Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137302e38322e3133322e302f32332d3233203d3e20323632343933.roa
File:                     3137302e38322e3133322e302f32332d3233203d3e20323632343933.roa (raw, json)
Hash identifier:          tQBcKkybmFyU/mAhJBGIxCpQpAIwbakKpHomX0KFXjs=
Subject key identifier:   53:A2:A6:D3:22:E7:E9:9F:62:C5:7E:88:8A:8F:0B:CD:C9:04:13:B6
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       4A379F3B8D8426462EB12B03FAAD9B46C4938811
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137302e38322e3133322e302f32332d3233203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:41 +0000
ROA not before:           Thu 07 Nov 2024 20:49:41 +0000
ROA not after:            Thu 06 Nov 2025 20:54:41 +0000
asID:                     262493
IP address blocks:        170.82.132.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:37:9f:3b:8d:84:26:46:2e:b1:2b:03:fa:ad:9b:46:c4:93:88:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:41 2024 GMT
            Not After : Nov  6 20:54:41 2025 GMT
        Subject: CN=53A2A6D322E7E99F62C57E888A8F0BCDC90413B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:10:d1:41:f6:8e:dc:48:de:fd:79:2a:5c:36:
                    c9:fc:50:bc:72:a2:3d:70:6b:a3:4d:0d:6c:fb:82:
                    19:a8:69:48:2a:17:32:c1:48:f2:08:46:3c:82:08:
                    23:c0:05:31:ca:9b:9f:6f:6b:eb:d2:73:d9:d5:71:
                    b0:4a:6f:56:5d:28:db:d9:28:de:ad:e8:d6:4e:9d:
                    38:ab:a4:7a:f4:ce:ce:10:df:b0:ff:69:1a:48:20:
                    5b:1a:08:24:a4:e9:c8:1e:f8:b3:49:c0:5b:3c:39:
                    9e:14:31:28:09:ce:60:68:72:6c:9e:24:86:9f:18:
                    5e:0d:62:aa:af:09:d3:7f:d9:af:34:6d:a7:96:8f:
                    30:30:df:70:8c:aa:86:e3:29:6c:36:49:03:27:fc:
                    e7:b9:01:57:65:16:d3:63:d3:49:13:8c:48:ad:8d:
                    d8:79:2c:0d:bf:c4:60:9b:71:89:9a:1f:84:54:53:
                    b6:b5:64:70:0b:a4:ef:07:12:cb:9e:c6:b2:7a:9e:
                    4c:28:72:11:08:ef:43:99:80:5d:62:0c:6a:81:f0:
                    97:d9:56:d2:3f:c4:84:41:6a:10:d5:40:b1:13:78:
                    2a:af:b8:b6:26:46:4f:99:9f:25:da:a2:05:2b:6f:
                    68:8f:ec:82:1c:e8:99:8c:6a:a0:a2:78:6c:37:00:
                    d0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A2:A6:D3:22:E7:E9:9F:62:C5:7E:88:8A:8F:0B:CD:C9:04:13:B6
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137302e38322e3133322e302f32332d3233203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:99:e2:c1:f0:9e:c6:1d:1f:c7:18:94:74:a2:7e:0e:c5:43:
         33:5f:37:9b:d0:c1:c5:e2:47:e6:6c:5b:df:cf:9b:71:a9:6a:
         e1:cc:31:39:70:5d:9d:7f:38:de:9a:68:23:02:00:30:c5:6b:
         99:66:9b:8c:ce:a2:58:f8:69:78:73:53:6a:75:8b:a7:a2:62:
         19:27:86:63:57:02:da:41:10:e0:b2:85:37:d1:77:ea:7e:8c:
         66:ef:97:3e:a2:4e:0c:61:23:bc:c7:75:23:62:50:bc:ea:0f:
         2d:54:25:7f:2d:6e:72:57:8d:5f:e8:34:b6:bf:7a:8d:c9:1d:
         96:01:95:0c:72:29:58:18:69:30:9f:35:bd:ec:33:dc:7e:d3:
         88:88:1f:f0:c4:e5:0c:1f:8c:78:b5:0f:d9:7d:2d:26:2d:eb:
         73:aa:eb:8f:d1:ea:2f:80:97:64:83:b2:57:8c:54:5c:3b:dd:
         85:70:9a:00:28:8c:61:58:fe:bd:c5:b4:4b:e8:6b:4e:f7:12:
         99:a7:05:5d:fa:8b:bd:ed:77:78:5d:6c:c2:f7:ce:b9:db:b6:
         53:f2:0f:2e:23:78:68:d1:9b:a8:b7:04:ae:0d:af:ad:55:bf:
         48:d1:d0:44:46:8f:8d:27:5c:6d:32:e1:85:28:a2:80:5b:6c:
         68:c1:21:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:31 2024 by rpki-client on console-fra.rpki-client.org