Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137302e38322e3133322e302f32322d3232203d3e20323632343933.roa
File:                     3137302e38322e3133322e302f32322d3232203d3e20323632343933.roa (raw, json)
Hash identifier:          M75aF4IpylYLeBngr1bOdw9l0A0t5uHpJtZunK7Jf7c=
Subject key identifier:   E5:FC:CD:C2:30:F1:4C:BA:B6:65:DF:7A:7B:2F:72:83:BF:1E:4A:39
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       0723D512DB79DF704146B145757A8D27A9595136
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137302e38322e3133322e302f32322d3232203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:37 +0000
ROA not before:           Thu 07 Nov 2024 20:49:37 +0000
ROA not after:            Thu 06 Nov 2025 20:54:37 +0000
asID:                     262493
IP address blocks:        170.82.132.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 11:32:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:23:d5:12:db:79:df:70:41:46:b1:45:75:7a:8d:27:a9:59:51:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:37 2024 GMT
            Not After : Nov  6 20:54:37 2025 GMT
        Subject: CN=E5FCCDC230F14CBAB665DF7A7B2F7283BF1E4A39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:42:3f:27:f6:6e:1a:d1:10:2b:6e:66:7b:cb:
                    6b:68:b9:6c:f9:b4:0d:d8:9d:0e:bb:d2:e5:99:48:
                    6d:02:5b:b2:f6:df:22:f4:0e:6a:12:50:2b:b6:2b:
                    39:e0:70:eb:6f:a0:41:80:b0:77:54:fe:16:ba:b1:
                    08:53:1e:f5:bf:bf:e3:3e:f6:35:a9:e5:ab:05:9c:
                    83:c5:fb:55:ab:b5:c5:86:53:bf:69:59:8a:d6:8d:
                    12:02:04:59:e7:00:db:21:8b:b7:fa:a7:fe:bc:e7:
                    6d:77:7a:81:9a:15:9a:fe:e8:70:3a:79:2b:d1:82:
                    dc:45:d3:21:73:6f:24:ea:4c:48:31:55:00:69:84:
                    13:00:43:b8:17:04:3b:28:58:94:97:e7:88:17:90:
                    13:66:70:30:fa:0a:56:e0:f0:db:8f:87:c5:8c:1b:
                    62:fc:c7:37:69:79:81:3a:1c:5d:9b:b0:5b:47:8b:
                    a9:e2:56:44:26:30:23:0e:05:66:42:ee:2b:12:0f:
                    da:ee:47:d0:61:98:42:2b:1c:2d:6b:5a:b5:0a:0b:
                    27:1c:5b:03:2f:eb:60:55:aa:7e:f9:e1:4c:28:1b:
                    87:d1:87:b1:9d:f4:22:28:68:d6:37:5f:27:26:12:
                    d0:db:e4:dd:60:ba:ec:5e:b4:f3:f0:2c:92:17:48:
                    03:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FC:CD:C2:30:F1:4C:BA:B6:65:DF:7A:7B:2F:72:83:BF:1E:4A:39
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137302e38322e3133322e302f32322d3232203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:dd:ba:05:f9:bf:84:9e:17:19:49:29:70:08:7a:a5:8f:05:
         48:11:6e:8d:d8:e6:70:bb:0e:36:5b:95:9e:da:e5:f6:3a:2b:
         36:ef:24:78:fa:94:59:9b:23:82:73:f0:d9:0c:38:f0:1e:f9:
         ae:75:63:53:43:92:c6:5a:a2:5f:7a:fb:53:87:0e:6e:98:67:
         36:26:4e:46:52:c8:4a:f0:12:41:80:78:9e:c2:85:da:a2:c9:
         c6:5b:0f:01:16:76:ca:9c:65:0d:22:b8:fe:5e:06:bb:5b:bb:
         1c:6a:65:e4:cd:4c:61:dd:2f:b4:2c:4f:93:c3:28:99:fa:8f:
         5a:8e:14:65:3f:c0:3b:67:75:14:18:cc:a5:59:3a:24:bf:3b:
         22:a1:06:8e:71:1e:78:b7:5b:b6:cc:0b:c9:d7:77:a1:a5:df:
         49:4f:13:1e:74:9b:aa:7a:7a:99:83:2b:26:f5:3c:4f:40:46:
         76:24:72:c3:a8:7d:14:68:59:ee:68:7f:91:94:67:58:57:6f:
         fe:13:d0:ae:ce:c8:5a:1c:c4:74:23:90:56:25:3e:7b:77:b6:
         b0:25:f0:da:98:7f:8b:20:95:48:e0:aa:1b:bb:e2:4c:23:18:
         c2:40:a1:8c:da:a8:10:12:1c:90:d8:a8:b9:b3:a8:23:02:9c:
         3b:50:98:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:40 2024 by rpki-client on console-ams.rpki-client.org