Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3136382e3132312e3135302e302f32332d3233203d3e20323632343933.roa
File:                     3136382e3132312e3135302e302f32332d3233203d3e20323632343933.roa (raw, json)
Hash identifier:          f8eC1zN1l5OM/Ix3TKZSBVr8FVi4GeQarwlagkDbMJ4=
Subject key identifier:   28:88:6B:38:54:FC:0F:EB:7A:18:BF:69:6D:1F:1F:89:90:4C:49:B7
Certificate issuer:       /CN=0B641968F54E16F4A6E72B1F243A760255821D7E
Certificate serial:       0F0910F5EF3EC0B9FF2697148E777DBD376620D2
Authority key identifier: 0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3136382e3132312e3135302e302f32332d3233203d3e20323632343933.roa
Signing time:             Mon 09 Sep 2024 15:04:52 +0000
ROA not before:           Mon 09 Sep 2024 14:59:52 +0000
ROA not after:            Mon 08 Sep 2025 15:04:52 +0000
asID:                     262493
IP address blocks:        168.121.150.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Oct 2024 13:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:09:10:f5:ef:3e:c0:b9:ff:26:97:14:8e:77:7d:bd:37:66:20:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Validity
            Not Before: Sep  9 14:59:52 2024 GMT
            Not After : Sep  8 15:04:52 2025 GMT
        Subject: CN=28886B3854FC0FEB7A18BF696D1F1F89904C49B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d9:7a:6f:6c:64:6a:d2:2c:b9:90:da:f8:9d:
                    2b:f4:64:ff:54:18:45:f4:b0:e6:93:aa:4a:a0:c8:
                    39:9b:07:af:b3:ef:2c:7e:f0:02:b4:ab:e7:a5:6a:
                    b9:4d:ad:04:f1:8f:89:38:f5:f7:55:9c:99:96:a8:
                    4a:eb:d9:42:03:35:3d:82:73:23:43:bc:ba:ab:c7:
                    62:64:c3:f1:99:08:50:ea:94:64:e4:32:bb:6f:fd:
                    f1:04:ca:bd:f8:b2:fa:3c:ec:b7:83:2a:1a:2e:a8:
                    ed:ea:12:16:4b:a8:65:4a:6f:e1:20:9c:af:69:75:
                    be:c5:db:2b:57:ad:64:c7:f8:fb:5b:37:f6:b8:20:
                    74:aa:07:e0:f0:93:88:5f:25:c2:a1:6c:39:b6:1c:
                    cd:ea:87:2b:31:9f:6b:54:52:5d:a9:8d:db:02:f1:
                    d6:d9:32:fc:38:52:90:94:11:f6:38:61:3e:53:98:
                    77:d9:a5:85:24:d9:46:1b:11:73:b2:5d:d2:d9:46:
                    08:5d:ad:40:0b:b1:b8:ce:68:ab:6f:56:2a:1e:ec:
                    60:f2:f9:19:8c:c3:b2:aa:42:8e:a5:e2:46:c2:22:
                    49:81:54:be:cc:b2:19:87:d8:28:66:5d:69:e0:10:
                    5a:c9:30:91:38:53:b1:96:24:12:d1:c4:40:60:07:
                    d0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:88:6B:38:54:FC:0F:EB:7A:18:BF:69:6D:1F:1F:89:90:4C:49:B7
            X509v3 Authority Key Identifier:
                keyid:0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3136382e3132312e3135302e302f32332d3233203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:63:20:a1:76:73:14:ff:04:92:9b:0e:2f:dd:85:03:86:f6:
         fb:19:e9:c9:84:5e:fd:fe:23:f3:64:66:52:57:ac:9b:de:90:
         d2:e0:c4:24:01:58:4b:0d:a3:f8:1e:64:d1:17:6f:65:37:70:
         46:3f:98:a2:b6:67:16:c2:b1:47:2d:1e:d6:7b:99:e4:08:8c:
         5b:de:69:80:ba:52:0b:39:7d:d0:15:93:13:e2:fb:35:7e:8f:
         b2:75:d8:23:53:d5:30:94:f7:bf:b3:f0:7f:18:88:11:8e:40:
         3b:09:22:d5:39:b5:e1:95:a3:8b:cb:31:90:b1:3b:df:c5:23:
         df:33:84:ad:84:7a:82:98:0d:c6:b5:5c:ca:be:86:56:32:25:
         1f:f0:9a:32:4d:5c:ae:7d:3c:96:db:3e:11:61:f0:7f:c1:b8:
         ed:5d:dd:48:56:f0:7b:95:e7:7d:81:4f:cb:b4:36:af:dc:34:
         da:d8:88:37:1a:d6:a7:d2:73:a3:11:f5:b9:62:d6:67:64:9e:
         6d:9b:4f:78:e8:89:28:c0:0d:97:e5:1d:c6:0e:26:31:6f:66:
         0e:e9:54:ea:87:23:cb:ac:14:15:97:42:6e:23:f3:83:92:15:
         92:38:5d:15:85:37:56:ba:55:6a:e5:3a:0d:5e:b7:55:19:85:
         05:c4:c7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 13:55:32 2024 by rpki-client on console-ams.rpki-client.org