Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33322e302f31392d3139203d3e20323633333437.roa
File:                     3139312e33372e33322e302f31392d3139203d3e20323633333437.roa (raw, json)
Hash identifier:          oNMNLAE64fOU2mTwq4LMPwPkryly60cBaApbDaZxnUU=
Subject key identifier:   7E:FF:ED:9C:16:89:73:1C:2B:B3:04:BE:36:FC:6B:4C:CE:7B:1E:D0
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       2DD3714C49A2320FC217C7761B9EB188A264E615
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33322e302f31392d3139203d3e20323633333437.roa
Signing time:             Thu 04 Apr 2024 17:40:27 +0000
ROA not before:           Thu 04 Apr 2024 17:35:27 +0000
ROA not after:            Thu 03 Apr 2025 17:40:27 +0000
asID:                     263347
IP address blocks:        191.37.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d3:71:4c:49:a2:32:0f:c2:17:c7:76:1b:9e:b1:88:a2:64:e6:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Apr  4 17:35:27 2024 GMT
            Not After : Apr  3 17:40:27 2025 GMT
        Subject: CN=7EFFED9C1689731C2BB304BE36FC6B4CCE7B1ED0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:86:2b:c2:11:3b:04:56:d4:01:b6:3f:f0:b9:
                    95:70:f4:96:27:f1:67:41:19:c8:57:cf:ea:67:6e:
                    03:c4:19:61:df:4f:1b:10:f8:c5:53:34:3d:4b:e8:
                    89:dd:c1:07:4a:03:e8:9f:21:59:0a:1f:2d:37:da:
                    57:ce:b5:65:7b:1e:38:f7:60:50:ef:0d:bf:5e:55:
                    23:8c:60:57:98:a6:93:ab:23:6d:a1:24:d4:d4:4f:
                    37:62:bc:51:61:ef:eb:ff:00:9d:15:f1:be:e7:ca:
                    00:33:09:d5:f3:e3:cd:45:77:90:c9:d6:77:54:2a:
                    91:50:e5:8c:e8:1e:66:84:f4:41:a0:4e:59:b2:c9:
                    8d:5b:f5:1d:69:3c:a8:39:34:d5:bd:e7:97:3d:a6:
                    b5:03:94:b9:fb:32:8c:72:d7:11:94:c7:a2:4e:a2:
                    80:2d:2f:6e:21:dd:26:72:cc:c9:f0:9d:b7:40:fc:
                    9e:10:01:03:39:ac:bb:68:a5:f2:ba:d8:43:65:ee:
                    9c:23:36:c5:4f:69:b7:f2:55:0b:ea:13:e3:d3:f4:
                    c2:7e:cd:7c:ad:e8:30:fb:d8:40:91:b4:a2:04:96:
                    c1:5e:6b:ed:f1:6a:2e:4b:1f:7b:60:08:28:ad:9e:
                    20:13:22:c1:58:bf:61:04:97:25:ae:a6:06:81:5a:
                    81:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:FF:ED:9C:16:89:73:1C:2B:B3:04:BE:36:FC:6B:4C:CE:7B:1E:D0
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33322e302f31392d3139203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         12:78:ce:35:27:95:e7:ef:52:e7:6e:ca:2a:dc:da:01:76:b4:
         f7:49:56:7e:29:4b:ea:d1:1e:10:92:3b:d9:d5:77:50:23:b0:
