Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3136382e3132312e3135302e302f32332d3233203d3e20323632343933.roa
File:                     3136382e3132312e3135302e302f32332d3233203d3e20323632343933.roa (raw, json)
Hash identifier:          FOznLOgfuaIJ/1cB9Er+67bB+wPOUy1W2J28zuVS9fc=
Subject key identifier:   BF:BA:31:41:13:5F:BD:91:17:5C:C4:28:DA:93:CB:7E:43:D6:4F:7B
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       43FB8D4820E3E647DFFECE2FE0F9C0C334BEE6A0
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3136382e3132312e3135302e302f32332d3233203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:38 +0000
ROA not before:           Thu 07 Nov 2024 20:49:38 +0000
ROA not after:            Thu 06 Nov 2025 20:54:38 +0000
asID:                     262493
IP address blocks:        168.121.150.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:fb:8d:48:20:e3:e6:47:df:fe:ce:2f:e0:f9:c0:c3:34:be:e6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:38 2024 GMT
            Not After : Nov  6 20:54:38 2025 GMT
        Subject: CN=BFBA3141135FBD91175CC428DA93CB7E43D64F7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:43:ee:5b:b5:23:3b:e5:3b:0c:4f:8b:9d:4a:
                    b3:93:c1:d1:e3:0d:2d:9c:9d:31:08:57:ac:9e:13:
                    08:63:90:e0:be:23:fb:35:19:5f:1c:44:b6:ed:ec:
                    14:67:8b:12:f6:54:ac:13:98:60:de:3b:93:08:29:
                    97:50:b9:b2:be:ec:1e:d2:f3:70:cd:c5:00:8d:84:
                    e7:6e:54:77:e7:5b:97:92:41:b0:18:d6:a9:12:67:
                    51:b0:0f:1c:2d:31:75:82:47:40:63:c3:26:e1:56:
                    ed:81:e1:d1:d8:60:25:06:b2:5e:ba:a8:09:0d:df:
                    2d:f5:1b:7f:f7:d7:f5:31:fa:ae:86:e0:c2:73:84:
                    24:0d:db:3e:b1:1d:37:93:d1:17:f1:20:38:fb:a7:
                    9f:44:94:0e:11:de:74:7a:92:57:39:8e:79:43:0a:
                    bb:90:8c:42:39:e0:79:13:e7:77:75:8a:78:78:2d:
                    89:0f:d5:d3:3e:24:8d:38:63:9a:3f:ac:9c:5c:35:
                    12:70:0b:14:2d:86:3e:e3:ec:b3:b5:81:29:46:14:
                    58:af:e7:ff:67:5e:07:c8:cf:30:ad:ec:4d:e9:6f:
                    4a:a1:38:89:2f:4d:63:3a:20:4b:af:a5:ad:d0:b9:
                    f4:65:e7:04:11:c0:1f:20:03:6a:9a:0a:4b:7b:7f:
                    de:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BA:31:41:13:5F:BD:91:17:5C:C4:28:DA:93:CB:7E:43:D6:4F:7B
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3136382e3132312e3135302e302f32332d3233203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:d5:e5:cb:ed:51:ba:96:06:57:22:50:8e:6b:79:9c:3c:66:
         13:3b:cb:05:98:e6:c4:31:91:d5:ef:88:77:d7:4d:28:e7:6f:
         cb:02:79:41:d0:a6:15:0a:67:d9:0b:51:ee:1a:6d:0d:b9:9e:
         c7:48:f2:0b:89:b5:a7:d6:16:b5:d8:f7:bc:1f:f5:e9:5c:87:
         8c:30:db:5c:b9:0d:4b:a3:47:d7:e5:28:96:47:af:da:b4:44:
         37:7d:af:96:3b:a4:b6:6d:b2:1b:aa:86:b3:ef:bc:f5:b1:ff:
         4a:e2:ad:07:c8:57:e5:31:82:c5:c7:0f:12:36:32:61:28:29:
         64:be:86:f9:43:ca:d2:d6:6b:8d:25:1b:20:8e:49:7f:a9:47:
         5b:9e:e1:cb:eb:d1:79:b4:cc:a2:3e:e7:d7:6b:73:28:d9:10:
         ad:a5:a0:ec:f1:68:fb:62:db:5e:36:cb:60:94:b6:f0:7c:4b:
         d5:9c:0c:82:cb:88:31:cc:8a:19:7d:69:d7:9d:8b:bc:5e:30:
         9d:03:65:9c:b5:cf:92:49:64:c1:80:41:5f:6d:eb:85:34:02:
         0b:eb:5c:1e:da:7a:b0:a1:87:be:04:ca:b9:c7:d5:8b:23:b1:
         b9:4c:4f:6c:3b:07:64:93:a1:06:6c:19:fe:df:f1:3b:dc:13:
         84:7a:70:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:31 2024 by rpki-client on console-fra.rpki-client.org