Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3133382e3235352e3231372e302f32342d3234203d3e20323632343933.roa
File:                     3133382e3235352e3231372e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          PtnmnMWC338on0aAQQ9snAkQPZwkykK1fKpLU3SiV9Y=
Subject key identifier:   DA:4E:B3:9F:30:3E:C1:3A:ED:43:18:D6:2F:04:CE:A5:AB:EC:E4:BB
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       2F1D2CB2E3D036233BDC4FAC9C9B9E4098E1DC02
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3133382e3235352e3231372e302f32342d3234203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:41 +0000
ROA not before:           Thu 07 Nov 2024 20:49:41 +0000
ROA not after:            Thu 06 Nov 2025 20:54:41 +0000
asID:                     262493
IP address blocks:        138.255.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:1d:2c:b2:e3:d0:36:23:3b:dc:4f:ac:9c:9b:9e:40:98:e1:dc:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:41 2024 GMT
            Not After : Nov  6 20:54:41 2025 GMT
        Subject: CN=DA4EB39F303EC13AED4318D62F04CEA5ABECE4BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c7:98:4d:89:78:6b:09:de:24:32:0b:3d:88:
                    67:a6:5f:a1:f7:40:6e:0b:04:7d:dd:fd:e0:b7:10:
                    98:18:be:2d:90:2b:23:b7:2c:31:6e:29:7e:d6:b5:
                    a1:c8:d5:90:f9:ac:1c:59:1b:69:9e:4d:b8:60:34:
                    91:f6:8c:3e:22:86:bc:62:82:af:75:da:c0:9e:88:
                    1e:55:8c:b5:73:70:24:32:02:79:9d:4c:17:f7:fe:
                    10:ea:a7:0f:bf:32:01:af:60:1d:c3:39:8c:fd:18:
                    8d:40:b3:6b:4d:9a:00:f2:2d:e1:28:69:a1:07:2a:
                    d8:64:9d:e6:b5:db:4d:3b:f5:2f:c7:3a:d3:36:fd:
                    33:0c:d1:bd:80:99:b6:2d:21:2a:c8:83:02:9d:68:
                    21:03:be:cc:df:aa:23:db:ac:af:84:d4:16:da:d9:
                    92:4e:27:9b:17:d5:b1:54:66:b4:38:9b:2c:9c:5c:
                    50:55:2f:d3:e9:b9:b4:8e:2f:c6:db:4e:3f:5e:d0:
                    28:95:ca:e4:e7:a8:aa:72:97:9a:55:65:5b:5f:0a:
                    d3:b0:35:8e:fe:b5:2d:4e:2f:ea:7a:4f:60:43:94:
                    e5:b6:9a:d0:84:24:b2:e1:9a:3f:01:b7:77:b9:c0:
                    3d:6f:9b:01:b1:e5:8f:c3:4d:ed:53:19:13:64:26:
                    1c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4E:B3:9F:30:3E:C1:3A:ED:43:18:D6:2F:04:CE:A5:AB:EC:E4:BB
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3133382e3235352e3231372e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         de:96:c6:8a:1e:f1:9f:df:36:3d:ff:fd:32:49:0d:9d:f5:90:
         c6:ed:07:27:38:7e:53:b3:ba:04:60:da:a5:c3:dd:05:76:fe:
         86:51:25:35:53:09:86:a4:ad:18:20:d3:32:8e:35:89:37:5f:
         24:0a:28:65:5f:8e:e0:2d:3a:3b:ab:8e:44:3a:4a:25:0c:84:
         1c:89:4c:89:73:ad:3b:53:57:a2:84:1e:56:be:62:47:c4:55:
         5b:b7:6f:16:4a:bb:e3:a0:28:50:30:d1:f5:da:65:bc:37:08:
         b1:a3:87:f4:c5:0b:bf:6c:ea:da:3f:e2:51:c0:b3:8f:3e:4f:
         83:97:9a:3c:9c:e3:56:12:dc:b4:8b:3d:7d:71:9a:7c:5c:5f:
         81:35:56:5a:8a:1b:39:60:e7:82:4a:a4:30:d1:74:4e:0f:3d:
         36:6c:e2:8a:ed:61:f8:79:fc:ed:e1:42:40:ad:55:45:9e:6d:
         09:0c:c1:e2:df:62:91:13:4d:7c:ba:16:ab:29:8a:88:a6:2d:
         44:42:47:0e:c2:9e:58:87:19:1c:12:bf:b7:55:7e:94:05:15:
         84:ce:ac:fa:60:49:76:84:d8:3f:7d:8b:0f:4c:db:bb:e4:06:
         82:65:bf:09:4c:7f:5d:c4:1a:ed:e7:a0:89:04:7e:a5:38:7a:
         42:fe:cf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org