Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3133382e3235352e3231392e302f32342d3234203d3e20323632343933.roa
File:                     3133382e3235352e3231392e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          rkqhMtJpLDXcWA2xq88G7veZuRzbn1jtZgVFgMVI13A=
Subject key identifier:   C9:C7:F3:3E:E0:10:0D:9B:A1:C0:AE:04:F1:2A:00:3E:E3:96:29:37
Certificate issuer:       /CN=0B641968F54E16F4A6E72B1F243A760255821D7E
Certificate serial:       6F1C9CA0C2B875C3047BC8ECCED2E762B1D57B68
Authority key identifier: 0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3133382e3235352e3231392e302f32342d3234203d3e20323632343933.roa
Signing time:             Mon 09 Sep 2024 15:04:53 +0000
ROA not before:           Mon 09 Sep 2024 14:59:53 +0000
ROA not after:            Mon 08 Sep 2025 15:04:53 +0000
asID:                     262493
IP address blocks:        138.255.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Oct 2024 13:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:1c:9c:a0:c2:b8:75:c3:04:7b:c8:ec:ce:d2:e7:62:b1:d5:7b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Validity
            Not Before: Sep  9 14:59:53 2024 GMT
            Not After : Sep  8 15:04:53 2025 GMT
        Subject: CN=C9C7F33EE0100D9BA1C0AE04F12A003EE3962937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:09:4f:8b:bf:e7:e3:84:83:e8:aa:95:4f:42:
                    a0:4e:1a:a8:f2:21:87:4c:74:bf:f7:06:29:38:98:
                    b7:a1:34:92:5c:85:cb:cd:d6:fa:d9:54:b6:ff:94:
                    ca:dc:67:29:96:ab:ed:83:7e:dd:cc:14:24:f2:77:
                    70:ad:aa:ab:58:e2:8d:5e:f4:34:20:fb:bf:8d:dc:
                    47:9c:f6:98:62:ab:8a:6c:36:fa:55:3c:b3:16:5e:
                    b3:79:c3:c6:4e:31:0d:d3:01:00:d3:d0:8f:bc:f5:
                    28:61:de:34:5b:fe:85:08:e4:4c:38:45:68:17:a9:
                    bd:1f:4e:3f:bd:4a:0b:bb:aa:e3:d2:8e:f1:28:00:
                    47:fa:fc:d4:f6:e2:4c:03:6e:f3:a7:04:f8:dd:d5:
                    c2:42:2a:2b:c2:b2:3f:c7:9a:51:c6:b4:e2:b1:db:
                    c2:da:33:ef:cd:7f:ff:7b:68:f3:32:de:66:cc:96:
                    d9:85:aa:f4:85:d9:47:32:bd:d8:fa:1d:3f:13:22:
                    98:12:61:31:3b:7c:4d:ba:19:47:e5:0f:fe:16:e9:
                    55:e2:85:82:8c:2a:92:4f:22:7b:ca:90:f7:91:95:
                    43:92:cd:0a:5c:d4:43:e1:7c:2c:00:01:af:b5:1a:
                    b5:79:40:21:91:90:e4:c3:32:5d:b1:72:c4:4e:cb:
                    f2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C7:F3:3E:E0:10:0D:9B:A1:C0:AE:04:F1:2A:00:3E:E3:96:29:37
            X509v3 Authority Key Identifier:
                keyid:0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3133382e3235352e3231392e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:35:d4:88:9b:a0:24:69:89:32:f9:b7:95:14:ed:37:d0:91:
         8c:11:5a:d2:f5:47:09:80:0d:8c:38:b7:88:f8:f0:c0:0d:b7:
         85:92:04:37:d7:70:0b:c9:f5:58:0f:1f:b1:a1:02:95:7d:a3:
         a8:a5:76:76:b3:2d:d8:fc:87:20:b7:8e:56:a2:4b:81:db:6e:
         77:a7:6a:e2:66:31:64:ee:7c:3b:ac:c2:c4:b8:16:00:e0:9c:
         06:4b:11:bb:b2:84:bc:bd:bc:a6:26:6c:1f:4c:ee:88:98:b4:
         fc:42:e8:99:60:ec:4a:e8:1b:ee:4b:0c:ea:19:15:d1:68:cd:
         42:6d:79:7a:2e:f0:9c:d7:d5:e2:c8:32:ef:12:08:1c:a7:16:
         49:40:4e:d7:cf:f0:e8:81:5b:dc:5f:8c:0a:1f:d0:9c:50:b1:
         a7:74:8c:c7:12:21:f8:96:c7:d6:63:96:05:f7:49:8d:3e:62:
         be:88:c3:a9:87:fb:a0:87:f9:f3:b7:6f:c3:ef:79:27:06:ad:
         bb:72:8d:04:bb:07:93:23:b7:29:6f:78:3c:60:6b:7d:1e:d0:
         47:8b:41:90:54:c5:4c:93:dd:bc:fa:79:6f:ff:78:19:56:57:
         e6:2d:72:6f:39:86:4f:c9:d5:b0:94:3a:b2:bb:f1:c1:be:9b:
         4f:5e:dd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 13:55:32 2024 by rpki-client on console-ams.rpki-client.org