Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3133382e3235352e3231382e302f32342d3234203d3e20323632343933.roa
File:                     3133382e3235352e3231382e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          6+gdHqtLzK9WSxgJLLqPsEVGmOBYX4P0EkDq2JJIs9k=
Subject key identifier:   F9:F1:18:94:7C:B5:28:29:D9:9E:6D:DA:93:B6:CF:CF:19:E4:49:7E
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       1408D9A586822665B673C3582DFB8F90150ED388
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3133382e3235352e3231382e302f32342d3234203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:39 +0000
ROA not before:           Thu 07 Nov 2024 20:49:39 +0000
ROA not after:            Thu 06 Nov 2025 20:54:39 +0000
asID:                     262493
IP address blocks:        138.255.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:08:d9:a5:86:82:26:65:b6:73:c3:58:2d:fb:8f:90:15:0e:d3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:39 2024 GMT
            Not After : Nov  6 20:54:39 2025 GMT
        Subject: CN=F9F118947CB52829D99E6DDA93B6CFCF19E4497E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5f:56:80:94:ce:90:e0:1e:e9:aa:3b:29:88:
                    22:4c:2e:b2:98:35:3d:8c:78:ac:6a:48:4b:08:be:
                    f1:da:12:3e:41:9b:84:3c:e2:49:e8:4b:ae:31:a8:
                    21:af:8c:e6:55:0d:fd:df:46:0b:62:3f:82:ae:d2:
                    49:18:20:8f:19:c2:34:92:ee:43:6d:eb:87:27:21:
                    dc:9c:ca:67:1a:c6:8b:48:ec:32:bd:ea:1a:09:86:
                    fe:14:7a:00:cd:d5:6c:28:e1:25:a2:6c:4b:ef:a6:
                    ec:9b:e6:30:5a:6b:f7:06:ea:d8:7d:3c:9c:50:a9:
                    e7:60:a1:09:52:f4:b0:8c:83:0c:9b:ce:82:d7:f3:
                    15:b9:b1:16:52:a1:75:48:92:dc:f7:8d:39:f0:b0:
                    04:34:c1:bb:dc:5e:ad:92:db:aa:0a:b4:92:9b:e6:
                    bf:32:2f:30:f0:fd:4c:3f:2a:61:69:33:d2:47:0e:
                    36:34:f5:d8:a9:01:eb:81:1a:d0:f3:ed:0b:98:09:
                    94:89:f2:84:f8:2b:fd:d9:98:75:d7:90:ba:8c:fe:
                    c2:07:51:d6:52:e7:42:55:4b:a8:c1:fb:41:28:6c:
                    b4:0d:06:62:23:35:9c:6b:1d:ce:99:99:b4:8d:20:
                    e7:e5:d6:43:78:c8:25:21:3d:5b:11:b5:5f:dc:de:
                    e5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F1:18:94:7C:B5:28:29:D9:9E:6D:DA:93:B6:CF:CF:19:E4:49:7E
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3133382e3235352e3231382e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:cc:f5:75:7b:07:8e:23:42:a0:c7:e6:d0:cd:b8:34:00:af:
         1d:82:ae:b1:7e:ff:ec:70:ee:76:09:94:38:f6:d2:b0:c9:ac:
