Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e36302e302f32332d3233203d3e20323632343933.roa
File:                     3137372e35352e36302e302f32332d3233203d3e20323632343933.roa (raw, json)
Hash identifier:          wLwed51qHlADOv3ah3betzuE49C39DqJtwc0H1kwSsg=
Subject key identifier:   79:FC:D9:97:F0:93:D5:26:98:05:1D:B6:FB:0C:EA:5F:4E:2D:71:48
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       65F0DBA395E04E5D832817B2F61405D64AA5063F
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e36302e302f32332d3233203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:40 +0000
ROA not before:           Thu 07 Nov 2024 20:49:40 +0000
ROA not after:            Thu 06 Nov 2025 20:54:40 +0000
asID:                     262493
IP address blocks:        177.55.60.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f0:db:a3:95:e0:4e:5d:83:28:17:b2:f6:14:05:d6:4a:a5:06:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:40 2024 GMT
            Not After : Nov  6 20:54:40 2025 GMT
        Subject: CN=79FCD997F093D52698051DB6FB0CEA5F4E2D7148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6a:1d:f4:e1:ed:67:cd:05:1a:fa:ff:9d:8a:
                    da:40:c1:17:6a:e2:4a:a7:1f:05:31:b8:67:ae:31:
                    e6:c8:2f:e0:36:c4:88:6e:32:67:4f:c5:af:60:e1:
                    3b:d4:aa:31:13:a4:97:b1:b6:d1:02:17:55:9c:ff:
                    59:9a:f3:77:87:d5:12:e8:07:9f:1f:b5:5d:7b:c6:
                    30:4f:71:79:1b:92:e7:d0:e5:6e:3d:08:ac:61:d8:
                    81:71:5a:b2:b0:f2:67:80:57:5a:27:4c:ef:23:e1:
                    b2:3b:a5:ca:22:9c:4e:8b:82:7d:0d:ae:21:eb:1c:
                    70:53:35:6b:7e:95:0e:a1:11:19:a3:4a:ed:4e:71:
                    70:22:6e:9c:f9:d1:5b:b5:ac:da:fa:08:2f:e4:51:
                    37:74:b0:cd:64:c6:9c:c4:18:07:f4:79:2c:cd:3d:
                    ac:74:17:89:f4:cf:ee:80:fa:19:85:54:69:24:46:
                    f8:d8:03:f2:46:0a:90:42:5c:69:a4:ba:bf:67:a4:
                    76:47:3e:4d:b3:17:f5:db:bc:d0:08:00:71:29:93:
                    58:04:88:5a:d6:a4:cd:84:ad:44:93:6e:23:f4:01:
                    15:6f:11:1f:61:57:a4:20:50:48:0e:10:dd:55:57:
                    90:65:a7:4e:bf:fd:d6:5d:09:14:07:5a:d6:1e:5b:
                    70:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FC:D9:97:F0:93:D5:26:98:05:1D:B6:FB:0C:EA:5F:4E:2D:71:48
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e36302e302f32332d3233203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:49:e2:c3:91:da:70:92:a8:45:e3:86:6f:21:cc:01:9b:d4:
         f0:02:ff:af:1e:d9:74:5a:e6:c8:ae:75:19:ea:d7:cf:a0:32:
