Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3136382e3132312e3135302e302f32342d3234203d3e20323632343933.roa
File:                     3136382e3132312e3135302e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          9qLx+VXNGXHUXLVFX5UAsJtJYz7Hp8F4Zt/qDVHTTtE=
Subject key identifier:   3B:D6:8E:60:F6:11:29:69:A3:3B:ED:34:59:9B:96:1B:31:32:58:85
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       751C50C986469AB267979D2A0848F08BE5A94E49
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3136382e3132312e3135302e302f32342d3234203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:37 +0000
ROA not before:           Thu 07 Nov 2024 20:49:37 +0000
ROA not after:            Thu 06 Nov 2025 20:54:37 +0000
asID:                     262493
IP address blocks:        168.121.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:1c:50:c9:86:46:9a:b2:67:97:9d:2a:08:48:f0:8b:e5:a9:4e:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:37 2024 GMT
            Not After : Nov  6 20:54:37 2025 GMT
        Subject: CN=3BD68E60F6112969A33BED34599B961B31325885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c6:8e:b3:47:42:ea:03:9c:0b:6e:8c:2a:be:
                    05:56:07:ed:17:0e:0b:5b:61:c6:b2:27:ed:b0:b0:
                    50:9a:41:19:9a:63:cf:b8:1e:90:6a:cc:af:16:21:
                    85:f8:95:05:15:76:3d:c8:0c:2d:4d:58:7f:fe:92:
                    e9:29:a8:0c:47:7c:b1:f2:6d:f1:09:d2:07:56:cb:
                    f2:79:03:4f:5f:a0:43:8e:62:a4:47:e2:3f:de:be:
                    21:58:5e:96:9a:94:2f:71:92:c9:91:f9:18:90:b2:
                    6e:66:10:94:2f:38:8a:80:f0:d7:a2:fc:44:ef:12:
                    30:20:df:8e:b7:ba:b3:ff:a4:81:2d:57:d2:2b:86:
                    e7:dd:67:01:94:bf:d0:7c:34:8f:ac:e0:c8:41:13:
                    ef:54:70:78:c3:a4:17:29:7a:2e:fb:d4:77:a6:2d:
                    67:f7:e6:d2:8f:4c:44:25:8c:84:9b:b1:bd:ed:d4:
                    68:f8:55:36:de:3d:08:ac:cb:05:a5:c0:d8:b1:c9:
                    48:ff:b5:93:c1:14:b0:5f:4f:63:57:ea:06:e0:9b:
                    ae:bf:aa:6a:97:ef:f1:b5:a2:1e:ac:13:e2:76:d8:
                    db:09:a3:f6:35:3c:39:87:ce:8c:0b:0d:6a:c7:20:
                    a5:50:a7:5f:5c:e1:85:1d:61:be:a1:8e:e9:96:6f:
                    c7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D6:8E:60:F6:11:29:69:A3:3B:ED:34:59:9B:96:1B:31:32:58:85
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3136382e3132312e3135302e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:e7:e2:84:90:2a:90:72:5b:8c:2d:b8:c8:53:95:b8:23:64:
         77:1c:b8:1d:8c:79:3f:8e:f2:75:38:1a:0d:57:aa:26:3b:8b:
         47:61:06:8d:6c:f7:7c:59:7a:6d:32:7b:bc:22:bf:fa:9d:13:
         54:f3:28:60:7a:10:cd:4f:33:59:9d:32:b7:3d:cf:d3:29:b0:
         41:d6:1d:1e:0a:0b:04:6f:38:e3:78:8d:f1:b7:25:6e:ab:7f:
         12:1c:30:94:4f:31:a0:6b:a0:60:f7:cd:1e:eb:99:03:4b:86:
         61:28:1a:0b:54:aa:2e:89:27:70:ff:25:e2:69:61:be:7b:40:
         c2:02:49:27:b0:c1:c7:d7:03:9d:f8:06:be:73:ba:d4:7b:d4:
         81:5a:ce:01:fc:f9:ac:ad:63:16:99:eb:df:2e:72:84:57:db:
         05:25:ee:41:a9:17:2b:0d:69:13:03:3a:e2:a5:37:03:0d:fe:
         54:76:e4:6e:02:96:b0:c0:f3:a4:62:6c:18:42:ca:e9:0c:e5:
         05:e7:4a:5c:e4:1f:5b:9f:8a:17:cd:f6:61:ff:17:64:5e:96:
         f6:8f:30:50:17:de:cc:cc:27:d4:43:87:aa:de:4c:35:25:44:
         d1:93:45:36:14:4c:5f:23:a6:9a:ef:03:dd:cf:ea:22:68:a7:
         ff:06:ae:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:31 2024 by rpki-client on console-fra.rpki-client.org