Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35332e302f32342d3234203d3e20323632343933.roa
File:                     3137372e35352e35332e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          sr+P+FR0dQmd3euFpxew3rL4QX7glLxSc3ZuGtYJ5Qk=
Subject key identifier:   00:0E:8B:54:40:E2:64:C9:F8:0E:FE:57:70:BC:83:1B:37:A8:F2:47
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       FF324C82C7B06F628403207906B7920C58A580
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35332e302f32342d3234203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:38 +0000
ROA not before:           Thu 07 Nov 2024 20:49:38 +0000
ROA not after:            Thu 06 Nov 2025 20:54:38 +0000
asID:                     262493
IP address blocks:        177.55.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ff:32:4c:82:c7:b0:6f:62:84:03:20:79:06:b7:92:0c:58:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:38 2024 GMT
            Not After : Nov  6 20:54:38 2025 GMT
        Subject: CN=000E8B5440E264C9F80EFE5770BC831B37A8F247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:78:a0:a5:1c:5e:b1:24:f4:d2:58:17:93:27:
                    37:92:7f:69:8b:fa:9d:26:b4:0a:d5:92:9c:24:d2:
                    f7:19:46:a5:4f:d4:a7:fb:6b:b7:fc:29:02:74:89:
                    5d:22:6f:2a:57:e8:e9:db:79:b6:e7:bd:d2:fd:e2:
                    f5:07:c7:3f:73:91:ce:93:15:9d:0d:b1:2a:0b:e5:
                    ff:88:4a:fe:89:7d:db:a1:83:07:77:78:93:3c:5c:
                    ca:ea:d3:c2:10:28:be:86:6b:61:47:b0:a0:f5:77:
                    b0:21:58:37:7d:f6:8a:72:d2:fe:16:ce:71:4b:d6:
                    40:09:c9:47:1e:56:10:e9:9b:0d:7a:25:85:7f:46:
                    9f:b6:25:f2:36:46:3a:2a:8e:2c:3d:b9:5a:ec:79:
                    37:1c:10:42:1e:31:ab:06:8b:0f:94:43:15:6f:5a:
                    38:b2:d5:1f:3c:38:6f:0f:88:89:44:d3:35:55:de:
                    eb:52:92:55:ff:4f:64:d7:f7:2d:bb:08:dc:25:bf:
                    b9:26:80:c1:02:24:c2:ba:84:1e:b0:ce:db:37:9a:
                    28:c4:fd:00:e5:31:e3:b1:24:80:57:d1:9b:75:cf:
                    16:6f:a1:b1:0a:54:5f:f0:04:1c:64:53:2a:7a:45:
                    94:05:68:09:f8:5d:44:6c:6c:aa:2c:76:e2:b6:40:
                    52:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0E:8B:54:40:E2:64:C9:F8:0E:FE:57:70:BC:83:1B:37:A8:F2:47
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35332e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:bc:1d:0a:6a:af:9d:04:94:e7:cd:25:57:06:e5:37:e9:f2:
         3d:aa:df:db:f4:cc:e2:28:0a:a1:54:d5:0b:c0:e8:16:91:9b:
         a5:27:c7:48:1e:0f:38:d3:33:18:1d:f3:a7:15:d0:db:9a:24:
