Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137302e38322e3133342e302f32342d3234203d3e20323632343933.roa
File:                     3137302e38322e3133342e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          dOwLJ/SgKOtSGywD/JdGy9xUai6zglpestaRVMfluGk=
Subject key identifier:   A9:EC:DC:D7:1A:5C:C7:1A:45:A0:03:99:CD:D5:01:E1:5B:0B:55:09
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       538DDBDA255B16ED5AE9D226C2618701D73837BD
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137302e38322e3133342e302f32342d3234203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:39 +0000
ROA not before:           Thu 07 Nov 2024 20:49:39 +0000
ROA not after:            Thu 06 Nov 2025 20:54:39 +0000
asID:                     262493
IP address blocks:        170.82.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:8d:db:da:25:5b:16:ed:5a:e9:d2:26:c2:61:87:01:d7:38:37:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:39 2024 GMT
            Not After : Nov  6 20:54:39 2025 GMT
        Subject: CN=A9ECDCD71A5CC71A45A00399CDD501E15B0B5509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7d:2f:55:c8:03:70:ec:14:3b:7d:9a:c2:11:
                    e3:7d:39:7c:b7:63:5f:8b:2f:99:c8:05:71:96:d5:
                    4c:5e:0e:e3:6d:b7:7d:78:30:5e:9f:38:c1:a2:d1:
                    30:e1:7c:83:22:0e:96:90:b2:b1:02:d6:d9:fa:c2:
                    ab:b0:39:a4:27:07:62:09:c7:4a:26:6c:84:34:36:
                    93:61:66:4c:91:34:94:17:4e:ce:1c:f9:97:5d:e6:
                    70:c5:2f:30:45:39:e5:f4:36:fb:19:63:99:5c:2a:
                    a5:77:08:d7:2b:31:8c:40:5f:0a:0e:00:73:01:1e:
                    b6:28:fe:5a:b1:1c:f9:7c:5d:51:7a:57:4b:3e:82:
                    75:a0:fd:44:1b:b0:d5:45:5e:fb:05:01:c4:e6:6a:
                    99:e3:18:03:eb:9b:4d:df:15:01:54:50:8a:29:cb:
                    00:4a:78:0c:b8:83:c6:e7:07:7b:0a:ab:98:32:f9:
                    72:66:e9:95:2e:b0:4b:c6:cc:6d:ef:9b:ce:bb:88:
                    91:a8:1d:60:07:34:bd:b3:96:54:84:84:0b:c4:1d:
                    93:71:ab:9c:b4:09:2b:52:c4:14:fa:ee:2c:49:5b:
                    b9:f0:37:41:7f:86:2d:35:1a:ec:13:53:eb:83:2b:
                    b7:2c:e0:72:4b:67:4b:14:9b:90:3a:33:0b:1b:bb:
                    1b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EC:DC:D7:1A:5C:C7:1A:45:A0:03:99:CD:D5:01:E1:5B:0B:55:09
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137302e38322e3133342e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:a3:5d:7d:9c:82:0f:8e:bd:21:a2:a9:77:82:e7:ac:b1:f5:
         ee:59:c8:42:e3:19:0d:b6:f9:5c:4d:2a:27:55:03:41:94:75:
         34:5c:ef:8d:39:f3:27:82:64:66:ba:50:59:5b:26:79:31:fe:
         f9:d6:c3:4c:33:55:01:77:e9:f8:c6:07:99:ff:96:26:da:da:
         06:1d:a0:c6:ad:49:ef:96:ef:91:cc:65:ae:3a:25:7f:a1:58:
         a8:ac:6b:66:2c:eb:7a:d3:87:39:eb:16:cb:fa:e9:6a:80:d1:
         f5:0f:5e:aa:a7:bb:31:43:7f:d5:f2:e0:bb:27:fc:c0:26:4b:
         e4:db:90:57:13:fe:4a:96:20:32:ff:69:94:81:9c:08:df:cb:
         c3:09:7e:21:c0:3c:32:5c:d2:67:89:40:ce:b9:7f:74:bc:f4:
         0f:7f:c7:d9:b1:9d:f5:26:f5:b3:15:ef:33:01:e4:ab:1b:f3:
         72:fd:4a:61:97:0f:87:d3:a7:4d:2c:6e:59:25:3f:dc:64:ee:
         8f:86:34:2e:f7:67:aa:cc:5c:21:50:7a:d7:09:39:78:e6:7d:
         32:10:ce:a5:19:f9:4e:ef:85:4e:ab:91:fa:d3:d6:87:67:76:
         72:57:fa:80:50:15:ba:1c:a3:39:be:80:4c:8b:63:d4:10:ff:
         8a:75:be:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:43 2024 by rpki-client on console-fra.rpki-client.org