Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35352e302f32342d3234203d3e20323632343933.roa
File:                     3137372e35352e35352e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          kkY7S3wMre6aDYEVcQynlIHjSEcfWSTc5Smu9JXIFKw=
Subject key identifier:   EC:02:ED:6E:1D:F8:6E:88:DB:87:A0:A1:DD:E0:48:0A:07:5D:02:E9
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       3DF5A539FBB2C7840DC69679363E8991FFC1A225
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35352e302f32342d3234203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:39 +0000
ROA not before:           Thu 07 Nov 2024 20:49:39 +0000
ROA not after:            Thu 06 Nov 2025 20:54:39 +0000
asID:                     262493
IP address blocks:        177.55.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f5:a5:39:fb:b2:c7:84:0d:c6:96:79:36:3e:89:91:ff:c1:a2:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:39 2024 GMT
            Not After : Nov  6 20:54:39 2025 GMT
        Subject: CN=EC02ED6E1DF86E88DB87A0A1DDE0480A075D02E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:84:ac:49:de:0c:f4:77:0a:4e:8e:b6:1e:d7:
                    eb:dc:a6:0e:03:e1:6f:4b:1d:c1:b4:cb:ad:89:b5:
                    8b:62:dd:b4:52:be:83:03:98:85:3a:c3:3d:13:4c:
                    9b:a1:cd:12:0a:69:ef:84:1f:8c:85:86:ed:14:8d:
                    a9:3d:b2:8e:02:c2:ac:76:77:7e:a7:54:cc:e7:bc:
                    12:e0:98:64:bb:3e:48:91:1b:2c:45:6d:39:d3:bf:
                    1d:f3:b5:f6:39:34:dc:90:9b:0a:90:21:fd:60:40:
                    db:82:59:2a:26:ad:4e:f2:a0:8f:32:32:84:17:e2:
                    77:f7:56:40:c6:b9:0b:e0:e0:b0:8e:1c:f9:16:f3:
                    03:4a:35:c4:ed:40:7c:b0:14:93:9a:71:ed:fc:6f:
                    3e:b3:6b:bc:4d:8b:e0:3a:d3:27:93:42:84:0a:0e:
                    e4:99:93:cb:ee:5d:d0:81:90:45:1c:f0:a9:94:0d:
                    0e:03:b5:eb:6a:fd:f8:9b:78:fc:47:ff:26:f2:97:
                    9d:c6:02:7c:f1:a5:3b:d5:0a:3f:8f:89:b9:9b:8d:
                    f2:25:bc:59:a3:11:12:2c:6f:6b:95:21:a8:86:2d:
                    6e:c4:56:1a:1d:c2:5e:ae:49:fa:8c:cf:a5:99:2d:
                    de:00:ad:05:3a:ff:7e:6d:d7:2d:95:48:c4:66:2b:
                    9d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:02:ED:6E:1D:F8:6E:88:DB:87:A0:A1:DD:E0:48:0A:07:5D:02:E9
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35352e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:f4:d9:cd:10:d4:05:33:6d:17:0f:54:42:d5:e5:9f:ad:c6:
         70:43:93:8c:ae:a1:ac:97:a8:27:09:ac:05:71:60:cf:5b:cf:
