Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35362e302f32332d3233203d3e20323632343933.roa
File:                     3137372e35352e35362e302f32332d3233203d3e20323632343933.roa (raw, json)
Hash identifier:          pEFA7mYiG1oqbc4geIPjHrtXYPMe+GAreemkkmGmVFk=
Subject key identifier:   A0:58:C4:49:BE:CD:0C:56:E9:CF:2E:60:ED:82:FD:D6:A3:A0:EC:D0
Certificate issuer:       /CN=0B641968F54E16F4A6E72B1F243A760255821D7E
Certificate serial:       5D6DAF992CC9E6405B563F7C40A7C8BA675713C6
Authority key identifier: 0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35362e302f32332d3233203d3e20323632343933.roa
Signing time:             Mon 09 Sep 2024 15:04:52 +0000
ROA not before:           Mon 09 Sep 2024 14:59:52 +0000
ROA not after:            Mon 08 Sep 2025 15:04:52 +0000
asID:                     262493
IP address blocks:        177.55.56.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 18:13:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:6d:af:99:2c:c9:e6:40:5b:56:3f:7c:40:a7:c8:ba:67:57:13:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Validity
            Not Before: Sep  9 14:59:52 2024 GMT
            Not After : Sep  8 15:04:52 2025 GMT
        Subject: CN=A058C449BECD0C56E9CF2E60ED82FDD6A3A0ECD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7a:1e:d1:11:ad:53:62:d2:99:b8:b2:36:f0:
                    f2:dc:51:6d:f5:26:fe:49:62:f3:13:43:62:00:57:
                    93:40:e2:06:bc:c4:4b:e1:18:d4:8b:4e:c8:34:d4:
                    70:be:98:15:a5:cf:41:42:1c:b3:36:35:2c:b0:10:
                    bd:16:d0:44:d5:ca:28:71:ab:bf:f4:c0:9c:31:ec:
                    f8:07:69:9d:1f:c6:50:c0:18:db:65:b5:26:06:e7:
                    41:f8:fa:b9:53:88:a9:62:de:ab:fb:bd:55:b4:93:
                    ad:47:f9:30:86:8f:a3:07:5c:e4:92:ee:e9:43:b2:
                    c6:06:80:24:39:d8:aa:1e:19:1c:cd:88:66:e6:2f:
                    37:aa:c7:31:07:eb:db:a1:bb:24:29:84:e7:44:bd:
                    e3:17:d3:b1:70:52:db:1b:63:d3:a0:5c:ab:42:ff:
                    4e:12:0d:ba:9d:4f:14:3e:8d:a9:1f:b1:6b:82:78:
                    1b:aa:51:ae:51:88:e4:db:33:15:c2:ae:aa:7a:66:
                    41:83:9a:ae:74:72:66:5b:bf:4d:46:c8:69:38:ed:
                    93:82:b8:fb:02:5f:0f:c9:4a:1e:b5:86:c8:69:de:
                    bb:4c:2d:74:7e:e4:33:11:33:f5:15:a8:f7:cb:7e:
                    79:7a:d7:8e:d2:da:07:ad:d8:c3:c8:3f:cf:c9:cb:
                    a5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:58:C4:49:BE:CD:0C:56:E9:CF:2E:60:ED:82:FD:D6:A3:A0:EC:D0
            X509v3 Authority Key Identifier:
                keyid:0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35362e302f32332d3233203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:16:30:8b:3a:dc:f6:de:dc:e1:3a:47:a9:b4:81:49:89:c5:
         f8:55:80:a5:c4:13:b7:62:f7:80:36:56:cf:04:4c:54:66:6d:
         95:11:39:13:59:a6:09:b7:34:91:fb:46:39:34:12:0d:90:ed:
         0c:7f:97:53:30:23:18:70:16:37:25:9f:c1:de:33:23:d6:02:
         6c:fe:2e:84:f5:c1:72:49:56:45:94:ff:f9:2a:29:5f:17:3b:
         9d:29:59:4b:f6:f4:3d:78:36:fe:3a:71:26:aa:4e:a0:7c:95:
         5b:33:df:97:9a:55:00:9c:fc:4c:35:81:c4:ec:bd:e7:a3:c9:
         96:7a:11:62:05:35:9c:93:69:07:f8:d7:5d:16:2f:21:ed:57:
         e0:41:6a:67:8a:37:f2:6c:36:cd:18:41:c3:57:7f:06:24:17:
         e5:ff:c6:e5:e7:63:2d:19:95:0c:53:a1:06:c9:fd:f8:2e:46:
         33:a0:2f:62:10:ef:cd:f6:b7:4a:60:bd:3d:da:1d:76:9c:16:
         33:90:73:11:4a:ac:2e:3f:31:a4:cd:42:bc:ea:9e:66:a8:76:
         1a:a6:68:bf:38:a1:5b:bb:f7:e5:ed:22:df:60:2e:10:68:67:
         13:2c:7e:71:48:be:12:82:38:15:32:3b:be:b7:68:c2:b5:0c:
         e5:3b:70:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 20:56:58 2024 by rpki-client on console-ams.rpki-client.org