Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e35302e302f32342d3234203d3e20323632343933.roa
File:                     3137372e382e35302e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          PMXtM+SLuvKvhTEVYY2bwCZWsp+imTCgof2jpHVRtgI=
Subject key identifier:   56:72:25:D7:23:2A:1D:6F:42:EC:37:86:EC:8A:ED:30:F7:7D:D4:9B
Certificate issuer:       /CN=0B641968F54E16F4A6E72B1F243A760255821D7E
Certificate serial:       3A6D29C678F1571D5E11FF2B34E2B38D0DD0F44A
Authority key identifier: 0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e35302e302f32342d3234203d3e20323632343933.roa
Signing time:             Mon 09 Sep 2024 15:04:52 +0000
ROA not before:           Mon 09 Sep 2024 14:59:52 +0000
ROA not after:            Mon 08 Sep 2025 15:04:52 +0000
asID:                     262493
IP address blocks:        177.8.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Oct 2024 13:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:6d:29:c6:78:f1:57:1d:5e:11:ff:2b:34:e2:b3:8d:0d:d0:f4:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Validity
            Not Before: Sep  9 14:59:52 2024 GMT
            Not After : Sep  8 15:04:52 2025 GMT
        Subject: CN=567225D7232A1D6F42EC3786EC8AED30F77DD49B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:05:f0:78:c5:ec:7a:4f:e8:5f:e2:0c:da:f3:
                    ef:a8:b6:04:e0:26:c4:e9:2b:49:4b:6c:9d:8a:5d:
                    e4:4e:56:f5:c3:4e:ac:7a:e2:79:21:8c:c0:6c:4c:
                    d9:08:11:f5:e9:c7:d9:07:8d:58:88:92:c7:13:b4:
                    36:50:ff:4c:0a:a2:f9:84:d3:1f:7a:d9:c1:c3:c8:
                    cd:cc:cf:7e:bf:21:a4:9d:36:89:49:9d:35:f0:84:
                    01:27:73:93:69:b8:db:9a:93:7e:3e:f3:13:46:3b:
                    68:4a:0b:2f:6f:5e:46:82:a4:4b:7d:96:43:dc:7c:
                    72:e4:f1:88:f3:bd:6b:73:2e:43:9d:f6:8e:e3:7f:
                    00:f4:ad:68:d4:6f:96:c0:8d:b3:72:4e:4f:71:4d:
                    99:b1:01:7d:4d:66:5d:e0:e7:f7:ee:97:a1:d9:3e:
                    4f:bb:e6:93:0b:1e:46:e5:09:9c:92:e6:0c:01:62:
                    b9:8b:8e:15:5a:2d:e3:60:80:5d:f9:69:0e:ec:3a:
                    ff:5b:09:5a:b7:49:75:98:59:95:ea:0c:02:8f:9b:
                    04:02:88:e0:34:55:c7:59:8f:13:98:dd:4d:77:2f:
                    6f:c7:83:af:4b:8c:74:c7:15:a7:c8:9e:0f:47:4b:
                    3e:b6:39:3c:f2:67:aa:0b:8d:4c:29:c1:a2:78:b7:
                    47:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:72:25:D7:23:2A:1D:6F:42:EC:37:86:EC:8A:ED:30:F7:7D:D4:9B
            X509v3 Authority Key Identifier:
                keyid:0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e35302e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:d7:c6:ec:94:ab:33:dc:8a:a9:55:0a:1c:b4:57:4e:2b:11:
         89:40:2c:71:5c:11:e6:b9:8a:8a:77:b3:c5:1c:b9:66:5f:39:
         9a:71:33:9f:e4:2a:ec:37:d3:4f:18:84:c1:9d:35:45:17:bb:
         8a:f9:75:f8:77:ae:23:66:a8:49:a5:49:8a:c6:7a:f5:16:02:
         5f:2d:a5:b2:08:de:98:ca:e8:df:91:f7:01:39:ce:97:30:f0:
         43:96:0a:5f:40:b1:8d:cd:0e:40:6f:c8:34:46:e6:a6:92:53:
         f2:e1:91:14:a3:89:7d:3b:40:86:8f:e1:d7:c7:64:c1:82:ab:
         f9:4a:73:d5:21:ed:6a:8e:69:ec:70:c4:52:02:e1:2b:ae:77:
         90:06:49:84:16:80:3b:ef:04:b7:61:da:ee:a3:67:7e:c2:2a:
         f4:c5:84:f7:b7:c7:ed:7d:74:d2:14:d6:9b:38:5b:0e:24:ef:
         4f:24:55:f0:d5:78:36:f3:53:83:63:06:d1:f8:09:99:a5:ed:
         f0:1d:20:e3:79:e3:dc:7d:a5:c1:b8:5c:a2:89:2e:55:33:eb:
         26:cb:45:d2:99:fa:91:5d:97:20:41:c2:52:ed:35:d2:ab:2d:
         5f:5a:3c:99:b9:85:94:7c:79:5e:60:5a:1e:3d:45:e8:3a:dc:
         e9:b7:ed:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 13:55:32 2024 by rpki-client on console-ams.rpki-client.org