Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137302e38322e3133352e302f32342d3234203d3e20323632343933.roa
File:                     3137302e38322e3133352e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          XqLWAmiNqI/hjPfA4DBK/X33WXLMvGv7PS1WHtkaa2s=
Subject key identifier:   F0:EA:82:74:75:3E:0C:3A:BD:92:D1:65:BD:19:11:C7:84:34:10:14
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       7F442ED626F0F14DC8BB902A63A5E73FB73189C4
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137302e38322e3133352e302f32342d3234203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:40 +0000
ROA not before:           Thu 07 Nov 2024 20:49:40 +0000
ROA not after:            Thu 06 Nov 2025 20:54:40 +0000
asID:                     262493
IP address blocks:        170.82.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:44:2e:d6:26:f0:f1:4d:c8:bb:90:2a:63:a5:e7:3f:b7:31:89:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:40 2024 GMT
            Not After : Nov  6 20:54:40 2025 GMT
        Subject: CN=F0EA8274753E0C3ABD92D165BD1911C784341014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e0:33:2e:81:44:ef:c4:5f:39:37:43:51:7b:
                    64:2e:b7:90:b1:e7:31:70:17:bc:11:11:30:84:a8:
                    9c:5e:d1:8b:c4:c1:98:b9:9f:d7:4f:f7:99:db:5e:
                    b4:77:82:07:79:38:40:95:1f:98:d8:7a:b8:50:29:
                    b6:c6:2f:3f:ca:d9:60:1c:ad:37:b8:51:a7:98:83:
                    e8:18:72:db:e0:7e:9e:0f:1a:10:f1:e4:8a:60:ae:
                    bc:3e:9d:b8:46:20:8d:b5:5a:94:d0:34:24:7a:e9:
                    57:54:cd:1e:7b:22:cb:3b:9b:39:c5:23:d5:a1:03:
                    1c:cc:cd:47:4f:81:7b:23:79:bd:41:d2:94:dc:09:
                    14:d2:eb:cb:36:cf:ce:60:61:9b:a4:64:61:61:cf:
                    0e:50:68:73:80:ea:0f:ee:60:54:ec:a0:3c:b6:69:
                    d6:d8:25:44:1d:41:04:b8:e5:28:bc:9a:81:a4:08:
                    a8:bb:9e:c8:37:fa:97:69:83:62:40:c5:2a:5d:89:
                    5b:cb:43:43:a1:c0:38:c9:9f:ec:51:db:65:fa:53:
                    29:13:6f:30:e7:88:ee:b1:65:a6:69:c9:11:37:81:
                    e4:e0:5b:1c:4f:cc:99:94:a3:d4:a3:a2:cc:23:56:
                    48:14:79:83:da:fb:73:c8:3b:8e:f1:48:ac:12:6e:
                    c7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:EA:82:74:75:3E:0C:3A:BD:92:D1:65:BD:19:11:C7:84:34:10:14
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137302e38322e3133352e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:e0:d2:92:a9:cf:df:6b:3a:db:e2:a1:4c:f5:f6:95:dc:5e:
         8b:c6:a4:dc:0d:93:e9:3a:cd:9e:52:1d:e7:4b:19:0d:e2:d6:
         74:6c:9f:fc:6a:dc:0e:38:70:6a:75:e9:39:f0:e1:1c:a5:3b:
         36:ab:34:27:c9:d3:64:0b:03:b8:4e:82:ab:87:59:86:86:01:
         aa:9b:dd:b8:04:b8:0d:45:41:bd:d6:ac:b6:60:2b:35:b9:9f:
         6c:17:68:6d:4a:94:b6:cd:47:98:21:15:ed:b8:4c:06:d8:7b:
         ae:dd:cf:64:44:56:51:bb:d1:2a:a7:1e:fb:5b:18:42:d9:1d:
         03:be:be:75:76:ef:ec:5b:6f:42:41:ec:f9:8e:5d:6a:04:ef:
         0f:f8:ed:2b:45:58:70:a5:1e:3f:36:22:e5:10:c0:9b:33:64:
         e0:df:08:8b:f7:41:8e:8e:8c:e8:2f:53:16:55:ed:52:39:44:
         9a:05:20:b0:eb:d2:a6:3e:21:32:18:b4:fc:77:1a:76:62:7d:
         ee:55:c4:4e:71:04:5d:e1:67:6d:fc:50:46:8e:ca:05:2e:e8:
         ee:1d:2b:62:6f:61:75:ed:e3:25:e4:50:57:40:ce:bd:03:9a:
         15:75:0b:cb:e3:97:4a:80:30:f1:c9:5b:2e:be:32:14:36:6c:
         49:3f:20:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org