Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e36312e302f32342d3234203d3e20323632343933.roa
File:                     3137372e35352e36312e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          BR8un1dy8BJ75IkwjPSfeFjCLbN2bBfyt2tNYEb8d7U=
Subject key identifier:   4A:C1:3B:2C:7F:D4:DD:7B:1E:B4:92:CD:CF:E9:E8:31:89:B1:2C:42
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       147B51098FD59DFD955C2B63324CBB29A15484D9
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e36312e302f32342d3234203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:40 +0000
ROA not before:           Thu 07 Nov 2024 20:49:40 +0000
ROA not after:            Thu 06 Nov 2025 20:54:40 +0000
asID:                     262493
IP address blocks:        177.55.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:7b:51:09:8f:d5:9d:fd:95:5c:2b:63:32:4c:bb:29:a1:54:84:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:40 2024 GMT
            Not After : Nov  6 20:54:40 2025 GMT
        Subject: CN=4AC13B2C7FD4DD7B1EB492CDCFE9E83189B12C42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:69:c8:fa:56:8b:6d:25:d5:62:4d:2c:ad:52:
                    3c:92:b6:1e:6d:ee:4a:a4:78:9c:6a:f2:a5:18:c8:
                    47:f7:24:d9:5f:90:95:c1:38:20:94:6b:1e:71:31:
                    72:28:9e:67:91:de:f1:c5:25:37:44:2f:de:82:dd:
                    61:e9:a7:d6:d4:f2:64:93:51:da:83:98:c7:04:bb:
                    2d:51:ac:7b:6a:fa:43:c3:a2:d8:07:52:ef:cf:88:
                    c7:df:a5:b3:8e:c9:1b:a0:73:3f:24:85:19:00:14:
                    7c:60:64:68:2f:58:b9:46:a0:a9:2c:94:a0:e0:4b:
                    cc:52:b4:12:1f:4f:84:5d:64:ce:32:fe:f8:9f:5e:
                    47:df:fc:05:1d:84:90:c5:ec:45:2f:fa:23:23:34:
                    63:d5:25:88:13:91:d6:65:82:44:24:c0:b1:0a:10:
                    fb:f0:20:1f:b8:67:8f:4d:58:00:9d:49:a1:39:f7:
                    a7:ce:33:7d:3f:6b:0f:4e:e5:43:3f:c9:a3:54:90:
                    43:b8:ca:3c:79:a2:e9:ad:24:eb:84:83:5e:ae:a6:
                    f8:7c:55:ff:47:78:f3:fb:e2:0d:50:e2:4c:5a:b6:
                    09:81:32:29:28:04:18:bd:7d:5f:6e:75:65:b9:44:
                    e4:26:cb:f6:64:fd:70:23:ec:01:a9:fa:de:41:8a:
                    63:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C1:3B:2C:7F:D4:DD:7B:1E:B4:92:CD:CF:E9:E8:31:89:B1:2C:42
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e36312e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:46:fb:68:b1:18:85:e8:8e:12:3e:24:83:ac:b2:d0:c1:96:
         81:d3:99:11:86:b9:69:b8:72:8b:a0:74:2e:00:c9:c3:41:f3:
         1d:a3:b6:59:f8:4c:2c:60:af:c7:ff:44:e4:21:80:51:42:36:
         a9:0b:cb:43:a4:c0:ff:50:9c:33:38:fc:69:ab:2f:dd:c6:67:
         e5:92:ab:ed:12:29:c4:21:8b:d7:f9:e3:76:ce:5c:58:9e:2d:
         5f:1f:2e:98:54:b3:59:45:e6:51:76:b5:8c:14:56:8b:2b:cf:
         ba:99:3d:76:ef:27:47:79:db:8d:80:14:7c:9c:ad:7f:b1:e9:
         96:4f:fb:80:a4:d3:6e:51:2f:8f:61:12:21:1e:d5:c2:28:26:
         9f:57:ad:22:80:e7:37:b5:a5:4b:1c:63:03:28:ca:3e:75:af:
         1a:89:a8:00:b1:8a:38:66:41:13:81:be:27:c8:9c:fb:7f:93:
         5c:7a:c1:01:04:a5:e3:e3:02:e3:be:1b:4e:b6:27:44:b1:24:
         8b:af:5d:f7:f7:a2:8e:04:fc:05:bb:b7:cc:fd:f1:ff:ee:06:
         38:3b:cc:39:f5:09:40:53:3a:a1:07:da:71:9e:9c:ea:59:68:
         e7:38:df:ef:ce:5b:88:8e:b7:55:78:3c:52:48:3e:10:9e:e6:
         91:03:b7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org