Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3136382e3132312e3134382e302f32342d3234203d3e20323632343933.roa
File:                     3136382e3132312e3134382e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          BRDGBofeJrzaeya2bXLQPvOTcPfIgB/eMR67xrabBaY=
Subject key identifier:   CF:10:9F:87:4D:85:98:0C:84:96:15:46:79:E5:E8:EA:38:0D:03:87
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       3825E1AA3FD2F21D508E532184972E545B1F5D49
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3136382e3132312e3134382e302f32342d3234203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:39 +0000
ROA not before:           Thu 07 Nov 2024 20:49:39 +0000
ROA not after:            Thu 06 Nov 2025 20:54:39 +0000
asID:                     262493
IP address blocks:        168.121.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:25:e1:aa:3f:d2:f2:1d:50:8e:53:21:84:97:2e:54:5b:1f:5d:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:39 2024 GMT
            Not After : Nov  6 20:54:39 2025 GMT
        Subject: CN=CF109F874D85980C8496154679E5E8EA380D0387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:61:99:0e:a3:66:b7:3a:13:b5:d3:eb:d8:5b:
                    f2:c6:64:79:6b:1f:f4:f2:00:63:9b:20:ef:8e:90:
                    07:23:40:74:3b:7d:90:3a:8f:a6:10:ac:d6:a7:15:
                    57:56:35:82:41:d6:32:f3:ce:43:97:34:4c:6a:26:
                    d5:82:36:fd:a1:38:b5:0f:00:33:2a:5e:ab:88:b6:
                    b6:b6:40:8f:b3:c8:bb:8d:54:b2:0d:18:85:b8:bc:
                    43:51:30:9c:40:13:e8:f4:cf:af:18:5d:ac:b3:3c:
                    6b:48:56:65:b8:d1:10:a8:77:87:1b:05:15:f9:e2:
                    6d:d6:f5:15:d6:b6:2b:d2:c6:92:40:01:6e:b2:40:
                    6e:74:8c:39:7e:be:01:44:0e:76:9f:4c:ac:fa:9d:
                    6c:7f:a2:9a:c6:51:1e:1f:92:ff:2e:17:e6:10:ff:
                    b8:6c:08:13:ae:82:d6:78:58:e0:8f:e3:9a:b5:9f:
                    77:4c:86:12:85:06:78:fb:96:68:f5:f0:8e:dd:52:
                    40:dc:01:d9:62:cd:23:a6:36:8c:02:8a:02:78:fa:
                    f6:31:45:8c:01:55:a1:43:2f:38:12:88:c8:13:a9:
                    91:b6:11:56:7f:db:f2:6d:0a:4d:75:50:99:a2:1f:
                    d4:c3:86:07:8e:92:c4:e1:df:0a:fc:fa:44:e3:b8:
                    e4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:10:9F:87:4D:85:98:0C:84:96:15:46:79:E5:E8:EA:38:0D:03:87
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3136382e3132312e3134382e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:12:e7:0c:42:f2:ad:01:30:70:26:cd:d6:41:9f:d2:e7:67:
         a9:10:13:41:bb:3d:b9:39:ef:b1:51:dd:9f:50:3f:c9:ef:db:
