Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3136382e3132312e3134392e302f32342d3234203d3e20323632343933.roa
File:                     3136382e3132312e3134392e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          yyTuNEGRaVHjHNYisxMnVSRK8JYxLUwrDZdsLp0I528=
Subject key identifier:   8E:90:15:3D:5E:03:E4:75:0B:23:FF:97:75:C4:4F:7A:C9:B4:D4:4A
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       0D32571F5ED0A7A0A784589A6209CC47ED30B97B
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3136382e3132312e3134392e302f32342d3234203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:36 +0000
ROA not before:           Thu 07 Nov 2024 20:49:36 +0000
ROA not after:            Thu 06 Nov 2025 20:54:36 +0000
asID:                     262493
IP address blocks:        168.121.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:32:57:1f:5e:d0:a7:a0:a7:84:58:9a:62:09:cc:47:ed:30:b9:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:36 2024 GMT
            Not After : Nov  6 20:54:36 2025 GMT
        Subject: CN=8E90153D5E03E4750B23FF9775C44F7AC9B4D44A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:78:4f:c5:88:ce:84:3a:60:b5:5c:7e:dd:cd:
                    e1:7b:58:16:f9:33:a5:7a:fa:44:e2:da:36:76:ac:
                    86:88:0c:38:c8:e2:cf:fb:99:9a:90:68:09:a0:03:
                    18:06:41:7e:ba:32:68:21:d8:13:43:d7:90:8d:ee:
                    9a:34:91:25:66:b5:cd:91:78:4f:12:3a:c7:14:9a:
                    bf:1b:27:42:76:42:3d:19:cc:3d:01:16:4c:1e:e6:
                    b5:af:d4:4b:9d:de:12:9f:06:8c:45:d5:15:52:22:
                    79:07:57:c8:30:24:92:11:dc:73:f6:6e:d8:bb:1d:
                    e2:25:51:af:d3:f1:b1:9b:8f:af:dd:78:54:71:8a:
                    56:ee:db:26:00:7f:94:5e:8a:12:e5:c5:40:d2:6a:
                    a4:24:50:e5:09:72:2b:49:fc:db:b5:9e:e3:72:b1:
                    58:4b:79:5d:32:d0:6e:f6:53:a9:2c:32:7d:df:73:
                    00:fc:58:2e:bc:55:85:31:4a:8f:65:31:55:09:63:
                    0b:7a:c4:a4:e4:2a:ae:1c:ac:63:19:8b:b8:77:f1:
                    85:a4:dc:ac:ee:cd:ae:1a:61:0e:96:32:46:40:02:
                    c1:11:1f:6a:92:60:f5:82:04:0a:52:92:f2:8e:2d:
                    61:63:ee:83:01:e7:9f:93:00:07:16:dd:59:d1:dc:
                    22:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:90:15:3D:5E:03:E4:75:0B:23:FF:97:75:C4:4F:7A:C9:B4:D4:4A
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3136382e3132312e3134392e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:5e:01:e4:71:18:3f:65:a1:1a:1a:48:d6:fc:d8:b0:e0:d9:
         33:2f:3b:96:fd:6a:9b:6b:da:0c:0d:1c:56:d8:44:07:6d:e1:
         7c:86:81:d1:2b:bb:87:03:f6:b0:dc:52:20:c3:fa:10:a3:73:
         1f:1b:d1:54:57:ef:db:79:04:86:fe:ed:aa:c0:c9:2c:50:d4:
         49:3a:82:d9:f1:16:42:62:e6:03:50:95:f6:4e:05:97:e5:a8:
         e3:9a:97:c8:83:f3:06:0e:d9:fa:24:f4:2d:cb:23:2d:08:94:
         9e:cf:83:d9:ef:f2:c4:5e:aa:aa:d1:e7:9b:39:45:84:a0:60:
         e2:d5:b8:47:9c:a0:9b:40:78:65:2b:cf:67:87:8f:05:51:9b:
         29:59:0b:75:3f:53:d7:47:93:60:f8:d0:a5:67:02:c0:fc:56:
         7b:fa:3c:55:0d:05:ec:86:ae:9e:b4:f5:ab:6d:56:31:e8:00:
         e3:27:4a:77:19:f9:d9:ba:67:bb:d2:c7:d6:9a:94:11:47:8a:
         56:d2:09:42:ef:99:d6:df:68:cf:d6:fb:cf:c6:e7:6e:80:c3:
         4f:0f:6a:64:4b:e9:0a:86:aa:e2:d2:74:04:ea:9f:42:2c:cd:
         51:41:a1:22:60:68:c3:39:a5:dd:a5:e0:e0:da:86:fa:cb:d1:
         91:3b:fc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org