Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e35312e302f32342d3234203d3e20323632343933.roa
File:                     3137372e382e35312e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          Woh0kM71c6qsjAITQ0ZEkGZGPEQ1HacP0BzGbd415h8=
Subject key identifier:   45:9E:64:71:86:36:96:77:09:8E:0D:07:EC:62:5C:E3:85:43:3A:A3
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       19C5740B0C76CCA5ACDFD388CB755ACEBBB7C7FF
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e35312e302f32342d3234203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:39 +0000
ROA not before:           Thu 07 Nov 2024 20:49:39 +0000
ROA not after:            Thu 06 Nov 2025 20:54:39 +0000
asID:                     262493
IP address blocks:        177.8.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c5:74:0b:0c:76:cc:a5:ac:df:d3:88:cb:75:5a:ce:bb:b7:c7:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:39 2024 GMT
            Not After : Nov  6 20:54:39 2025 GMT
        Subject: CN=459E647186369677098E0D07EC625CE385433AA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a6:c9:2a:00:9e:29:d2:43:11:d0:32:cf:67:
                    f8:09:49:2f:cc:a4:7e:02:56:0f:fd:bc:3f:73:e8:
                    79:61:13:55:b7:76:0c:73:98:91:b7:fb:3b:3e:5e:
                    12:ed:01:be:4b:60:f7:f0:c2:08:2d:1d:bf:82:eb:
                    84:88:20:80:b4:fb:70:23:e7:5b:53:ca:e1:ff:d8:
                    39:33:88:b3:cb:2c:8d:18:5a:c1:dc:6c:65:9b:b4:
                    89:cb:41:d1:24:6f:7b:07:c2:71:60:1e:f0:97:21:
                    4f:7d:25:ff:e9:32:c1:20:31:11:81:43:07:06:23:
                    79:98:a6:6c:d7:ff:79:58:b0:2c:31:d8:2f:79:15:
                    84:32:d4:bd:7e:35:63:31:ec:62:55:4f:4b:c7:3a:
                    4f:93:59:d2:66:75:fa:73:8b:03:6c:78:92:d0:b8:
                    0a:00:68:b4:0e:96:b6:08:a2:8e:fb:85:ae:a7:ac:
                    7c:15:bd:95:3c:33:83:ab:dc:54:23:04:0e:e1:1b:
                    fa:62:ce:20:2e:b9:9c:87:9c:28:64:44:f2:f6:31:
                    01:a4:ef:90:2e:92:eb:c0:d5:3a:2b:da:39:17:85:
                    23:c0:9e:25:5a:ff:77:d0:2f:b9:04:70:a8:17:3b:
                    91:b7:f1:32:79:92:eb:b3:ad:31:01:d5:cd:44:4a:
                    c4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9E:64:71:86:36:96:77:09:8E:0D:07:EC:62:5C:E3:85:43:3A:A3
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e35312e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:9b:e4:44:23:85:05:11:6a:0b:f9:53:df:1c:a1:14:06:77:
         ef:ac:6a:bd:26:91:be:c0:c0:ed:77:5e:9b:ec:b4:90:17:d2:
         b1:08:d4:a9:3c:0c:88:d9:96:03:e5:f0:cf:6e:f4:4d:91:09:
         64:38:1e:e6:dc:fb:6d:b7:9a:41:42:96:2d:df:71:4e:61:08:
         ea:4d:40:bd:c6:9d:34:5a:95:70:88:cb:e1:c9:7c:6e:33:a4:
         96:5b:e3:e5:d1:a6:16:dd:93:73:75:df:8f:f8:4c:52:da:4e:
         3e:61:7b:f8:b4:12:7f:c5:5d:1e:1a:e2:49:24:0e:fc:1e:0d:
         6f:52:2a:92:a3:13:06:d5:20:41:43:38:f4:9d:5e:54:6a:b5:
         f8:01:42:53:99:bb:21:18:d7:ee:cf:6c:68:81:6b:87:dc:c1:
         98:f5:5c:3b:5d:49:51:9a:09:e3:a6:2a:9a:b2:85:61:24:39:
         16:2d:68:17:63:24:a9:56:d2:4e:82:ab:61:f1:2c:c5:1f:5a:
         d6:ee:11:19:8e:03:be:32:86:f7:b1:5b:70:9e:d7:cd:28:6a:
         fd:94:41:39:ec:09:c9:b1:f6:d8:94:e7:19:9c:6e:d7:fc:16:
         a1:c9:ee:12:47:60:66:bc:ef:e7:63:8b:6c:17:6a:57:19:92:
         65:ec:1b:19
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUGcV0Cwx2zKWs39OIy3Vazru3x/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU0MzYzRTIxRjE5RkIzNTdDM0ZGNkI5NURCRThBOTE2
QTIzRUJDRjAeFw0yNDExMDcyMDQ5MzlaFw0yNTExMDYyMDU0MzlaMDMxMTAvBgNV
BAMTKDQ1OUU2NDcxODYzNjk2NzcwOThFMEQwN0VDNjI1Q0UzODU0MzNBQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZpskqAJ4p0kMR0DLPZ/gJSS/M
pH4CVg/9vD9z6HlhE1W3dgxzmJG3+zs+XhLtAb5LYPfwwggtHb+C64SIIIC0+3Aj
51tTyuH/2DkziLPLLI0YWsHcbGWbtInLQdEkb3sHwnFgHvCXIU99Jf/pMsEgMRGB
QwcGI3mYpmzX/3lYsCwx2C95FYQy1L1+NWMx7GJVT0vHOk+TWdJmdfpziwNseJLQ
uAoAaLQOlrYIoo77ha6nrHwVvZU8M4Or3FQjBA7hG/piziAuuZyHnChkRPL2MQGk
75AukuvA1Tor2jkXhSPAniVa/3fQL7kEcKgXO5G38TJ5kuuzrTEB1c1ESsT9AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQURZ5kcYY2lncJjg0H7GJc44VDOqMwHwYDVR0j
BBgwFoAULkNj4h8Z+zV8P/a5Xb6KkWoj688wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRU1QM3htYjVNU1ZnYW1ySml6c0IzYlBSOXdjTURpOVJuZHJ2cFloaHNR
ZDQvMC8yRTQzNjNFMjFGMTlGQjM1N0MzRkY2Qjk1REJFOEE5MTZBMjNFQkNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFNDM2M0UyMUYxOUZCMzU3
QzNGRjZCOTVEQkU4QTkxNkEyM0VCQ0YuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VNUDN4bWI1TVNWZ2FtckppenNCM2JQUjl3Y01EaTlSbmRydnBZaGhzUWQ0LzAv
MzEzNzM3MmUzODJlMzUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjM0
MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALEIMzANBgkqhkiG9w0BAQsFAAOCAQEAwZvkRCOFBRFq
C/lT3xyhFAZ376xqvSaRvsDA7Xdem+y0kBfSsQjUqTwMiNmWA+Xwz270TZEJZDge
5tz7bbeaQUKWLd9xTmEI6k1AvcadNFqVcIjL4cl8bjOkllvj5dGmFt2Tc3Xfj/hM
UtpOPmF7+LQSf8VdHhriSSQO/B4Nb1IqkqMTBtUgQUM49J1eVGq1+AFCU5m7IRjX
7s9saIFrh9zBmPVcO11JUZoJ46YqmrKFYSQ5Fi1oF2MkqVbSToKrYfEsxR9a1u4R
GY4DvjKG97FbcJ7XzShq/ZRBOewJybH22JTnGZxu1/wWocnuEkdgZrzv52OLbBdq
VxmSZewbGQ==
-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:43 2024 by rpki-client on console-fra.rpki-client.org