         8b:1d:43:81:af:40:08:9b:ee:76:7b:27:4e:e3:84:39:84:90:
         22:cc:c8:25:0a:8f:e9:82:1c:2b:8d:d0:2e:26:52:71:ec:d8:
         a8:e3:49:70:de:27:25:1d:62:12:e1:3d:1a:46:ca:ed:7f:95:
         5b:d0:79:39:7a:01:83:4c:e3:85:7b:c4:8c:61:fb:03:23:ae:
         a8:bf:24:91:3b:f8:a5:73:31:17:a6:24:c0:5b:a0:a2:b1:5b:
         6c:d9:59:7d:bf:db:fb:9c:53:ce:19:12:ba:5d:9c:42:54:62:
         fb:66:45:9e:fb:67:e3:98:c7:23:79:35:c3:82:9c:c9:05:13:
         85:91:82:14:e8:32:e5:06:b6:f7:2c:74:23:e7:03:3a:59:c0:
         f7:ee:ed:8f:38:ff:9f:e8:1a:74:fb:28:55:f0:f3:cb:b2:66:
         47:13:5f:5a:75:dc:90:a1:9d:6d:ad:da:3f:fb:49:92:51:0c:
         c9:4d:f9:f9:db:51:56:c2:78:08:1e:a5:50:7a:34:2c:8e:f0:
         08:5e:a6:e2:43:42:cb:5b:dd:bc:23:35:a8:58:65:2a:aa:ce:
         e8:b4:9c:76
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULdNxTEmiMg/CF8d2G56xiKJk5hUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMwOTE2Njk3Q0M3N0ExQTg3NkU0ODY1QkUwMkY1NUE4
RUZGOUJGMjAeFw0yNDA0MDQxNzM1MjdaFw0yNTA0MDMxNzQwMjdaMDMxMTAvBgNV
BAMTKDdFRkZFRDlDMTY4OTczMUMyQkIzMDRCRTM2RkM2QjRDQ0U3QjFFRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWhivCETsEVtQBtj/wuZVw9JYn
8WdBGchXz+pnbgPEGWHfTxsQ+MVTND1L6IndwQdKA+ifIVkKHy032lfOtWV7Hjj3
YFDvDb9eVSOMYFeYppOrI22hJNTUTzdivFFh7+v/AJ0V8b7nygAzCdXz481Fd5DJ
1ndUKpFQ5YzoHmaE9EGgTlmyyY1b9R1pPKg5NNW955c9prUDlLn7Moxy1xGUx6JO
ooAtL24h3SZyzMnwnbdA/J4QAQM5rLtopfK62ENl7pwjNsVPabfyVQvqE+PT9MJ+
zXyt6DD72ECRtKIElsFea+3xai5LH3tgCCitniATIsFYv2EElyWupgaBWoEzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUfv/tnBaJcxwrswS+NvxrTM57HtAwHwYDVR0j
BBgwFoAUAwkWaXzHehqHbkhlvgL1Wo7/m/IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVeWFzTm5lVW1TcXhESnVwZG15c3dteUtSdENHZEt0dmtQODUxSHh5
ZEMvMS8wMzA5MTY2OTdDQzc3QTFBODc2RTQ4NjVCRTAyRjU1QThFRkY5QkYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzMDkxNjY5N0NDNzdBMUE4
NzZFNDg2NUJFMDJGNTVBOEVGRjlCRjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVXlhc05uZVVtU3F4REp1cGRteXN3bXlLUnRDR2RLdHZrUDg1MUh4eWRDLzEv
MzEzOTMxMmUzMzM3MmUzMzMyMmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzIzNjMz
MzMzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQFvyUgMA0GCSqGSIb3DQEBCwUAA4IBAQASeM41J5Xn
71Lnbsoq3NoBdrT3SVZ+KUvq0R4QkjvZ1XdQI7CLHUOBr0AIm+52eydO44Q5hJAi
zMglCo/pghwrjdAuJlJx7Nio40lw3iclHWIS4T0aRsrtf5Vb0Hk5egGDTOOFe8SM
YfsDI66ovySRO/ilczEXpiTAW6CisVts2Vl9v9v7nFPOGRK6XZxCVGL7ZkWe+2fj
mMcjeTXDgpzJBROFkYIU6DLlBrb3LHQj5wM6WcD37u2POP+f6Bp0+yhV8PPLsmZH
E19addyQoZ1trdo/+0mSUQzJTfn521FWwngIHqVQejQsjvAIXqbiQ0LLW928IzWo
WGUqqs7otJx2
-----END CERTIFICATE-----
Generated at Tue Nov 26 09:48:02 2024 by rpki-client on console-ams.rpki-client.org