Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3133382e3235352e3231382e302f32332d3233203d3e20323632343933.roa
File:                     3133382e3235352e3231382e302f32332d3233203d3e20323632343933.roa (raw, json)
Hash identifier:          TdfLAm+C8cTRvieZ7g0dh19cMl3hJoX0demTRyCRIn0=
Subject key identifier:   F5:7E:D8:7F:10:B5:F8:1B:EB:2B:CD:D4:69:0F:E5:09:7B:C7:E4:1E
Certificate issuer:       /CN=0B641968F54E16F4A6E72B1F243A760255821D7E
Certificate serial:       6D93401C6418DD3AD61F55EDACCAFAD89A94742B
Authority key identifier: 0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3133382e3235352e3231382e302f32332d3233203d3e20323632343933.roa
Signing time:             Mon 09 Sep 2024 15:04:54 +0000
ROA not before:           Mon 09 Sep 2024 14:59:54 +0000
ROA not after:            Mon 08 Sep 2025 15:04:54 +0000
asID:                     262493
IP address blocks:        138.255.218.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Oct 2024 13:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:93:40:1c:64:18:dd:3a:d6:1f:55:ed:ac:ca:fa:d8:9a:94:74:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Validity
            Not Before: Sep  9 14:59:54 2024 GMT
            Not After : Sep  8 15:04:54 2025 GMT
        Subject: CN=F57ED87F10B5F81BEB2BCDD4690FE5097BC7E41E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:80:2b:c6:d0:4c:0e:e3:c7:85:de:86:6f:08:
                    84:8f:a9:8c:72:a3:5b:63:aa:a6:09:bf:0a:89:be:
                    ed:34:38:ec:d1:d3:9e:67:6c:70:dc:17:7a:52:01:
                    64:60:aa:1b:47:00:6c:dd:38:69:b5:23:88:33:57:
                    03:96:d0:fe:fb:ab:e1:ad:6a:0a:37:3a:43:89:49:
                    75:67:9c:91:78:e2:4c:9f:ec:f2:8b:db:bb:cb:49:
                    f4:37:67:80:8c:c3:30:be:24:3e:62:fb:90:33:5d:
                    38:69:da:5b:b5:8c:7e:fd:3e:fd:85:79:ec:5e:a2:
                    f4:6d:77:2a:3f:e1:56:cc:bc:a5:0d:f7:5c:f7:9e:
                    82:69:34:d7:07:0b:d2:33:96:91:04:a2:31:54:3b:
                    62:31:cc:d0:da:69:1c:27:f5:fe:26:fd:d2:a4:34:
                    b4:94:54:39:2b:c3:d4:1e:b1:33:12:40:50:26:88:
                    11:dd:63:86:6c:04:17:74:e8:ab:11:b0:27:1a:b1:
                    f3:84:e4:ca:76:bd:45:d2:c9:df:65:7d:5b:cb:95:
                    1c:d7:80:52:4c:1c:e8:35:5a:58:c6:9a:08:eb:78:
                    a9:4c:fa:6c:d3:59:ac:d2:ad:cd:6b:6a:98:cf:31:
                    16:4a:0c:2d:ef:35:19:72:e7:5b:62:72:79:1c:cf:
                    b3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:7E:D8:7F:10:B5:F8:1B:EB:2B:CD:D4:69:0F:E5:09:7B:C7:E4:1E
            X509v3 Authority Key Identifier:
                keyid:0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3133382e3235352e3231382e302f32332d3233203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:86:f8:f1:b9:f2:f2:89:83:23:38:c5:6e:73:5a:37:8d:bd:
         6c:d2:a4:bd:08:2a:24:ef:92:56:5f:a0:9e:02:dc:6a:3a:80:
         5b:16:89:e7:cc:c7:d1:70:e7:1d:4c:80:bc:a0:11:9c:6a:96:
         6b:23:ad:c0:6b:76:ed:0d:30:c0:46:d6:31:cb:9b:1a:19:6b:
         57:1e:71:3f:fc:1c:f4:12:21:e9:cb:58:4f:b8:19:0f:df:95:
         2f:ae:3d:98:3d:c3:81:3d:27:61:dd:5b:c7:5f:06:05:58:8e:
         90:d0:f5:b1:ef:32:2c:12:d7:9b:51:ca:76:4c:76:77:5e:f0:
         cd:99:ac:a1:f2:20:89:fe:21:cd:2d:61:08:a5:e3:ab:b3:60:
         df:74:ab:57:aa:8c:c9:4d:71:c3:a0:aa:73:4f:d2:7e:2a:52:
         e2:72:aa:30:74:6e:66:4a:12:e1:08:2d:4b:a9:c7:ce:cd:be:
         f5:95:20:47:17:a8:54:32:f4:5d:71:29:d6:ad:60:88:4b:c2:
         10:c8:53:d9:49:e8:45:d2:a7:e7:00:5a:2e:95:85:c5:63:de:
         45:de:3e:24:ce:b5:2d:0a:99:40:8f:85:1c:5b:59:29:f2:03:
         e7:5e:29:d6:23:5c:08:50:fc:5f:b3:dc:8a:4a:b9:b1:5a:81:
         8c:67:2d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 13:55:32 2024 by rpki-client on console-ams.rpki-client.org