Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e35352e302f32342d3234203d3e20323632343933.roa
File:                     3137372e382e35352e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          zDyPBVSNJp+wp1tQWc0OTRC/rxIL60AqaPaffBbE63o=
Subject key identifier:   BE:24:E2:1E:AF:59:31:64:92:92:04:A9:14:7E:93:10:C7:47:3C:98
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       52BDD9B16E651395EE376310CB61FDC7376A2DF3
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e35352e302f32342d3234203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:37 +0000
ROA not before:           Thu 07 Nov 2024 20:49:37 +0000
ROA not after:            Thu 06 Nov 2025 20:54:37 +0000
asID:                     262493
IP address blocks:        177.8.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:bd:d9:b1:6e:65:13:95:ee:37:63:10:cb:61:fd:c7:37:6a:2d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:37 2024 GMT
            Not After : Nov  6 20:54:37 2025 GMT
        Subject: CN=BE24E21EAF593164929204A9147E9310C7473C98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:86:fa:57:93:6f:98:38:47:52:99:9c:8d:8f:
                    54:3f:4a:0c:76:da:1f:97:79:ff:9a:a5:77:1f:d6:
                    36:5c:2a:2c:90:ad:e2:12:f3:fa:a6:bc:14:d0:a0:
                    54:55:3e:cf:20:a4:d4:40:80:b1:ac:eb:54:67:6c:
                    d6:60:fc:6f:29:9d:b1:a0:2c:8c:62:43:d3:48:96:
                    4d:30:16:64:2d:60:64:46:2f:3f:e3:fe:83:89:17:
                    fb:d2:af:9d:e2:e5:43:da:02:3a:bd:c6:b8:8c:98:
                    95:a4:86:83:c0:a1:51:cb:58:13:66:67:5b:6b:f7:
                    85:5d:89:0f:d7:b1:77:19:2d:ef:ec:05:59:84:47:
                    6f:7a:05:e9:19:bb:95:90:a2:1f:e4:fd:ba:2d:83:
                    6e:f9:34:f6:d2:af:74:d7:1c:9c:43:e4:7d:ce:e7:
                    38:12:86:91:8e:bf:4e:f4:44:c6:25:82:bf:e1:a3:
                    89:f5:28:4c:28:69:37:58:62:b9:c9:75:a1:5c:8a:
                    a3:7a:7e:99:95:2c:eb:d4:40:39:88:ca:f6:26:de:
                    33:00:e5:55:69:a2:3c:77:4b:6b:1d:21:9d:87:5b:
                    e1:7e:cb:39:fd:e4:ef:81:b1:f1:a9:97:33:20:15:
                    ed:65:a9:34:36:61:05:a9:cb:0d:81:e9:36:4a:70:
                    f0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:24:E2:1E:AF:59:31:64:92:92:04:A9:14:7E:93:10:C7:47:3C:98
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e35352e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:39:0e:30:7f:f6:4c:be:91:2c:c5:d9:f8:6e:6d:bb:17:29:
         1c:e5:4b:9c:1e:6d:51:55:24:2b:5d:4c:ae:20:18:2f:87:89:
         18:08:c9:f5:4a:27:ef:96:ec:9e:2a:ef:5a:84:f5:61:f6:e2:
         63:f7:b7:b0:fb:b7:08:61:42:1e:58:b0:ce:a0:a6:9e:76:95:
         59:af:73:f0:5d:f5:c2:4a:f1:42:4f:b2:2a:ea:c7:92:0c:60:
         09:38:f1:70:16:1f:ad:02:86:97:0a:b2:0d:0a:cb:ea:24:b3:
         bf:39:b5:85:ad:51:66:49:6b:2c:be:7e:b8:a8:55:22:4f:ff:
         6a:be:e4:63:ab:08:6a:d8:7e:4d:1d:a3:a5:61:38:63:63:b9:
         a2:54:6e:7f:4c:b4:8d:59:ea:24:1d:be:e7:c1:19:d3:7c:83:
         2c:4d:7a:72:ac:73:5d:c9:8b:3b:58:93:8d:b5:7c:5a:d5:0a:
         cf:42:23:d1:b5:4d:71:44:71:dc:a3:66:3b:c6:73:a7:68:8e:
         37:65:f1:e7:10:6a:6e:85:48:f6:40:74:49:a3:6d:33:db:30:
         0d:4f:f8:b1:86:25:54:21:b7:25:69:a9:02:b6:16:8f:e7:64:
         45:7d:70:45:34:dc:64:5f:49:2e:89:dc:89:e5:0d:41:12:15:
         c9:d4:75:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:31 2024 by rpki-client on console-fra.rpki-client.org