Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e34382e302f32332d3233203d3e20323632343933.roa
File:                     3137372e382e34382e302f32332d3233203d3e20323632343933.roa (raw, json)
Hash identifier:          ECWbPL5jGEbBfTfwaYbit+fB25jRqxn/WeOAGY+JjP0=
Subject key identifier:   37:24:D7:CF:F3:5A:78:44:EF:4E:79:71:19:85:90:7E:B7:27:B9:83
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       3FBF18281365162F056EDBDF91FE96C46E6F8F4F
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e34382e302f32332d3233203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:37 +0000
ROA not before:           Thu 07 Nov 2024 20:49:37 +0000
ROA not after:            Thu 06 Nov 2025 20:54:37 +0000
asID:                     262493
IP address blocks:        177.8.48.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:bf:18:28:13:65:16:2f:05:6e:db:df:91:fe:96:c4:6e:6f:8f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:37 2024 GMT
            Not After : Nov  6 20:54:37 2025 GMT
        Subject: CN=3724D7CFF35A7844EF4E79711985907EB727B983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:91:57:e5:3f:93:34:65:64:fd:e6:1c:b7:04:
                    0c:22:44:95:be:8e:bb:df:7b:10:7b:f9:29:5d:6e:
                    e0:4d:36:13:45:e2:fe:02:85:16:7a:55:fa:ff:d6:
                    db:bd:47:79:2e:62:d1:cb:7b:91:ab:d3:1c:e5:97:
                    03:45:ac:17:06:e4:41:e5:25:17:d2:bd:ec:28:2e:
                    f8:3b:88:e0:b1:e9:f0:f9:0f:ee:7b:89:45:99:37:
                    0b:c8:56:3f:f9:64:ec:c3:a7:c0:0e:4e:6e:c1:89:
                    54:9d:79:fc:5b:be:df:20:db:05:41:eb:ff:e4:97:
                    e4:f2:30:c1:d8:40:52:64:80:ac:56:32:a2:9a:06:
                    6d:b5:4b:a8:47:b6:1e:a7:01:70:d6:f3:d4:8a:5d:
                    05:08:14:5a:73:f1:2b:18:a5:c2:c4:3c:46:5f:08:
                    ad:91:5f:68:5f:d4:ad:b2:48:79:96:5d:70:86:a3:
                    34:35:c6:00:13:6b:04:ce:65:cd:fd:18:0d:36:8a:
                    12:fa:cd:32:75:b3:4c:39:c7:24:a0:12:af:bb:b7:
                    35:db:af:42:e9:3d:ee:4d:8f:c0:c6:3b:16:fc:7d:
                    6a:e9:2c:4e:a3:99:23:53:a6:a4:ba:73:a6:0d:27:
                    4f:6b:a8:5e:28:94:7d:29:7d:85:fe:fd:17:d4:28:
                    db:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:24:D7:CF:F3:5A:78:44:EF:4E:79:71:19:85:90:7E:B7:27:B9:83
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e34382e302f32332d3233203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:a8:8a:2e:ad:a7:31:10:28:03:29:c7:69:94:c7:38:cb:5f:
         34:b0:76:e9:88:b4:da:f4:8c:87:9f:49:b1:0f:ba:9c:4e:4d:
         32:d8:27:f9:7f:9b:90:3b:92:1f:60:f0:26:42:1e:d8:ac:5a:
         c8:09:bc:f1:11:f6:c9:3f:23:75:d5:4a:8e:25:29:2d:36:ef:
         7b:8b:1c:91:d0:88:55:59:60:04:e3:02:bc:17:3d:72:68:70:
         04:fe:9c:cd:22:90:ad:4a:1b:8a:fe:75:e8:4d:13:21:ed:ae:
         cb:61:23:36:9f:f5:49:db:cf:1b:b9:45:cc:b8:3e:f2:ff:6b:
         5b:6a:fd:d2:fa:7b:98:b2:34:c9:2e:61:f7:87:b8:e1:1d:95:
         8e:2b:a4:5c:e6:50:c1:c7:e5:d6:7e:bc:14:69:9b:8f:b2:b2:
         36:f9:af:b3:06:d9:bd:5b:a4:4e:76:47:e5:90:62:4c:bc:21:
         f0:ae:7c:97:ed:11:41:30:5f:d4:a8:93:f2:40:4a:3d:1a:fb:
         72:2f:f9:9a:76:21:44:9f:fb:53:d5:bd:38:e7:7c:9d:e4:f0:
         d7:10:70:76:67:b3:5f:2d:c2:f6:e6:9b:47:67:73:90:c0:1a:
         2c:04:07:8c:e0:6b:67:52:bf:4a:ab:db:86:72:e4:b4:86:8d:
         d5:b4:c0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org