Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35392e302f32342d3234203d3e20323632343933.roa
File:                     3137372e35352e35392e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          vRlma8c/8rxo+gp23/8WmYSYutniSg4BsupN3YrxXGg=
Subject key identifier:   F4:BC:53:F2:38:07:4A:3A:B2:CE:4B:59:02:D8:EB:C4:6C:94:10:A0
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       30F530E20FA1E714F77EF7DA32F226C416729861
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35392e302f32342d3234203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:39 +0000
ROA not before:           Thu 07 Nov 2024 20:49:39 +0000
ROA not after:            Thu 06 Nov 2025 20:54:39 +0000
asID:                     262493
IP address blocks:        177.55.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f5:30:e2:0f:a1:e7:14:f7:7e:f7:da:32:f2:26:c4:16:72:98:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:39 2024 GMT
            Not After : Nov  6 20:54:39 2025 GMT
        Subject: CN=F4BC53F238074A3AB2CE4B5902D8EBC46C9410A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:82:40:fd:2b:e7:27:a4:7b:c3:9a:43:18:a4:
                    ed:ba:26:a4:b0:a5:6d:0f:bf:62:df:34:5c:a0:98:
                    77:ef:db:60:ac:b5:0c:a7:5e:4d:64:83:68:71:f5:
                    9d:14:ba:1c:f7:2d:25:d8:32:d3:62:0c:1b:15:f5:
                    b8:69:31:bb:ea:50:7e:9d:13:58:7a:42:45:7a:59:
                    c5:c8:14:78:a5:3c:e4:33:6d:3b:51:57:80:31:c0:
                    e8:62:c8:54:0d:aa:bc:39:5d:49:aa:f1:17:a2:c9:
                    8e:a7:bb:cf:82:b3:89:00:1d:c5:5c:44:6f:a6:4a:
                    6a:62:2e:a8:aa:4d:d0:05:d3:36:2a:f3:74:90:4d:
                    bc:18:ef:15:05:e7:da:94:25:ad:87:09:df:fa:49:
                    57:be:b6:dd:c0:c5:1f:34:5f:29:be:d7:6a:6c:48:
                    26:a5:d2:94:b6:6f:96:20:81:3c:70:25:8c:17:3f:
                    05:65:4e:fb:45:47:40:50:6a:e9:98:8f:02:b7:70:
                    65:b5:ac:32:26:0f:6b:eb:73:93:38:22:9e:73:66:
                    2d:50:4b:7d:7a:38:b1:1e:66:7a:ad:99:b8:9c:2b:
                    cc:e0:cd:96:e5:1f:69:9d:5a:b6:6b:0e:1a:ba:d6:
                    4b:d4:ad:ba:d1:30:cd:36:9b:d1:50:1a:75:ae:ed:
                    dc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BC:53:F2:38:07:4A:3A:B2:CE:4B:59:02:D8:EB:C4:6C:94:10:A0
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35392e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:05:80:f5:e0:42:a9:76:3c:52:64:01:15:32:7c:8c:09:3e:
         2a:71:91:e9:7c:aa:0b:8c:74:fe:ed:c8:44:b2:87:59:c0:ef:
         6c:f0:50:46:c4:31:95:f1:51:b4:2a:94:44:ea:00:45:c9:58:
         de:6a:ad:90:0c:e9:03:7c:51:fc:68:96:a5:2c:e5:ea:aa:f0:
         88:c1:92:14:af:0b:41:cc:3e:09:4c:88:ff:46:f6:be:b5:75:
         05:6e:5a:3d:70:f5:7c:5e:36:3f:62:bb:30:e8:4e:21:96:df:
         35:0d:d6:ea:95:5d:b3:f5:f6:b3:ff:f1:68:2c:39:55:10:20:
         69:09:91:fd:e5:55:74:c8:01:d1:9e:74:ca:d4:cf:f9:6b:d4:
         87:f6:f0:89:0d:7c:fb:63:1f:c0:1f:4d:e1:6a:a2:35:aa:4b:
         cd:35:a7:67:21:16:0e:59:31:db:c0:8d:6c:e6:fc:68:fe:dd:
         75:d1:b9:69:2b:f5:37:96:9d:99:8e:51:e1:03:6d:12:a4:c3:
         fb:35:fc:35:65:d8:01:45:52:87:db:25:ee:23:f4:6d:6b:f8:
         1a:8b:b9:3e:42:8b:97:5e:79:6d:4f:eb:64:58:5c:4f:6a:3e:
         ca:53:5d:18:5c:6a:f1:d7:45:f9:ed:75:93:b9:39:4f:72:22:
         7c:c2:1e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org