Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35382e302f32342d3234203d3e20323632343933.roa
File:                     3137372e35352e35382e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          qkVk/NkEAFXDDsy2VgBL9Ff6eQWf8L+AlV4+ZeJpx8w=
Subject key identifier:   77:E4:2B:D1:6D:DA:35:F0:A9:19:46:37:CB:E6:FF:B3:25:BB:71:44
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       6FA2A26E62D483F657672BF6BA956B18F0CF2328
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35382e302f32342d3234203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:41 +0000
ROA not before:           Thu 07 Nov 2024 20:49:41 +0000
ROA not after:            Thu 06 Nov 2025 20:54:41 +0000
asID:                     262493
IP address blocks:        177.55.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a2:a2:6e:62:d4:83:f6:57:67:2b:f6:ba:95:6b:18:f0:cf:23:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:41 2024 GMT
            Not After : Nov  6 20:54:41 2025 GMT
        Subject: CN=77E42BD16DDA35F0A9194637CBE6FFB325BB7144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5e:04:bc:f1:08:f4:14:0a:8a:93:d3:46:85:
                    2f:10:2c:f3:f1:11:80:34:26:94:77:40:bf:b6:0d:
                    c8:2a:e8:b3:1e:15:7a:7c:c5:17:b5:d6:54:00:34:
                    c0:b6:ba:2f:0b:13:cf:d3:2d:21:c8:4c:8b:4b:5d:
                    22:bb:82:d9:09:3e:a4:6a:db:2c:d5:90:27:71:8a:
                    ec:20:23:0b:ca:d1:35:b2:d0:c4:c0:3c:27:17:f3:
                    44:dd:8a:a5:dc:3e:60:af:53:70:85:97:0c:76:10:
                    0d:dd:48:1e:ed:dd:11:a1:9c:bc:a2:3c:ad:ec:36:
                    16:95:29:4d:a9:19:84:0b:72:01:14:1d:1e:46:84:
                    5c:b7:bd:cb:a9:0b:70:2b:93:8b:df:5d:98:3a:af:
                    e7:96:a2:21:b1:d9:a5:15:43:4c:c4:fc:65:b1:74:
                    50:cd:1b:8e:9a:a5:d5:ce:cf:08:98:90:5f:b3:aa:
                    9a:41:ad:09:a3:b9:de:f2:cc:81:cc:c1:11:d7:6f:
                    83:0a:bf:ba:4e:2c:78:41:bd:a4:84:41:9c:d0:74:
                    08:66:53:d4:97:3a:fd:c4:4d:b0:5b:d0:3f:b1:bb:
                    96:e1:3b:d0:06:d8:f0:fc:17:a3:06:f2:37:c2:3f:
                    5b:fe:0a:f4:26:e0:3e:5c:27:8d:b9:da:f8:a6:ff:
                    45:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E4:2B:D1:6D:DA:35:F0:A9:19:46:37:CB:E6:FF:B3:25:BB:71:44
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35382e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dc:4f:53:1f:7e:f1:f9:84:4c:68:cf:af:6c:75:52:b4:26:a7:
         5c:c6:f9:e3:64:bb:6f:40:b4:a5:16:20:02:37:5e:8c:66:6c:
         f6:a5:1f:9f:12:87:c2:e3:a4:99:55:bd:ba:73:15:a0:d6:98:
         c5:cc:c4:a8:4d:a7:bc:6f:52:66:24:76:a1:6c:e7:09:89:7f:
         e8:02:3d:f9:e4:c5:53:64:c8:56:46:92:f9:1b:bd:6b:1d:25:
         46:ef:3d:69:99:a9:6b:0b:2c:08:04:4b:a2:1d:14:d5:bd:46:
         c9:e3:97:cf:a8:bb:71:bf:d7:d5:c6:52:be:42:fb:b0:b2:f0:
         28:61:77:9b:ba:80:4c:58:8b:2a:cb:05:0f:af:0a:32:8f:21:
         95:42:a2:fc:c3:f7:86:b8:42:da:8f:65:d6:a0:08:24:a8:57:
         37:2e:6a:9b:58:c5:cc:00:eb:9b:df:13:9d:8d:9c:68:c7:a0:
         c7:c2:90:41:42:50:ee:e2:1b:d1:28:09:bb:08:c7:f4:44:02:
         30:24:de:87:27:ef:dc:af:31:42:78:b7:2f:e8:88:84:4d:33:
         96:96:77:aa:2f:ec:4a:15:35:00:88:1b:66:93:28:16:1b:7a:
         f5:a5:06:7b:48:c7:09:50:64:61:be:32:57:01:fe:2e:2e:59:
         84:d3:a8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:31 2024 by rpki-client on console-fra.rpki-client.org