Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35372e302f32342d3234203d3e20323632343933.roa
File:                     3137372e35352e35372e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          dclbV4cYeCCcnNYj5KwaxdP10e7yNsz4Nt2wZfg01Ew=
Subject key identifier:   90:37:5F:F3:C1:B3:40:B8:E6:2B:D2:E7:9C:82:3F:28:0C:AD:34:6D
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       2CB243EC1949D77F5F5C3043F0516857F961038F
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35372e302f32342d3234203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:39 +0000
ROA not before:           Thu 07 Nov 2024 20:49:39 +0000
ROA not after:            Thu 06 Nov 2025 20:54:39 +0000
asID:                     262493
IP address blocks:        177.55.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b2:43:ec:19:49:d7:7f:5f:5c:30:43:f0:51:68:57:f9:61:03:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:39 2024 GMT
            Not After : Nov  6 20:54:39 2025 GMT
        Subject: CN=90375FF3C1B340B8E62BD2E79C823F280CAD346D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:33:4d:9a:45:f2:6a:24:0d:35:fd:af:91:f3:
                    9c:06:c5:18:68:e6:1a:8c:24:4f:60:ef:59:ff:2c:
                    17:99:ae:de:aa:f4:e5:8b:f7:58:29:c8:bc:f0:93:
                    27:52:24:0e:08:89:b6:b3:18:9f:5f:e3:13:a3:25:
                    d1:b2:1e:f1:d0:33:da:07:d8:6f:ed:94:bc:c9:cf:
                    39:42:9d:3e:18:7f:3f:da:2b:41:d4:32:05:6f:83:
                    00:4f:c7:e5:37:26:2c:5a:d1:42:7f:d1:73:e0:8a:
                    70:c9:10:83:2a:d2:26:10:39:8b:b5:ea:fd:dd:64:
                    5e:95:57:6e:8c:7d:a6:a0:d3:20:57:fe:44:dd:3a:
                    64:e4:97:00:f2:dc:e1:8b:28:92:d4:c3:b3:a7:c7:
                    02:f4:a4:ac:f4:95:35:a2:92:36:38:99:22:94:a4:
                    1d:cc:f8:20:46:b0:28:cc:87:6c:33:da:99:73:50:
                    44:5d:73:e8:26:dd:a6:93:73:e2:21:72:c1:39:1c:
                    b0:cf:ef:a1:b0:43:4d:e2:51:5a:43:72:a5:17:fd:
                    b8:af:e0:19:f9:86:15:40:d2:28:67:27:a1:e0:22:
                    b9:55:d8:81:6d:f9:d2:25:8b:ce:a0:d5:d9:e1:7d:
                    ca:ef:6a:ce:8f:7a:26:25:80:b4:b4:e5:56:f7:44:
                    01:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:37:5F:F3:C1:B3:40:B8:E6:2B:D2:E7:9C:82:3F:28:0C:AD:34:6D
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35372e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:d4:90:83:d4:ed:43:2a:45:88:53:c2:d3:48:33:f1:6c:6b:
         aa:b1:6b:5a:e5:f2:67:6e:ec:be:79:3d:dd:9c:69:60:90:3b:
         be:fa:ee:8e:fb:21:cb:58:c0:d4:94:33:db:8d:3f:c0:b0:a9:
