Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e35342e302f32342d3234203d3e20323632343933.roa
File:                     3137372e382e35342e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          KekhWNVXuqLeU9YCXaHAsFhcnaeo3d+QmmP18V4n3VA=
Subject key identifier:   55:0C:72:FA:6F:92:4A:CB:E6:2D:71:F7:0F:1F:2E:A0:C8:9B:D5:32
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       66FE9928DA9DA45FC6883D8C15D8D2B6587BCFEA
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e35342e302f32342d3234203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:38 +0000
ROA not before:           Thu 07 Nov 2024 20:49:38 +0000
ROA not after:            Thu 06 Nov 2025 20:54:38 +0000
asID:                     262493
IP address blocks:        177.8.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:fe:99:28:da:9d:a4:5f:c6:88:3d:8c:15:d8:d2:b6:58:7b:cf:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:38 2024 GMT
            Not After : Nov  6 20:54:38 2025 GMT
        Subject: CN=550C72FA6F924ACBE62D71F70F1F2EA0C89BD532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5c:25:fa:f2:ec:32:4d:38:47:94:40:95:cb:
                    6a:54:94:cc:7e:9d:18:bd:1f:b3:fb:55:e5:9b:fe:
                    95:5e:d1:a5:93:31:69:fd:a4:c5:10:64:73:76:da:
                    7f:87:b4:36:3b:cf:4a:b6:04:df:eb:f4:c9:34:66:
                    31:32:ad:c2:f0:02:2b:9d:ba:1b:26:4d:c9:61:8c:
                    63:16:8f:54:45:ae:82:3e:c7:72:40:17:93:67:95:
                    74:7d:ba:1b:64:7f:fb:c6:25:94:16:bc:dd:12:ec:
                    9a:0d:e5:6e:1d:8a:17:3e:74:44:e2:30:60:c6:6d:
                    7c:23:ba:6a:85:bb:d5:35:b5:e3:a3:13:1e:02:d6:
                    de:83:9d:31:9a:76:00:81:d6:9c:3e:7c:1f:06:d9:
                    13:63:2c:00:d3:a4:64:c9:8d:d6:2d:2b:c2:50:63:
                    56:3f:c4:06:33:38:62:67:f6:2e:20:c2:c0:67:6b:
                    90:52:00:dd:7c:d0:58:f6:de:15:5f:ef:a1:ac:43:
                    d6:22:d3:6e:16:98:a6:3a:b6:26:4d:b2:6f:dc:ca:
                    da:19:a9:a7:5a:c7:eb:ea:90:60:5f:b3:72:2c:c0:
                    ce:cb:2a:df:3c:08:b5:8c:9e:64:ae:fa:04:5e:2a:
                    e6:74:0e:f9:b0:fc:2b:21:2c:27:f6:be:1f:a6:bb:
                    07:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0C:72:FA:6F:92:4A:CB:E6:2D:71:F7:0F:1F:2E:A0:C8:9B:D5:32
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e35342e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:b3:2f:f1:0e:10:b8:a6:db:e3:55:9f:15:91:6a:30:cf:bb:
         6a:8b:c9:18:56:d9:44:a4:d6:38:fb:3e:65:7d:9a:3a:0b:c1:
         1f:92:a4:c0:b1:f1:41:2c:a5:94:f7:84:03:6b:d2:0a:ae:e0:
         8e:28:08:6f:99:67:8c:66:d9:58:c2:d7:21:1b:70:96:9f:22:
         4d:5f:dd:aa:09:ea:1e:73:cc:3d:65:b4:b1:de:e7:da:85:2a:
         c8:9d:e0:b7:39:70:ed:4f:ba:72:87:e7:3a:74:98:90:1f:b2:
         0f:b9:09:f7:9c:49:c2:75:fb:fc:74:5a:9a:a1:52:61:ef:29:
         3f:8d:15:59:43:d0:0c:d7:20:75:c0:40:52:cc:46:12:da:1e:
         69:b1:94:6c:d0:aa:19:15:86:00:5c:7f:76:34:18:77:51:64:
         f6:cd:71:ee:e4:2a:20:1b:38:0b:b3:ef:8e:73:99:55:e6:06:
         8e:c2:97:bd:b6:2b:ca:14:7d:80:35:5c:23:3e:b2:03:3b:c6:
         a5:bd:cb:f9:a1:ee:26:e2:b0:c1:34:75:66:db:4e:31:6e:ca:
         e0:e5:07:f9:16:4a:4c:c3:76:78:7d:80:5c:7d:70:96:f5:f3:
         37:de:9c:dc:9b:95:40:48:49:f1:69:7c:27:90:ed:41:0c:94:
         49:fb:ac:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org