Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3133382e3235352e3231382e302f32332d3233203d3e20323632343933.roa
File:                     3133382e3235352e3231382e302f32332d3233203d3e20323632343933.roa (raw, json)
Hash identifier:          GDI7AoJOXESi/csa/QpVOip2uYxhBh/MCkFdB2K7G9I=
Subject key identifier:   26:B3:FE:BD:8F:B0:E7:B9:33:C5:28:25:77:FD:69:7B:B6:78:B6:4B
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       6AF85FEA1506BD133795A8BAC6F78CF8BF575FC1
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3133382e3235352e3231382e302f32332d3233203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:38 +0000
ROA not before:           Thu 07 Nov 2024 20:49:38 +0000
ROA not after:            Thu 06 Nov 2025 20:54:38 +0000
asID:                     262493
IP address blocks:        138.255.218.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f8:5f:ea:15:06:bd:13:37:95:a8:ba:c6:f7:8c:f8:bf:57:5f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:38 2024 GMT
            Not After : Nov  6 20:54:38 2025 GMT
        Subject: CN=26B3FEBD8FB0E7B933C5282577FD697BB678B64B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ea:8b:55:16:03:81:8d:3e:22:44:9e:05:7f:
                    aa:3d:04:96:39:62:c4:62:22:65:3a:30:ad:e1:f3:
                    27:83:3d:0c:7e:ba:e7:2c:cb:dd:88:05:25:ad:45:
                    fc:14:91:7e:ff:94:13:87:09:eb:5d:08:1a:32:8a:
                    85:dc:c2:94:83:68:97:4c:51:ef:1c:d0:07:d5:4f:
                    48:5a:2c:7c:87:aa:ae:fc:3e:9b:0f:a3:c9:83:b7:
                    e7:a6:1b:0f:e2:fc:b8:ac:41:9b:02:20:98:b4:00:
                    f6:35:fe:6b:db:c6:77:ff:be:bb:5c:30:38:f4:7c:
                    1d:07:6a:70:b1:d7:4f:9c:47:4f:5a:fb:b8:3a:1d:
                    bc:85:d2:7c:ca:23:c5:0c:10:ab:2d:bc:5f:0f:21:
                    2a:df:d5:a2:f2:10:a0:eb:6e:af:b1:7f:4b:ef:e8:
                    67:a0:1d:c2:26:61:c6:b6:aa:73:20:45:20:d6:6a:
                    3e:91:85:47:fe:11:8c:85:8b:f4:c9:24:34:a7:3f:
                    de:ae:76:9b:db:4f:e3:68:7a:a0:9d:a3:da:54:e8:
                    83:4e:66:db:be:87:97:eb:0c:e3:65:cd:70:2e:73:
                    ae:c3:45:e3:e9:74:90:82:ae:67:b4:83:78:10:4b:
                    86:d6:fa:0f:f5:9e:e9:ef:9d:59:54:b2:86:5b:6b:
                    dd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B3:FE:BD:8F:B0:E7:B9:33:C5:28:25:77:FD:69:7B:B6:78:B6:4B
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3133382e3235352e3231382e302f32332d3233203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:6e:4d:b6:08:79:e7:58:d7:87:c6:d5:36:6f:4c:ec:2e:25:
         e1:b2:65:ea:01:8c:d5:78:6a:8c:3c:ce:7b:06:91:90:31:44:
         80:af:00:08:c0:12:af:5d:c5:4c:04:c2:04:74:cc:f9:7d:eb:
         4f:42:68:19:2d:62:b9:a0:d0:8f:4b:69:1e:1e:6e:79:b6:13:
         c7:f7:28:2f:75:6e:a1:10:f9:5c:8e:1c:98:db:4d:32:d8:75:
         c1:58:84:72:bc:d7:fa:57:65:87:a7:4b:a5:4e:c3:8a:a3:0b:
         5a:ee:33:34:9a:a6:af:0a:4c:3f:c4:1f:71:b0:87:e1:a5:57:
         64:fc:4b:45:b3:81:67:36:55:93:a7:b4:c5:fa:b7:aa:6b:36:
         8d:44:72:7c:52:a9:e8:c2:23:92:c4:3d:0a:7a:2f:1c:77:73:
         4c:e0:c3:ad:ee:c9:5e:f4:ee:08:40:87:0d:ed:47:0e:8a:88:
         ac:cc:5a:7e:84:1c:cb:18:a3:7b:a2:32:b6:62:74:4c:7a:a9:
         cc:3b:41:f3:9b:45:db:37:3a:45:b3:48:45:68:c1:51:64:e8:
         ef:ca:fd:de:4f:54:1d:4b:61:1f:86:20:74:f9:f5:d9:5a:4a:
         e2:ac:d5:14:db:ed:11:20:9c:a2:7c:51:8b:e7:38:9a:be:fa:
         d6:49:02:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:31 2024 by rpki-client on console-fra.rpki-client.org