         2e:b5:b3:eb:67:b6:b7:de:84:d6:f2:c4:b1:df:f6:5d:df:a5:
         72:e1:c1:22:2a:c5:b3:9d:fc:3c:19:1f:ad:bd:8d:e2:a3:80:
         2a:82:80:f3:77:38:a9:8d:e2:aa:06:b3:f0:54:6a:bc:7d:5f:
         e9:55:d8:b0:f0:ac:2a:ce:a0:c0:c7:2b:cf:05:85:cc:82:82:
         a2:1d:b9:ad:71:04:89:da:2b:54:f9:fd:9d:6a:30:2d:17:10:
         af:f3:7f:a8:1f:c8:47:3e:b6:46:f2:8d:d9:f6:0e:9c:08:97:
         cf:99:6a:07:23:ac:96:e5:73:67:df:b5:09:1f:17:f8:e3:a3:
         97:cb:f8:cb:cb:32:59:f2:a1:2f:c8:b0:f5:32:6a:a2:04:ee:
         44:c0:b2:aa:6d:fa:9c:d3:47:98:14:70:c9:07:26:8d:9e:4c:
         cf:e9:3c:05:24:98:25:5d:3a:56:9d:07:46:c9:32:76:bd:25:
         99:9c:a7:b8:d6:35:70:28:cb:86:62:f4:75:61:fe:b7:0f:46:
         ca:e9:ff:33:6b:90:2e:df:3d:b5:2b:06:5d:cd:cd:36:ad:18:
         a3:5d:1c:3a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFAjZpYaCJmW2c8NYLfuPkBUO04gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU0MzYzRTIxRjE5RkIzNTdDM0ZGNkI5NURCRThBOTE2
QTIzRUJDRjAeFw0yNDExMDcyMDQ5MzlaFw0yNTExMDYyMDU0MzlaMDMxMTAvBgNV
BAMTKEY5RjExODk0N0NCNTI4MjlEOTlFNkREQTkzQjZDRkNGMTlFNDQ5N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOX1aAlM6Q4B7pqjspiCJMLrKY
NT2MeKxqSEsIvvHaEj5Bm4Q84knoS64xqCGvjOZVDf3fRgtiP4Ku0kkYII8ZwjSS
7kNt64cnIdycymcaxotI7DK96hoJhv4UegDN1Wwo4SWibEvvpuyb5jBaa/cG6th9
PJxQqedgoQlS9LCMgwybzoLX8xW5sRZSoXVIktz3jTnwsAQ0wbvcXq2S26oKtJKb
5r8yLzDw/Uw/KmFpM9JHDjY09dipAeuBGtDz7QuYCZSJ8oT4K/3ZmHXXkLqM/sIH
UdZS50JVS6jB+0EobLQNBmIjNZxrHc6ZmbSNIOfl1kN4yCUhPVsRtV/c3uUxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU+fEYlHy1KCnZnm3ak7bPzxnkSX4wHwYDVR0j
BBgwFoAULkNj4h8Z+zV8P/a5Xb6KkWoj688wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRU1QM3htYjVNU1ZnYW1ySml6c0IzYlBSOXdjTURpOVJuZHJ2cFloaHNR
ZDQvMC8yRTQzNjNFMjFGMTlGQjM1N0MzRkY2Qjk1REJFOEE5MTZBMjNFQkNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFNDM2M0UyMUYxOUZCMzU3
QzNGRjZCOTVEQkU4QTkxNkEyM0VCQ0YuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VNUDN4bWI1TVNWZ2FtckppenNCM2JQUjl3Y01EaTlSbmRydnBZaGhzUWQ0LzAv
MzEzMzM4MmUzMjM1MzUyZTMyMzEzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM0MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIr/2jANBgkqhkiG9w0BAQsFAAOCAQEARsz1
dXsHjiNCoMfm0M24NACvHYKusX7/7HDudgmUOPbSsMmsLrWz62e2t96E1vLEsd/2
Xd+lcuHBIirFs538PBkfrb2N4qOAKoKA83c4qY3iqgaz8FRqvH1f6VXYsPCsKs6g
wMcrzwWFzIKCoh25rXEEidorVPn9nWowLRcQr/N/qB/IRz62RvKN2fYOnAiXz5lq
ByOsluVzZ9+1CR8X+OOjl8v4y8syWfKhL8iw9TJqogTuRMCyqm36nNNHmBRwyQcm
jZ5Mz+k8BSSYJV06Vp0HRskydr0lmZynuNY1cCjLhmL0dWH+tw9Gyun/M2uQLt89
tSsGXc3NNq0Yo10cOg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org