Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e36312e302f32342d3234203d3e20323632343933.roa
File:                     3137372e35352e36312e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          tT07YWX6fSHu39XVP8vt/9JG2n73qtM4vxaxAOLIBis=
Subject key identifier:   69:ED:34:EE:0D:59:2C:B3:AF:D6:9F:D5:95:6F:14:0A:71:83:83:26
Certificate issuer:       /CN=6624A24FC6D51C1A5035DC8EDFFE7A2663699409
Certificate serial:       5395D669883D43DDE3A4750E362B3D1A3AC55552
Authority key identifier: 66:24:A2:4F:C6:D5:1C:1A:50:35:DC:8E:DF:FE:7A:26:63:69:94:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6624A24FC6D51C1A5035DC8EDFFE7A2663699409.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e36312e302f32342d3234203d3e20323632343933.roa
Signing time:             Sun 14 Apr 2024 02:05:24 +0000
ROA not before:           Sun 14 Apr 2024 02:00:24 +0000
ROA not after:            Sun 13 Apr 2025 02:05:24 +0000
asID:                     262493
IP address blocks:        177.55.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/6624A24FC6D51C1A5035DC8EDFFE7A2663699409.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/6624A24FC6D51C1A5035DC8EDFFE7A2663699409.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6624A24FC6D51C1A5035DC8EDFFE7A2663699409.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Jul 2024 11:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:95:d6:69:88:3d:43:dd:e3:a4:75:0e:36:2b:3d:1a:3a:c5:55:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6624A24FC6D51C1A5035DC8EDFFE7A2663699409
        Validity
            Not Before: Apr 14 02:00:24 2024 GMT
            Not After : Apr 13 02:05:24 2025 GMT
        Subject: CN=69ED34EE0D592CB3AFD69FD5956F140A71838326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d1:04:aa:9d:c8:0f:fa:53:5d:a1:b7:4a:c2:
                    21:48:e0:f5:f4:33:58:fa:e3:ff:a6:33:50:9b:57:
                    b5:d4:ec:50:c5:6a:6f:de:8d:f8:88:0d:6a:7e:31:
                    35:e6:3e:72:be:fa:44:60:a4:26:51:50:2a:0c:53:
                    85:59:43:08:37:cf:f4:43:f9:2b:1e:56:41:d7:9f:
                    1e:3e:38:cf:46:7e:33:39:2f:a7:de:ae:fd:46:c8:
                    b5:05:b4:9c:14:28:40:00:4e:66:87:db:f5:9b:32:
                    5f:ef:dc:a6:be:62:1f:61:b1:7d:dd:27:2c:a6:16:
                    70:4a:3f:52:2e:a9:5d:51:ee:69:2f:6d:08:59:99:
                    00:df:db:b4:cf:ba:f3:91:7a:13:93:d1:11:12:1e:
                    85:c2:cc:ff:43:11:d5:27:fa:59:24:1c:5e:72:1d:
                    24:6f:f0:94:be:58:0b:00:21:b9:33:12:67:d8:d7:
                    96:4a:b9:cd:b4:7f:e1:d3:76:ab:60:45:d8:18:43:
                    3f:bb:35:6b:49:78:24:10:e9:5c:99:19:67:b9:44:
                    36:89:6f:1e:c5:9a:ed:e4:5e:ce:bd:02:db:b7:a0:
                    55:1e:40:dd:2e:51:5f:2a:86:24:da:f0:92:bf:63:
                    44:60:bb:51:c3:89:8b:e3:b7:cf:f0:f2:34:e9:3f:
                    11:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:ED:34:EE:0D:59:2C:B3:AF:D6:9F:D5:95:6F:14:0A:71:83:83:26
            X509v3 Authority Key Identifier:
                keyid:66:24:A2:4F:C6:D5:1C:1A:50:35:DC:8E:DF:FE:7A:26:63:69:94:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/6624A24FC6D51C1A5035DC8EDFFE7A2663699409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6624A24FC6D51C1A5035DC8EDFFE7A2663699409.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e36312e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:5e:e5:a8:5e:69:48:47:8a:f3:23:e1:15:36:ab:d7:62:e1:
         14:36:f4:c1:71:83:de:3b:c3:d3:5d:42:00:39:ff:cf:9a:6c:
         bd:4e:4a:ae:33:26:08:a9:a1:55:5e:01:4c:d2:dd:17:dd:d1:
         2b:f4:09:cb:d6:4f:6f:5f:08:14:6b:8e:5f:32:e1:a6:c9:21:
         33:a9:da:e0:5e:d9:b7:13:85:ce:1c:a3:41:79:32:53:dc:fd:
         71:95:e5:53:44:7f:cf:c4:32:e2:f7:87:ff:eb:86:b3:0e:5a:
         fa:83:b4:ee:17:fb:dc:53:5d:7d:75:d1:e9:df:8d:44:16:f5:
         a4:97:e3:50:12:ef:b2:5d:7b:4d:5f:0c:aa:ab:fc:a4:4b:2f:
         70:3a:57:d1:e8:1e:3a:43:c8:d6:7c:c4:17:2a:7b:65:09:e4:
         4e:30:37:05:3a:b7:f2:1e:c6:85:a8:30:cb:43:3b:fb:1a:f8:
         22:8d:27:03:10:e3:4a:a5:12:8e:68:e2:80:26:a4:4d:0e:91:
         94:57:5a:c8:17:5e:b3:b6:e0:b7:aa:5c:66:fa:8b:84:75:be:
         a9:89:5a:83:34:7a:97:2e:ba:a2:41:b3:80:b7:35:1d:80:82:
         f4:0d:07:bd:42:ef:69:12:4d:1e:e0:25:9a:2b:3a:5b:2a:9c:
         5e:a9:01:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 11:48:15 2024 by rpki-client on console-ams.rpki-client.org