:2b:bc:06:
         a0:96:37:3e:41:19:63:c0:3c:49:64:38:79:1e:e8:67:b8:c1:
         73:ec:58:8a:ab:fd:7f:e2:b1:9e:c9:5f:3e:cd:ae:05:54:1e:
         f7:7c:e3:12:98:5b:a9:8c:17:05:d0:b4:da:97:bf:aa:fa:73:
         f0:4f:fe:84:76:2b:e4:fe:3b:a9:ac:1f:70:ae:29:c9:60:fc:
         61:85:e4:57:ae:cf:a7:07:de:de:55:d2:ca:68:16:93:3b:58:
         c0:20:13:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 13:55:32 2024 by rpki-client on console-ams.rpki-client.org