         85:29:61:8e:16:53:a5:a3:04:08:c5:eb:4e:0a:41:4a:31:47:
         09:31:28:7e:8a:de:87:27:7a:0b:c3:2a:dd:15:de:a6:2f:a4:
         77:a8:9f:6f:75:a2:85:ea:35:f8:22:80:ee:4c:a2:29:34:10:
         d6:29:45:1d:bd:67:34:ff:d7:68:e1:12:3d:92:e2:40:a1:7d:
         1d:36:ad:c5:72:0b:cf:fe:5a:81:47:5e:51:67:82:c9:04:3e:
         d5:f9:68:f3:94:34:05:2f:5b:e0:03:5d:f1:da:15:11:3f:ec:
         8f:c9:1c:2e:31:b2:f4:7d:34:70:db:82:17:d1:f2:24:8b:4e:
         bd:a1:1b:2b:ca:8a:81:23:54:24:04:3a:ff:69:9f:4b:cb:1a:
         11:54:d7:9a:a4:1c:2f:af:1c:a9:c1:7b:f7:38:25:54:c5:10:
         e1:67:46:68:c4:fa:76:e3:c5:35:c2:71:a1:b1:39:1c:f0:ea:
         fa:19:e1:f7:c0:ff:40:46:b7:d2:91:3e:30:48:e9:77:0a:01:
         2b:bf:32:48:bf:b7:51:36:02:f7:ec:dc:e9:36:8e:0f:9d:ae:
         59:f1:dd:03
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUOCXhqj/S8h1QjlMhhJcuVFsfXUkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU0MzYzRTIxRjE5RkIzNTdDM0ZGNkI5NURCRThBOTE2
QTIzRUJDRjAeFw0yNDExMDcyMDQ5MzlaFw0yNTExMDYyMDU0MzlaMDMxMTAvBgNV
BAMTKENGMTA5Rjg3NEQ4NTk4MEM4NDk2MTU0Njc5RTVFOEVBMzgwRDAzODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1YZkOo2a3OhO10+vYW/LGZHlr
H/TyAGObIO+OkAcjQHQ7fZA6j6YQrNanFVdWNYJB1jLzzkOXNExqJtWCNv2hOLUP
ADMqXquItra2QI+zyLuNVLINGIW4vENRMJxAE+j0z68YXayzPGtIVmW40RCod4cb
BRX54m3W9RXWtivSxpJAAW6yQG50jDl+vgFEDnafTKz6nWx/oprGUR4fkv8uF+YQ
/7hsCBOugtZ4WOCP45q1n3dMhhKFBnj7lmj18I7dUkDcAdlizSOmNowCigJ4+vYx
RYwBVaFDLzgSiMgTqZG2EVZ/2/JtCk11UJmiH9TDhgeOksTh3wr8+kTjuORJAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUzxCfh02FmAyElhVGeeXo6jgNA4cwHwYDVR0j
BBgwFoAULkNj4h8Z+zV8P/a5Xb6KkWoj688wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRU1QM3htYjVNU1ZnYW1ySml6c0IzYlBSOXdjTURpOVJuZHJ2cFloaHNR
ZDQvMC8yRTQzNjNFMjFGMTlGQjM1N0MzRkY2Qjk1REJFOEE5MTZBMjNFQkNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFNDM2M0UyMUYxOUZCMzU3
QzNGRjZCOTVEQkU4QTkxNkEyM0VCQ0YuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VNUDN4bWI1TVNWZ2FtckppenNCM2JQUjl3Y01EaTlSbmRydnBZaGhzUWQ0LzAv
MzEzNjM4MmUzMTMyMzEyZTMxMzQzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM0MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKh5lDANBgkqhkiG9w0BAQsFAAOCAQEAehLn
DELyrQEwcCbN1kGf0udnqRATQbs9uTnvsVHdn1A/ye/bhSlhjhZTpaMECMXrTgpB
SjFHCTEoforehyd6C8Mq3RXepi+kd6ifb3Wiheo1+CKA7kyiKTQQ1ilFHb1nNP/X
aOESPZLiQKF9HTatxXILz/5agUdeUWeCyQQ+1flo85Q0BS9b4ANd8doVET/sj8kc
LjGy9H00cNuCF9HyJItOvaEbK8qKgSNUJAQ6/2mfS8saEVTXmqQcL68cqcF79zgl
VMUQ4WdGaMT6duPFNcJxobE5HPDq+hnh98D/QEa30pE+MEjpdwoBK78ySL+3UTYC
9+zc6TaOD52uWfHdAw==
-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:43 2024 by rpki-client on console-fra.rpki-client.org