Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e34382e302f32312d3231203d3e20323632343933.roa
File:                     3137372e382e34382e302f32312d3231203d3e20323632343933.roa (raw, json)
Hash identifier:          /LK1+dpjkB6fnJslrUSEdX1PT9mIlnFgdbQLOQj3h9g=
Subject key identifier:   EF:C4:64:93:7C:7C:DD:F5:91:50:40:CF:CF:78:89:F6:AA:7A:C4:4D
Certificate issuer:       /CN=6624A24FC6D51C1A5035DC8EDFFE7A2663699409
Certificate serial:       6F76F493D5C686E0FA2CFCB2A2B4E1E776CFF42E
Authority key identifier: 66:24:A2:4F:C6:D5:1C:1A:50:35:DC:8E:DF:FE:7A:26:63:69:94:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6624A24FC6D51C1A5035DC8EDFFE7A2663699409.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e34382e302f32312d3231203d3e20323632343933.roa
Signing time:             Mon 08 Apr 2024 20:10:40 +0000
ROA not before:           Mon 08 Apr 2024 20:05:40 +0000
ROA not after:            Mon 07 Apr 2025 20:10:40 +0000
asID:                     262493
IP address blocks:        177.8.48.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/6624A24FC6D51C1A5035DC8EDFFE7A2663699409.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/6624A24FC6D51C1A5035DC8EDFFE7A2663699409.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6624A24FC6D51C1A5035DC8EDFFE7A2663699409.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Jul 2024 12:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:76:f4:93:d5:c6:86:e0:fa:2c:fc:b2:a2:b4:e1:e7:76:cf:f4:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6624A24FC6D51C1A5035DC8EDFFE7A2663699409
        Validity
            Not Before: Apr  8 20:05:40 2024 GMT
            Not After : Apr  7 20:10:40 2025 GMT
        Subject: CN=EFC464937C7CDDF5915040CFCF7889F6AA7AC44D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:de:a7:29:31:bd:39:b3:36:45:45:36:26:ed:
                    f6:19:17:ab:78:06:42:31:e6:ec:a6:e5:29:0d:f4:
                    29:ea:1f:bb:b7:bf:8a:2e:ba:53:ab:bd:6e:93:6f:
                    95:09:40:90:ad:3e:cb:dd:70:9b:d9:25:cd:b9:8d:
                    ff:58:eb:02:4f:3a:d8:2b:c7:7d:0e:2f:04:69:44:
                    ae:ef:3a:6d:97:c3:60:6d:d7:73:9a:38:e7:71:0c:
                    90:92:01:b3:3b:c4:24:ff:b3:68:1a:d5:48:f1:94:
                    98:b4:4a:f6:bd:5b:50:e6:6d:8b:85:a8:c5:d2:09:
                    bf:b9:d5:71:cf:ea:ea:98:fa:a0:b9:31:09:38:f1:
                    fc:21:60:85:1b:a0:80:dd:d1:1f:c1:6c:d3:df:8e:
                    a0:92:88:ce:a0:d2:d4:7c:1a:a3:73:5d:10:f3:33:
                    02:5e:c1:9a:37:bc:0b:bb:cd:7e:7e:4f:0d:c7:10:
                    6e:31:ec:a6:25:c7:34:a3:98:2d:42:2e:f5:b4:fe:
                    8b:b4:c7:ec:45:32:c6:36:ba:02:54:bf:57:b4:2c:
                    80:20:65:4e:5c:dc:f5:5f:3e:6c:25:61:a6:ac:0b:
                    81:b9:39:06:87:35:c5:77:d3:52:c1:16:a3:27:45:
                    26:85:2e:22:54:1b:30:84:75:fd:d8:f4:50:bf:2f:
                    ce:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C4:64:93:7C:7C:DD:F5:91:50:40:CF:CF:78:89:F6:AA:7A:C4:4D
            X509v3 Authority Key Identifier:
                keyid:66:24:A2:4F:C6:D5:1C:1A:50:35:DC:8E:DF:FE:7A:26:63:69:94:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/6624A24FC6D51C1A5035DC8EDFFE7A2663699409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6624A24FC6D51C1A5035DC8EDFFE7A2663699409.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e34382e302f32312d3231203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         92:0c:ae:5a:d9:9d:e7:d0:d5:c5:fb:8c:25:1d:58:00:6e:dc:
         87:b2:3a:c9:6d:bc:58:dc:fb:67:ae:c9:21:f9:0d:49:71:ce:
         df:4f:37:68:f8:0a:c8:ab:89:d5:b2:31:b5:03:46:58:e7:32:
         7b:3e:47:96:75:92:a8:02:8f:c0:bc:59:5e:77:bd:98:85:46:
         ca:21:f0:b4:d8:0c:17:ac:1c:de:9e:14:a3:89:66:d1:8f:e3:
         c0:7b:40:38:d1:c5:72:4c:be:e1:ce:57:40:26:6a:e9:6b:4c:
         8f:94:f8:15:f6:0b:26:45:a0:b5:9a:11:90:d1:5b:d2:b1:3d:
         36:c0:89:2b:63:0b:5f:bb:43:2e:40:8f:9e:8c:ac:40:c3:75:
         fd:3d:6e:c6:87:e5:56:02:af:79:45:44:35:de:15:eb:28:a7:
         aa:d9:e3:38:21:d0:6c:78:c2:4f:f5:14:ef:34:3a:1f:f4:2f:
         e7:53:58:80:cc:93:4d:b2:53:44:52:75:5b:69:43:a3:2d:a2:
         97:9d:73:b6:b5:0d:e0:ea:d8:8c:ac:7c:67:7b:af:d8:7e:cb:
         b4:5b:17:92:7f:6e:ee:80:63:27:79:ba:01:0e:dc:b2:a7:72:
         04:d6:5e:1e:2e:a7:e5:61:36:b5:cb:66:2e:34:30:e1:fa:d8:
         2c:64:ef:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 12:28:32 2024 by rpki-client on console-fra.rpki-client.org