         11:43:93:39:b8:3a:90:48:50:86:c6:a6:a6:02:bc:e5:9e:5e:
         0b:69:fb:f0:1f:9e:c9:1c:4b:7b:34:ec:71:84:d9:fe:5d:7c:
         a8:50:1b:1d:05:47:18:17:05:04:52:d2:da:b9:b8:8f:cf:80:
         f5:79:f3:29:cb:9c:3f:65:7b:ce:55:76:4a:79:c2:e7:28:ee:
         15:9e:48:f1:88:72:3e:7b:3c:47:bb:3e:51:1b:a8:ec:bc:34:
         ca:fd:86:bb:0a:db:ee:fb:10:e8:85:7c:ed:4e:f2:87:8c:4a:
         14:25:ab:be:96:96:9f:97:de:b4:dc:5a:87:ca:93:a9:5a:23:
         f1:3b:76:c6:4f:78:92:da:7b:b5:17:a5:89:d4:54:6f:74:00:
         79:b8:0d:de:15:ee:e7:ef:46:50:eb:54:17:ac:35:fa:60:d4:
         28:fb:c8:f4:55:cc:5d:f3:4d:92:ae:79:fa:15:e3:ea:86:6c:
         23:5b:be:a9:7b:cf:d4:33:c5:19:35:b3:90:e6:a7:68:e9:02:
         27:1b:a5:35
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULLJD7BlJ139fXDBD8FFoV/lhA48wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU0MzYzRTIxRjE5RkIzNTdDM0ZGNkI5NURCRThBOTE2
QTIzRUJDRjAeFw0yNDExMDcyMDQ5MzlaFw0yNTExMDYyMDU0MzlaMDMxMTAvBgNV
BAMTKDkwMzc1RkYzQzFCMzQwQjhFNjJCRDJFNzlDODIzRjI4MENBRDM0NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsM02aRfJqJA01/a+R85wGxRho
5hqMJE9g71n/LBeZrt6q9OWL91gpyLzwkydSJA4IibazGJ9f4xOjJdGyHvHQM9oH
2G/tlLzJzzlCnT4Yfz/aK0HUMgVvgwBPx+U3Jixa0UJ/0XPginDJEIMq0iYQOYu1
6v3dZF6VV26Mfaag0yBX/kTdOmTklwDy3OGLKJLUw7OnxwL0pKz0lTWikjY4mSKU
pB3M+CBGsCjMh2wz2plzUERdc+gm3aaTc+IhcsE5HLDP76GwQ03iUVpDcqUX/biv
4Bn5hhVA0ihnJ6HgIrlV2IFt+dIli86g1dnhfcrvas6PeiYlgLS05Vb3RAEJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUkDdf88GzQLjmK9LnnII/KAytNG0wHwYDVR0j
BBgwFoAULkNj4h8Z+zV8P/a5Xb6KkWoj688wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRU1QM3htYjVNU1ZnYW1ySml6c0IzYlBSOXdjTURpOVJuZHJ2cFloaHNR
ZDQvMC8yRTQzNjNFMjFGMTlGQjM1N0MzRkY2Qjk1REJFOEE5MTZBMjNFQkNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFNDM2M0UyMUYxOUZCMzU3
QzNGRjZCOTVEQkU4QTkxNkEyM0VCQ0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VNUDN4bWI1TVNWZ2FtckppenNCM2JQUjl3Y01EaTlSbmRydnBZaGhzUWQ0LzAv
MzEzNzM3MmUzNTM1MmUzNTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzQzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsTc5MA0GCSqGSIb3DQEBCwUAA4IBAQCU1JCD1O1D
KkWIU8LTSDPxbGuqsWta5fJnbuy+eT3dnGlgkDu++u6O+yHLWMDUlDPbjT/AsKkR
Q5M5uDqQSFCGxqamArzlnl4LafvwH57JHEt7NOxxhNn+XXyoUBsdBUcYFwUEUtLa
ubiPz4D1efMpy5w/ZXvOVXZKecLnKO4VnkjxiHI+ezxHuz5RG6jsvDTK/Ya7Ctvu
+xDohXztTvKHjEoUJau+lpafl9603FqHypOpWiPxO3bGT3iS2nu1F6WJ1FRvdAB5
uA3eFe7n70ZQ61QXrDX6YNQo+8j0Vcxd802Srnn6FePqhmwjW76pe8/UM8UZNbOQ
5qdo6QInG6U1
-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:43 2024 by rpki-client on console-fra.rpki-client.org