Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e35332e302f32342d3234203d3e20323632343933.roa
File:                     3137372e382e35332e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          oBquyWvWbqJmxv+8tB2G4zsGFAhRSCl0uF2hrFku3ew=
Subject key identifier:   BB:38:BA:28:94:2F:37:22:32:C4:91:DD:74:98:EB:7E:23:B0:C5:B1
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       47241334F55D7F382B60C710FAA482B0BA879177
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e35332e302f32342d3234203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:40 +0000
ROA not before:           Thu 07 Nov 2024 20:49:40 +0000
ROA not after:            Thu 06 Nov 2025 20:54:40 +0000
asID:                     262493
IP address blocks:        177.8.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:24:13:34:f5:5d:7f:38:2b:60:c7:10:fa:a4:82:b0:ba:87:91:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:40 2024 GMT
            Not After : Nov  6 20:54:40 2025 GMT
        Subject: CN=BB38BA28942F372232C491DD7498EB7E23B0C5B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:72:c7:ef:5c:32:09:29:e4:48:64:80:7f:e9:
                    db:54:4b:c4:37:d8:f0:a2:8f:85:95:41:dd:e9:d4:
                    74:1c:82:99:d3:65:1a:cf:db:63:81:72:7c:47:95:
                    52:40:dd:9d:d3:96:09:68:2b:3d:3d:7d:cc:d1:2c:
                    81:ad:b7:75:1e:8f:4a:e9:c8:f6:c5:76:aa:3c:3c:
                    3d:4a:69:8b:a7:38:ad:44:e8:e8:38:55:69:b5:3a:
                    6b:5e:b1:32:8e:ce:89:cd:d5:f9:bf:e9:a3:c3:0f:
                    92:2e:2b:0a:e2:01:ad:be:8b:1e:0e:7f:0e:b7:d7:
                    8a:a8:b9:2e:c3:05:b6:dc:79:79:fd:b4:ba:18:d6:
                    02:3b:eb:a1:a4:f8:b3:a9:89:74:b3:a8:7d:d9:13:
                    1d:c3:97:35:90:33:9b:cb:26:f1:5d:8d:69:27:9a:
                    f2:e1:7b:7c:07:57:63:91:79:a3:36:00:1b:e5:bb:
                    6d:7d:d2:04:6e:c4:8d:42:7d:b6:81:70:25:2b:6b:
                    19:54:06:60:32:57:a8:be:76:d4:f1:64:39:56:b6:
                    88:2c:03:05:30:f6:c9:ce:a3:f4:e4:e7:e9:6a:6a:
                    5f:21:93:10:0d:77:dc:03:60:fc:e5:95:c3:21:3c:
                    96:f8:a0:e9:10:bb:0b:e8:b1:2b:0f:3d:a2:c7:3c:
                    df:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:38:BA:28:94:2F:37:22:32:C4:91:DD:74:98:EB:7E:23:B0:C5:B1
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e35332e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:7d:03:e8:5a:3d:4d:7d:bc:a6:35:c0:1d:96:39:06:3d:8f:
         7e:8a:a6:8b:fb:a2:49:85:90:cc:8f:de:6b:50:b0:39:b6:ba:
         b8:fe:20:35:94:7a:6d:1c:86:51:00:60:82:7b:c0:20:08:a0:
         ce:31:29:9b:d8:79:0d:ca:df:62:50:80:32:46:25:1a:0d:71:
         2a:b0:85:be:28:ec:b7:ef:85:27:d3:87:27:7b:a7:f5:00:34:
         75:90:82:ef:7b:ae:6e:31:21:48:f4:b8:85:bf:59:db:d5:01:
         8f:0f:f5:e9:31:99:05:33:fd:58:ba:d2:d7:37:1c:40:ef:76:
         7f:62:3e:a5:5f:00:e0:50:1e:65:44:b5:23:66:09:0d:c0:7c:
         c3:ee:14:c2:60:87:88:8d:4b:bd:6d:18:58:d8:cf:e9:d4:37:
         84:2e:b8:25:fd:93:95:76:ec:1b:32:4a:b1:d9:ea:58:97:ad:
         04:46:34:8c:b7:3e:48:63:24:06:3b:45:bc:8d:18:01:62:20:
         aa:c7:03:6c:d3:b6:61:25:09:e2:9c:5b:8f:ab:dd:96:71:92:
         45:bf:a2:18:df:b5:70:1a:df:6c:96:e3:83:bf:38:75:dc:02:
         87:cd:22:87:9e:d5:bf:ab:5d:5a:ab:b1:ca:10:0a:6d:e6:66:
         6f:78:79:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:31 2024 by rpki-client on console-fra.rpki-client.org