Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35382e302f32332d3233203d3e20323632343933.roa
File:                     3137372e35352e35382e302f32332d3233203d3e20323632343933.roa (raw, json)
Hash identifier:          Az1ke+ZJZDUmK1nDtRjuW+kT5zkbWDhUQW7pYvZz7+E=
Subject key identifier:   59:F0:D1:CF:1E:F5:BB:65:46:6B:AE:3F:ED:2B:EE:67:95:49:3D:01
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       03DC2C87717DC9CB031B5024CA86740AA84A3C77
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35382e302f32332d3233203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:40 +0000
ROA not before:           Thu 07 Nov 2024 20:49:40 +0000
ROA not after:            Thu 06 Nov 2025 20:54:40 +0000
asID:                     262493
IP address blocks:        177.55.58.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 11:32:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:dc:2c:87:71:7d:c9:cb:03:1b:50:24:ca:86:74:0a:a8:4a:3c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:40 2024 GMT
            Not After : Nov  6 20:54:40 2025 GMT
        Subject: CN=59F0D1CF1EF5BB65466BAE3FED2BEE6795493D01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f1:cf:a4:6b:26:b5:ed:21:dc:08:de:6d:f8:
                    51:ab:91:fd:fd:c8:e3:a5:65:da:a6:6a:5f:91:4a:
                    c8:ed:ba:d2:8e:64:a2:88:f7:b4:c7:fd:2c:38:ca:
                    33:96:5d:d8:c5:89:ec:9f:a4:ef:82:eb:c4:e5:99:
                    dc:88:ff:de:79:60:ea:c8:6e:a3:51:96:ea:27:11:
                    38:2c:62:b6:66:7e:60:de:4f:5b:9e:9b:19:8a:d4:
                    4d:79:1b:f5:e5:56:10:63:27:b9:9f:ea:19:50:16:
                    b6:01:16:e7:13:3e:90:bb:e4:ab:29:84:af:56:01:
                    01:ee:0e:56:06:e1:42:b6:79:3c:b4:72:f3:de:e8:
                    68:93:b2:66:12:1a:8f:37:7a:24:68:d7:17:e5:22:
                    c5:ad:b2:47:38:1d:44:fb:92:0e:f5:53:46:e2:13:
                    a4:bc:0b:0f:db:7e:06:b0:17:c1:2e:c9:17:fc:06:
                    b2:67:58:58:21:f0:27:f2:2c:24:51:4a:fe:c4:15:
                    6e:ef:de:fa:51:34:1d:10:49:36:4d:e1:f1:b1:1f:
                    a5:55:20:06:a9:f4:3c:b6:db:d5:72:22:ed:89:0a:
                    ef:e8:a8:7c:2e:d4:88:7f:49:b0:e9:a7:ce:c8:03:
                    24:eb:fe:66:a1:1b:46:00:43:78:56:a8:88:c8:00:
                    60:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F0:D1:CF:1E:F5:BB:65:46:6B:AE:3F:ED:2B:EE:67:95:49:3D:01
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35382e302f32332d3233203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:7e:c3:8a:98:ee:42:1d:fd:0e:39:83:f0:f3:9d:3a:c5:a8:
         1e:18:21:d5:af:0f:8f:ea:47:cd:f8:96:13:d2:0a:60:55:ff:
         c6:58:ed:8b:8a:a0:96:22:c5:72:f7:4a:e0:82:a9:3a:08:b2:
         40:cc:0c:99:95:23:c8:fd:23:aa:a3:29:0b:e4:18:2c:39:eb:
         42:44:eb:c2:42:07:42:86:f1:ad:87:10:f2:52:14:7e:c6:2e:
         16:b3:47:ac:13:5a:e9:95:d9:64:9e:32:20:12:e0:fd:f6:20:
         11:55:fd:cd:90:b0:7a:1b:88:c2:83:33:91:52:1d:35:ea:5f:
         03:e1:48:0c:a3:ea:c8:ee:b1:24:dc:ce:6d:c8:79:1b:bc:dc:
         b5:44:3f:25:fc:3e:b7:dc:41:ea:b3:77:01:6a:f9:a0:70:d4:
         b3:d5:ad:35:27:f0:2c:4d:53:f5:3c:a5:ee:cf:6c:ae:0f:d9:
         72:78:53:4e:7e:d3:6d:63:e6:a9:ba:aa:7a:82:95:64:9e:fd:
         b0:05:ac:2a:fa:d9:c2:3b:b8:90:ea:5c:99:73:e6:bc:a1:fc:
         bf:26:d3:78:33:87:cd:69:23:db:36:22:5d:fc:13:f0:7b:ea:
         94:4d:94:06:15:4f:6a:7c:61:ff:68:31:f0:88:c8:bb:98:b5:
         3e:e9:1a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:40 2024 by rpki-client on console-ams.rpki-client.org