         28:41:f7:bd:c6:df:7d:68:e7:e5:fa:7c:54:01:a3:a1:03:bb:
         04:d3:f8:c3:01:ac:35:8c:e0:63:4d:4d:e7:e5:1c:dd:5e:8e:
         9e:02:ef:f0:91:23:68:68:3d:32:b4:e5:63:71:f9:3b:96:6c:
         fd:a6:72:db:f7:1d:11:06:74:b9:c0:9a:d9:3b:1e:7a:90:ba:
         a7:fd:9f:e1:2d:6f:2a:d6:57:62:ad:35:48:c4:d3:b2:a4:4c:
         08:7a:8f:66:80:a1:82:b7:98:58:99:e3:26:c4:7e:ff:52:6b:
         88:c2:3b:3e:a1:50:1a:49:22:ab:19:ce:11:f3:38:90:10:63:
         9e:60:c7:18:15:ab:ac:7d:64:7f:f8:8c:1e:7d:1b:5f:d5:33:
         4c:42:13:38:86:9d:44:df:31:66:dd:01:8c:80:a8:88:49:c3:
         4c:2c:dc:14:30:fe:01:5f:c1:d1:e6:18:ac:85:33:21:01:c3:
         7b:a3:da:2c:4f:0e:49:74:75:6c:89:73:4f:59:06:3d:48:ba:
         38:96:9a:16:f6:f3:8d:58:b6:f9:59:89:1a:1f:3a:2a:c1:7c:
         b9:4c:c0:71
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZfDbo5XgTl2DKBey9hQF1kqlBj8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU0MzYzRTIxRjE5RkIzNTdDM0ZGNkI5NURCRThBOTE2
QTIzRUJDRjAeFw0yNDExMDcyMDQ5NDBaFw0yNTExMDYyMDU0NDBaMDMxMTAvBgNV
BAMTKDc5RkNEOTk3RjA5M0Q1MjY5ODA1MURCNkZCMENFQTVGNEUyRDcxNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwah304e1nzQUa+v+ditpAwRdq
4kqnHwUxuGeuMebIL+A2xIhuMmdPxa9g4TvUqjETpJexttECF1Wc/1ma83eH1RLo
B58ftV17xjBPcXkbkufQ5W49CKxh2IFxWrKw8meAV1onTO8j4bI7pcoinE6Lgn0N
riHrHHBTNWt+lQ6hERmjSu1OcXAibpz50Vu1rNr6CC/kUTd0sM1kxpzEGAf0eSzN
Pax0F4n0z+6A+hmFVGkkRvjYA/JGCpBCXGmkur9npHZHPk2zF/XbvNAIAHEpk1gE
iFrWpM2ErUSTbiP0ARVvER9hV6QgUEgOEN1VV5Blp06//dZdCRQHWtYeW3DNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUefzZl/CT1SaYBR22+wzqX04tcUgwHwYDVR0j
BBgwFoAULkNj4h8Z+zV8P/a5Xb6KkWoj688wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRU1QM3htYjVNU1ZnYW1ySml6c0IzYlBSOXdjTURpOVJuZHJ2cFloaHNR
ZDQvMC8yRTQzNjNFMjFGMTlGQjM1N0MzRkY2Qjk1REJFOEE5MTZBMjNFQkNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFNDM2M0UyMUYxOUZCMzU3
QzNGRjZCOTVEQkU4QTkxNkEyM0VCQ0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VNUDN4bWI1TVNWZ2FtckppenNCM2JQUjl3Y01EaTlSbmRydnBZaGhzUWQ0LzAv
MzEzNzM3MmUzNTM1MmUzNjMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMy
MzQzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsTc8MA0GCSqGSIb3DQEBCwUAA4IBAQB6SeLDkdpw
kqhF44ZvIcwBm9TwAv+vHtl0WubIrnUZ6tfPoDIoQfe9xt99aOfl+nxUAaOhA7sE
0/jDAaw1jOBjTU3n5RzdXo6eAu/wkSNoaD0ytOVjcfk7lmz9pnLb9x0RBnS5wJrZ
Ox56kLqn/Z/hLW8q1ldirTVIxNOypEwIeo9mgKGCt5hYmeMmxH7/UmuIwjs+oVAa
SSKrGc4R8ziQEGOeYMcYFausfWR/+IwefRtf1TNMQhM4hp1E3zFm3QGMgKiIScNM
LNwUMP4BX8HR5hishTMhAcN7o9osTw5JdHVsiXNPWQY9SLo4lpoW9vONWLb5WYka
HzoqwXy5TMBx
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:31 2024 by rpki-client on console-fra.rpki-client.org