Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3133382e3235352e3231362e302f32322d3232203d3e20323632343933.roa
File:                     3133382e3235352e3231362e302f32322d3232203d3e20323632343933.roa (raw, json)
Hash identifier:          y1g8W9fV/1etONAlia9ck092mo74INRNQsDCngDVXKU=
Subject key identifier:   17:E7:DD:E5:64:A5:F9:E0:37:9F:27:58:53:36:D9:17:90:BC:0C:9C
Certificate issuer:       /CN=0B641968F54E16F4A6E72B1F243A760255821D7E
Certificate serial:       06DF9FCCD7BB921E0B07810D1D34E34786EED21F
Authority key identifier: 0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3133382e3235352e3231362e302f32322d3232203d3e20323632343933.roa
Signing time:             Mon 09 Sep 2024 15:04:52 +0000
ROA not before:           Mon 09 Sep 2024 14:59:52 +0000
ROA not after:            Mon 08 Sep 2025 15:04:52 +0000
asID:                     262493
IP address blocks:        138.255.216.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Oct 2024 13:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:df:9f:cc:d7:bb:92:1e:0b:07:81:0d:1d:34:e3:47:86:ee:d2:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Validity
            Not Before: Sep  9 14:59:52 2024 GMT
            Not After : Sep  8 15:04:52 2025 GMT
        Subject: CN=17E7DDE564A5F9E0379F27585336D91790BC0C9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:05:71:84:15:53:9b:bf:d7:a7:1a:b5:96:9e:
                    29:4d:5d:63:e7:0c:01:17:b1:02:c1:f9:60:ae:d7:
                    85:5a:d0:68:43:c6:11:16:79:e6:cd:cd:aa:28:9b:
                    02:72:60:16:ef:29:ad:d2:c1:4a:d4:13:85:69:b5:
                    bb:fb:13:3f:de:28:c6:c1:a9:f1:ae:31:64:e3:8a:
                    3b:bd:28:e0:4e:51:1f:58:59:0e:ac:a8:73:18:ff:
                    91:ba:49:85:62:e1:b1:1e:53:8e:d4:e7:73:4d:0c:
                    5d:8f:d3:df:b4:92:b5:91:d8:52:70:5c:df:9b:4c:
                    cf:f3:a0:7a:47:98:e1:4a:07:8f:68:44:b9:60:a9:
                    71:47:74:08:d0:5b:da:b7:a9:ca:1f:b9:9d:6a:f7:
                    63:99:34:bc:af:65:33:75:b5:17:17:e5:ac:1b:fc:
                    ea:52:7e:16:31:88:69:11:cd:03:e2:f4:e1:d3:d3:
                    99:2c:63:bf:ca:08:3b:0b:59:48:02:e8:7b:39:be:
                    38:53:97:0e:e0:e7:f9:ca:93:6c:94:8a:f4:76:03:
                    67:17:6d:87:42:73:63:a0:f6:c6:12:08:5c:80:bd:
                    ea:0d:4d:d5:4a:f1:fd:42:c4:2b:90:29:fc:4c:17:
                    61:65:d2:e5:2c:4f:0e:35:5f:97:74:a1:e3:8e:60:
                    35:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E7:DD:E5:64:A5:F9:E0:37:9F:27:58:53:36:D9:17:90:BC:0C:9C
            X509v3 Authority Key Identifier:
                keyid:0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3133382e3235352e3231362e302f32322d3232203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:02:c6:2a:3c:97:91:56:59:47:e7:15:ad:98:5d:fa:c6:a6:
         4b:f1:86:e8:f3:a0:17:7e:ad:49:90:fe:f6:53:ac:56:58:8e:
         52:00:b1:87:7b:44:6d:e3:98:cc:0b:90:d6:2c:94:2c:b6:dc:
         ed:ac:30:b6:71:fa:d0:cc:d2:ab:9f:9c:d5:b1:c4:96:b1:35:
         af:f1:6d:fe:4b:69:c2:9f:58:b4:49:8e:80:d9:8d:33:af:40:
         cf:08:90:71:78:3a:d1:7e:e7:c2:35:0f:c7:15:9f:ea:29:c8:
         8a:25:03:92:96:db:6c:f2:0b:22:e8:64:0b:76:9e:80:e2:c2:
         91:db:0d:5a:7f:c9:78:2e:c1:3e:68:04:91:98:9f:cc:97:ca:
         1c:a7:d2:5d:ba:f8:09:20:6a:5c:85:75:77:4f:20:46:03:94:
         d3:f2:08:db:cd:97:ca:db:7d:92:0f:c6:04:c4:f2:19:c1:8e:
         7a:e2:0d:eb:9c:ef:7e:c6:ae:75:e5:ea:88:dd:5b:a3:7b:a1:
         89:57:d0:9a:6d:f1:de:3a:3a:58:ef:8e:65:cf:cc:05:80:c5:
         61:c5:43:7d:eb:00:0c:ba:50:c2:59:ef:29:7b:ec:f5:ea:6f:
         e7:41:fd:30:25:ff:3e:be:3d:87:14:d3:25:7a:89:9c:35:67:
         17:78:63:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 13:55:32 2024 by rpki-client on console-ams.rpki-client.org