         6a:f0:32:f4:5c:30:ad:53:cd:dc:4a:13:01:e1:4e:94:ea:96:
         39:1a:84:db:74:8f:f1:05:a7:58:da:b1:b1:b3:27:21:d6:47:
         cd:10:80:d7:5e:06:6a:0c:e0:6a:03:a8:5f:84:d9:e3:7a:aa:
         5c:c2:eb:3a:41:ec:42:ff:92:0d:0b:22:a2:70:11:d9:de:3b:
         8a:16:a2:26:60:3c:68:42:03:c9:7c:04:40:4e:5d:9b:15:21:
         5f:66:3b:ea:b1:73:0e:d5:5a:50:ff:29:25:62:6a:76:e0:39:
         ce:a3:f7:a9:fc:ac:f9:83:3d:a0:23:9e:57:dc:c8:8a:00:47:
         ba:27:fb:8a:bf:c6:65:f1:fc:a0:f7:cf:42:4b:b3:a7:62:90:
         24:20:03:e0:7f:f3:2e:25:1e:f1:e8:a7:24:50:2c:a1:eb:d4:
         b0:4d:61:ff:b4:c6:dd:16:d2:6a:df:80:69:cc:55:77:f8:09:
         d7:14:3c:8a:77:88:66:b0:09:f8:99:59:84:85:20:fb:bf:78:
         4a:8b:71:d4:52:67:8f:de:b6:24:fc:e5:70:a4:d0:bf:f5:7b:
         92:77:d1:eb
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPfWlOfuyx4QNxpZ5Nj6Jkf/BoiUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU0MzYzRTIxRjE5RkIzNTdDM0ZGNkI5NURCRThBOTE2
QTIzRUJDRjAeFw0yNDExMDcyMDQ5MzlaFw0yNTExMDYyMDU0MzlaMDMxMTAvBgNV
BAMTKEVDMDJFRDZFMURGODZFODhEQjg3QTBBMURERTA0ODBBMDc1RDAyRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7hKxJ3gz0dwpOjrYe1+vcpg4D
4W9LHcG0y62JtYti3bRSvoMDmIU6wz0TTJuhzRIKae+EH4yFhu0Ujak9so4Cwqx2
d36nVMznvBLgmGS7PkiRGyxFbTnTvx3ztfY5NNyQmwqQIf1gQNuCWSomrU7yoI8y
MoQX4nf3VkDGuQvg4LCOHPkW8wNKNcTtQHywFJOace38bz6za7xNi+A60yeTQoQK
DuSZk8vuXdCBkEUc8KmUDQ4Dtetq/fibePxH/ybyl53GAnzxpTvVCj+PibmbjfIl
vFmjERIsb2uVIaiGLW7EVhodwl6uSfqMz6WZLd4ArQU6/35t1y2VSMRmK52jAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU7ALtbh34bojbh6Ch3eBICgddAukwHwYDVR0j
BBgwFoAULkNj4h8Z+zV8P/a5Xb6KkWoj688wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRU1QM3htYjVNU1ZnYW1ySml6c0IzYlBSOXdjTURpOVJuZHJ2cFloaHNR
ZDQvMC8yRTQzNjNFMjFGMTlGQjM1N0MzRkY2Qjk1REJFOEE5MTZBMjNFQkNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFNDM2M0UyMUYxOUZCMzU3
QzNGRjZCOTVEQkU4QTkxNkEyM0VCQ0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VNUDN4bWI1TVNWZ2FtckppenNCM2JQUjl3Y01EaTlSbmRydnBZaGhzUWQ0LzAv
MzEzNzM3MmUzNTM1MmUzNTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzQzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsTc3MA0GCSqGSIb3DQEBCwUAA4IBAQAt9NnNENQF
M20XD1RC1eWfrcZwQ5OMrqGsl6gnCawFcWDPW89q8DL0XDCtU83cShMB4U6U6pY5
GoTbdI/xBadY2rGxsych1kfNEIDXXgZqDOBqA6hfhNnjeqpcwus6QexC/5INCyKi
cBHZ3juKFqImYDxoQgPJfARATl2bFSFfZjvqsXMO1VpQ/yklYmp24DnOo/ep/Kz5
gz2gI55X3MiKAEe6J/uKv8Zl8fyg989CS7OnYpAkIAPgf/MuJR7x6KckUCyh69Sw
TWH/tMbdFtJq34BpzFV3+AnXFDyKd4hmsAn4mVmEhSD7v3hKi3HUUmeP3rYk/OVw
pNC/9XuSd9Hr
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org