Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e35322e302f32322d3232203d3e20323632343933.roa
File:                     3137372e382e35322e302f32322d3232203d3e20323632343933.roa (raw, json)
Hash identifier:          OtBm17bBJWaxYR1W5JFMBWKYtmi+0IGQQns21j2fgPc=
Subject key identifier:   51:6D:20:71:29:B4:52:45:98:24:C1:D6:11:66:FC:93:65:A3:0A:DC
Certificate issuer:       /CN=0B641968F54E16F4A6E72B1F243A760255821D7E
Certificate serial:       533036809E53BF3BF5CC3429094191B45AA208BE
Authority key identifier: 0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e35322e302f32322d3232203d3e20323632343933.roa
Signing time:             Mon 09 Sep 2024 15:04:54 +0000
ROA not before:           Mon 09 Sep 2024 14:59:54 +0000
ROA not after:            Mon 08 Sep 2025 15:04:54 +0000
asID:                     262493
IP address blocks:        177.8.52.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Oct 2024 13:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:30:36:80:9e:53:bf:3b:f5:cc:34:29:09:41:91:b4:5a:a2:08:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Validity
            Not Before: Sep  9 14:59:54 2024 GMT
            Not After : Sep  8 15:04:54 2025 GMT
        Subject: CN=516D207129B452459824C1D61166FC9365A30ADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:eb:1b:f6:5c:f3:d2:33:cb:b1:5c:30:cd:be:
                    5a:fb:88:b7:e3:87:bd:72:f9:f7:6f:ca:31:e6:c9:
                    c7:be:3a:a3:dd:0c:12:34:cb:bb:cf:32:ed:3a:02:
                    c4:af:ab:b6:c0:b1:9a:36:73:0e:8b:08:ce:d8:6b:
                    29:6c:6e:5a:ef:39:eb:50:98:6a:d1:90:f2:f7:f0:
                    73:11:66:1d:5a:36:74:16:8c:b3:f5:c5:1d:a8:29:
                    70:f6:eb:ac:9a:f4:2e:0b:4b:ba:94:7a:28:fe:20:
                    87:b4:5d:cc:b3:70:6d:51:38:f8:89:45:4e:fb:f7:
                    85:a5:3d:97:62:e9:6b:74:89:c1:ed:43:96:a8:2f:
                    55:27:be:42:3b:62:d0:78:34:a2:8c:79:a3:b3:48:
                    06:4e:96:68:eb:16:5c:15:e6:9c:64:b6:1d:38:63:
                    12:fd:c5:00:1b:95:64:8a:8e:b3:b7:9d:bb:95:4b:
                    46:49:a1:ea:a7:35:79:a5:1d:e3:51:79:2c:ef:b6:
                    62:d1:7f:30:9b:d0:30:71:41:ad:14:d8:31:5a:02:
                    80:81:04:b5:10:c5:84:e7:c7:f4:90:e6:c3:49:33:
                    aa:0d:d7:55:ca:f0:a8:47:b8:b1:f7:6c:c2:72:c9:
                    29:bf:28:b8:5d:1f:17:49:d9:50:03:c7:2b:e6:0e:
                    27:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6D:20:71:29:B4:52:45:98:24:C1:D6:11:66:FC:93:65:A3:0A:DC
            X509v3 Authority Key Identifier:
                keyid:0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e35322e302f32322d3232203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:2e:27:5d:bf:f0:bc:d2:2d:6a:d9:0c:51:b5:e0:8c:e2:f5:
         22:73:f4:2b:4c:da:64:30:6e:8c:fd:d3:da:be:d6:fa:d3:9a:
         39:91:11:32:52:08:30:f8:87:60:93:74:67:5c:a7:fd:32:dc:
         bb:59:10:c8:80:f4:47:97:39:d6:3f:77:70:e3:ee:b7:26:c9:
         15:6a:5e:11:82:2a:02:68:4b:9a:a0:4b:a6:75:16:14:6f:f7:
         0e:ef:8b:f6:11:54:8f:25:6d:03:79:3b:1c:ee:3f:6d:6a:c1:
         63:2f:a1:6e:1c:0d:cf:15:84:ae:1d:fd:d1:58:6c:1e:0a:47:
         21:f1:71:15:94:30:cb:48:87:32:7b:e5:92:4b:ef:79:f6:98:
         16:d1:fd:e2:ae:cc:0c:4f:7d:6d:8b:dd:ea:77:60:ce:78:4a:
         ff:aa:d9:60:7d:24:0e:ae:15:67:8c:fa:43:b7:3c:17:86:ac:
         4f:7f:d7:a8:8d:a4:cb:fb:be:eb:3e:d3:e2:2c:6c:fd:fe:4c:
         a4:cd:90:c6:93:51:d5:7c:2e:2c:69:13:72:18:53:04:c2:84:
         7d:f0:2b:6c:85:3d:56:6c:5f:ee:3a:02:d9:bf:c4:d3:28:41:
         a7:50:91:ee:f4:1c:a4:6f:cd:44:40:ee:1c:01:d0:b3:37:ba:
         d3:56:d6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 13:55:32 2024 by rpki-client on console-ams.rpki-client.org