         6a:9b:44:fb:e2:1f:75:88:98:e7:41:d3:03:3f:e6:c6:29:a4:
         89:7c:dd:e5:7e:e3:4c:2c:bc:b4:c8:7b:f7:74:a3:d6:9b:08:
         69:fd:c0:25:c3:6c:c2:55:dc:e2:59:01:a3:69:b2:7d:46:2d:
         10:7a:89:a7:7c:f3:ea:2f:0d:86:a1:24:bc:ad:b1:cb:ec:f3:
         99:23:74:a6:7c:3e:c1:81:d8:e4:29:cc:62:c7:f5:26:38:d7:
         da:69:c4:1e:5e:76:97:ae:59:3c:1b:6a:12:be:e5:a1:c8:9a:
         21:a7:18:2d:64:bd:c3:4a:c9:1a:58:e6:ba:8c:b3:de:b0:29:
         ff:5c:fd:a1:a0:c6:a6:41:1c:fe:a9:b4:dd:9a:94:c7:f1:7f:
         90:16:58:47:58:0e:fd:c1:91:ba:e6:2b:08:91:b9:a1:aa:0c:
         36:80:c1:59:65:89:96:54:3c:31:cd:c7:87:85:4b:f1:01:1e:
         4d:d0:c2:f1:15:85:39:ef:76:06:49:42:54:89:41:19:a0:ef:
         50:10:f7:3e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAP8yTILHsG9ihAMgeQa3kgxYpYAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU0MzYzRTIxRjE5RkIzNTdDM0ZGNkI5NURCRThBOTE2
QTIzRUJDRjAeFw0yNDExMDcyMDQ5MzhaFw0yNTExMDYyMDU0MzhaMDMxMTAvBgNV
BAMTKDAwMEU4QjU0NDBFMjY0QzlGODBFRkU1NzcwQkM4MzFCMzdBOEYyNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9eKClHF6xJPTSWBeTJzeSf2mL
+p0mtArVkpwk0vcZRqVP1Kf7a7f8KQJ0iV0ibypX6OnbebbnvdL94vUHxz9zkc6T
FZ0NsSoL5f+ISv6Jfduhgwd3eJM8XMrq08IQKL6Ga2FHsKD1d7AhWDd99opy0v4W
znFL1kAJyUceVhDpmw16JYV/Rp+2JfI2Rjoqjiw9uVrseTccEEIeMasGiw+UQxVv
Wjiy1R88OG8PiIlE0zVV3utSklX/T2TX9y27CNwlv7kmgMECJMK6hB6wzts3mijE
/QDlMeOxJIBX0Zt1zxZvobEKVF/wBBxkUyp6RZQFaAn4XURsbKosduK2QFI5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUAA6LVEDiZMn4Dv5XcLyDGzeo8kcwHwYDVR0j
BBgwFoAULkNj4h8Z+zV8P/a5Xb6KkWoj688wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRU1QM3htYjVNU1ZnYW1ySml6c0IzYlBSOXdjTURpOVJuZHJ2cFloaHNR
ZDQvMC8yRTQzNjNFMjFGMTlGQjM1N0MzRkY2Qjk1REJFOEE5MTZBMjNFQkNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFNDM2M0UyMUYxOUZCMzU3
QzNGRjZCOTVEQkU4QTkxNkEyM0VCQ0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VNUDN4bWI1TVNWZ2FtckppenNCM2JQUjl3Y01EaTlSbmRydnBZaGhzUWQ0LzAv
MzEzNzM3MmUzNTM1MmUzNTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzQzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsTc1MA0GCSqGSIb3DQEBCwUAA4IBAQA9vB0Kaq+d
BJTnzSVXBuU36fI9qt/b9MziKAqhVNULwOgWkZulJ8dIHg840zMYHfOnFdDbmiRq
m0T74h91iJjnQdMDP+bGKaSJfN3lfuNMLLy0yHv3dKPWmwhp/cAlw2zCVdziWQGj
abJ9Ri0QeomnfPPqLw2GoSS8rbHL7POZI3SmfD7BgdjkKcxix/UmONfaacQeXnaX
rlk8G2oSvuWhyJohpxgtZL3DSskaWOa6jLPesCn/XP2hoMamQRz+qbTdmpTH8X+Q
FlhHWA79wZG65isIkbmhqgw2gMFZZYmWVDwxzceHhUvxAR5N0MLxFYU573YGSUJU
iUEZoO9QEPc+
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:31 2024 by rpki-client on console-fra.rpki-client.org