Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e35322e302f32342d3234203d3e20323632343933.roa
File:                     3137372e382e35322e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          fo5XdEFbxIWoAJbv6a7CKIzE8NYuExEaVbf35L8QnZ8=
Subject key identifier:   60:39:77:47:2B:70:4D:E1:71:C6:32:A1:2A:E8:60:40:B5:97:19:82
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       5F3012D8067FC36E8C61F0D056B3C196CB9B23F5
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e35322e302f32342d3234203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:36 +0000
ROA not before:           Thu 07 Nov 2024 20:49:36 +0000
ROA not after:            Thu 06 Nov 2025 20:54:36 +0000
asID:                     262493
IP address blocks:        177.8.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:30:12:d8:06:7f:c3:6e:8c:61:f0:d0:56:b3:c1:96:cb:9b:23:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:36 2024 GMT
            Not After : Nov  6 20:54:36 2025 GMT
        Subject: CN=603977472B704DE171C632A12AE86040B5971982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:da:00:de:ca:5b:d0:35:54:a0:07:d3:05:eb:
                    b7:5a:67:1c:a0:a2:ac:30:18:2a:28:14:60:32:28:
                    fc:08:34:4a:51:e7:b6:b5:08:19:dc:30:67:72:5f:
                    a0:9c:86:81:38:e3:b8:ac:91:e0:f1:ee:69:ea:a2:
                    a2:c5:ab:4b:22:c7:b9:58:2b:16:b6:c1:1f:84:86:
                    df:e7:73:52:70:3a:3e:df:76:f4:e2:d2:6d:6f:47:
                    3a:2e:7a:da:73:91:b6:f2:c7:4c:87:60:31:91:23:
                    3e:52:db:57:13:e0:29:ea:7b:55:4e:eb:d7:0a:f2:
                    ed:fd:56:19:38:40:5a:ae:47:a0:75:b4:21:28:54:
                    12:5e:0e:d4:87:e7:5d:be:99:8d:7b:b0:57:29:40:
                    98:a5:f1:13:34:35:d1:21:bc:5c:9a:5f:e4:cf:e0:
                    59:e2:0e:a7:9f:e8:bc:e1:d2:b5:55:4d:29:82:db:
                    45:e6:ed:35:c7:87:85:56:41:1d:26:1e:77:4b:e1:
                    2b:c4:cb:2a:81:a0:a4:0a:5c:d4:ae:4c:cf:bb:aa:
                    37:03:bb:68:1b:9f:db:a2:53:dd:49:c8:f2:f5:75:
                    b3:2e:0f:e7:ea:0e:9d:8a:9e:89:e6:e4:26:21:45:
                    88:02:af:b2:94:31:65:90:46:a1:08:3a:f6:ba:9c:
                    eb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:39:77:47:2B:70:4D:E1:71:C6:32:A1:2A:E8:60:40:B5:97:19:82
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e35322e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:c3:6d:65:02:f7:1b:94:83:50:ae:f5:a8:57:40:de:92:2d:
         6e:1e:ac:00:f4:b9:41:ae:23:f0:99:06:6e:07:b2:c8:be:63:
         48:df:ed:f8:71:ed:8e:dc:13:e4:a5:6c:0f:5c:69:4b:4e:0d:
         e5:9a:df:cf:b8:d6:3b:50:97:77:34:7d:32:2d:ed:cb:51:05:
         14:11:86:78:1f:14:70:b3:b8:31:c7:dd:91:72:7f:59:24:37:
         45:1a:ca:56:e0:0a:ec:f7:fa:87:17:3d:31:68:d1:55:e7:59:
         84:e0:9e:a4:9d:d0:62:ba:c0:8b:5a:a3:94:e5:7b:68:b4:88:
         44:61:c2:a3:1f:eb:6a:91:b4:4d:4e:cc:9e:61:a3:b6:75:48:
         7d:fb:9b:26:a6:64:0e:19:c8:1a:97:aa:c4:42:b1:59:ad:25:
         cd:84:06:fd:33:86:67:48:f7:fe:0b:3f:3e:b9:b3:3f:5e:71:
         8a:49:d9:93:e0:71:73:c6:9e:82:87:53:62:5d:ea:0c:92:6b:
         ea:32:c0:c0:75:f9:37:e4:22:3c:ae:ed:9f:74:8a:20:ca:5a:
         d7:0f:ff:1d:24:9f:03:33:f2:41:64:f0:fa:ac:71:8f:eb:9a:
         b9:02:c9:85:2f:aa:5e:7a:a4:7a:dc:d2:e2:c4:47:f5:de:06:
         62:7e:a3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:31 2024 by rpki-client on console-fra.rpki-client.org