Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e36332e302f32342d3234203d3e20323632343933.roa
File:                     3137372e35352e36332e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          sYVo2KaLYPa1bb5FKrvBW1n40UdIIYluyGiIr9J8/kw=
Subject key identifier:   68:61:B1:FA:B2:12:41:D7:8C:59:0C:5F:22:C3:81:11:B9:8C:B3:7E
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       2543FDE1DAD37621076B25916B4A32462F21C153
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e36332e302f32342d3234203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:39 +0000
ROA not before:           Thu 07 Nov 2024 20:49:39 +0000
ROA not after:            Thu 06 Nov 2025 20:54:39 +0000
asID:                     262493
IP address blocks:        177.55.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:43:fd:e1:da:d3:76:21:07:6b:25:91:6b:4a:32:46:2f:21:c1:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:39 2024 GMT
            Not After : Nov  6 20:54:39 2025 GMT
        Subject: CN=6861B1FAB21241D78C590C5F22C38111B98CB37E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:32:d2:35:c5:a2:ba:29:a0:78:70:32:7c:98:
                    d0:a3:26:e8:e9:86:fa:1e:84:59:e0:a7:04:de:6b:
                    a5:2c:16:f0:be:f3:ea:11:e9:53:48:d3:51:f5:aa:
                    98:99:c7:21:81:f9:69:c2:8d:fe:ee:1b:50:aa:54:
                    92:cb:8c:0e:1e:54:78:d0:87:a9:69:40:13:04:5c:
                    78:2f:4b:a4:e9:40:2f:68:63:e8:b4:1e:ea:7d:3d:
                    58:90:32:7c:01:e2:3a:34:cf:aa:7d:07:28:f4:19:
                    7e:2c:4f:b6:01:8e:65:e9:b8:21:5d:7e:26:6e:55:
                    64:47:80:4f:07:4a:e8:ba:37:39:5c:04:05:cc:60:
                    38:71:64:94:24:2d:7e:03:d6:c5:f3:82:9c:90:d5:
                    0e:bb:91:14:80:af:de:71:4d:d5:71:0c:b6:72:a3:
                    ad:d2:a6:7f:74:f4:de:14:e2:55:93:d2:d2:b9:f7:
                    3e:1d:ae:63:7e:78:97:56:24:f3:fb:9b:97:03:e6:
                    69:34:4a:84:d9:69:cf:17:4d:30:f6:31:13:0c:6e:
                    1b:63:31:7b:03:d8:7a:aa:fe:bb:ec:a5:c5:9c:16:
                    0e:09:b3:7c:e7:1f:25:0a:1c:65:4a:b7:f7:e7:45:
                    2c:2c:97:58:87:d6:a9:81:fc:e5:80:be:1d:2f:d9:
                    b8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:61:B1:FA:B2:12:41:D7:8C:59:0C:5F:22:C3:81:11:B9:8C:B3:7E
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e36332e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:30:70:34:a0:37:d2:86:0e:38:1d:c0:4c:23:bc:64:1e:21:
         9b:1c:5b:74:df:23:bc:db:ae:b5:cb:3f:2c:69:c0:9f:fb:69:
         98:e9:50:ab:47:79:47:38:d1:68:67:47:60:e9:87:3c:45:c2:
         8f:8f:14:b4:a4:3a:83:5f:54:e4:b9:74:b4:ef:a2:3f:45:2c:
         f6:54:3c:82:6d:7a:ee:37:3e:00:e7:e1:87:ff:5a:ba:30:f3:
         43:d5:75:4d:37:15:79:6b:a5:c9:48:01:ce:24:f4:55:d8:68:
         20:77:24:d4:b9:86:b8:0b:84:87:76:f6:e2:a5:9e:b6:03:83:
         a5:95:ab:2d:dd:4d:b6:2f:8d:53:96:8b:e7:f7:0f:ec:80:f6:
         82:82:12:31:83:a1:3e:d0:ac:cf:f9:b0:14:d6:71:5b:2c:d8:
         75:42:03:5f:78:ee:65:83:21:ee:bd:9c:3a:1a:47:e8:8b:39:
         ad:a6:59:2c:b4:d2:15:09:53:04:9f:c2:9e:1e:77:b2:c4:03:
         53:39:7e:52:3a:5f:34:ae:e9:59:65:af:28:f2:b8:94:5b:f7:
         59:9f:2b:5b:d4:80:8b:fd:89:d3:4a:0a:e7:8c:c0:fb:2d:90:
         e8:9d:06:02:77:6a:62:33:21:4c:b2:62:be:05:d3:f3:1c:6a:
         c5:6b:ef:dc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJUP94drTdiEHayWRa0oyRi8hwVMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU0MzYzRTIxRjE5RkIzNTdDM0ZGNkI5NURCRThBOTE2
QTIzRUJDRjAeFw0yNDExMDcyMDQ5MzlaFw0yNTExMDYyMDU0MzlaMDMxMTAvBgNV
BAMTKDY4NjFCMUZBQjIxMjQxRDc4QzU5MEM1RjIyQzM4MTExQjk4Q0IzN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKMtI1xaK6KaB4cDJ8mNCjJujp
hvoehFngpwTea6UsFvC+8+oR6VNI01H1qpiZxyGB+WnCjf7uG1CqVJLLjA4eVHjQ
h6lpQBMEXHgvS6TpQC9oY+i0Hup9PViQMnwB4jo0z6p9Byj0GX4sT7YBjmXpuCFd
fiZuVWRHgE8HSui6NzlcBAXMYDhxZJQkLX4D1sXzgpyQ1Q67kRSAr95xTdVxDLZy
o63Spn909N4U4lWT0tK59z4drmN+eJdWJPP7m5cD5mk0SoTZac8XTTD2MRMMbhtj
MXsD2Hqq/rvspcWcFg4Js3znHyUKHGVKt/fnRSwsl1iH1qmB/OWAvh0v2binAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUaGGx+rISQdeMWQxfIsOBEbmMs34wHwYDVR0j
BBgwFoAULkNj4h8Z+zV8P/a5Xb6KkWoj688wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRU1QM3htYjVNU1ZnYW1ySml6c0IzYlBSOXdjTURpOVJuZHJ2cFloaHNR
ZDQvMC8yRTQzNjNFMjFGMTlGQjM1N0MzRkY2Qjk1REJFOEE5MTZBMjNFQkNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFNDM2M0UyMUYxOUZCMzU3
QzNGRjZCOTVEQkU4QTkxNkEyM0VCQ0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VNUDN4bWI1TVNWZ2FtckppenNCM2JQUjl3Y01EaTlSbmRydnBZaGhzUWQ0LzAv
MzEzNzM3MmUzNTM1MmUzNjMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzQzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsTc/MA0GCSqGSIb3DQEBCwUAA4IBAQB3MHA0oDfS
hg44HcBMI7xkHiGbHFt03yO82661yz8sacCf+2mY6VCrR3lHONFoZ0dg6Yc8RcKP
jxS0pDqDX1TkuXS076I/RSz2VDyCbXruNz4A5+GH/1q6MPND1XVNNxV5a6XJSAHO
JPRV2GggdyTUuYa4C4SHdvbipZ62A4Ollast3U22L41Tlovn9w/sgPaCghIxg6E+
0KzP+bAU1nFbLNh1QgNfeO5lgyHuvZw6GkfoizmtplkstNIVCVMEn8KeHneyxANT
OX5SOl80rulZZa8o8riUW/dZnytb1ICL/YnTSgrnjMD7LZDonQYCd2piMyFMsmK+
BdPzHGrFa+/c
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:31 2024 by rpki-client on console-fra.rpki-client.org