Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33342e302f32332d3233203d3e20323633333437.roa
File:                     3139312e33372e33342e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          jjeR+t53cRQgw9ZCEUiIu02j5JaGvOpHxe4V9BhapDk=
Subject key identifier:   BC:C0:BF:D7:0D:4E:1D:72:B0:F8:65:09:3B:DE:B0:14:C9:38:08:2F
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       6EAA8DFBCAA5F39C5E86B46B3D273225B5A9171C
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33342e302f32332d3233203d3e20323633333437.roa
Signing time:             Thu 04 Apr 2024 17:40:29 +0000
ROA not before:           Thu 04 Apr 2024 17:35:29 +0000
ROA not after:            Thu 03 Apr 2025 17:40:29 +0000
asID:                     263347
IP address blocks:        191.37.34.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:aa:8d:fb:ca:a5:f3:9c:5e:86:b4:6b:3d:27:32:25:b5:a9:17:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Apr  4 17:35:29 2024 GMT
            Not After : Apr  3 17:40:29 2025 GMT
        Subject: CN=BCC0BFD70D4E1D72B0F865093BDEB014C938082F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:82:b7:ba:0e:e8:19:8f:e0:17:06:d9:19:6c:
                    8a:56:3f:ed:f1:87:f8:9c:f9:24:73:4f:08:4f:8d:
                    ad:ef:ad:e0:b2:58:d3:5f:09:9b:38:11:58:30:a3:
                    e6:18:5e:88:25:5a:80:93:17:b0:2b:3e:ab:23:41:
                    a2:f3:d4:47:db:41:00:b4:c7:09:de:2a:b8:de:c2:
                    e3:b0:2e:fd:5a:5f:7f:51:df:84:25:64:da:58:e0:
                    bd:ab:0f:ff:02:23:cc:4f:b0:81:27:23:f3:c4:a4:
                    39:16:4e:65:67:43:61:c5:5c:11:87:6c:d5:dc:f0:
                    10:9d:b3:e8:f0:d4:59:eb:c0:fa:1d:f8:d5:83:cf:
                    74:f8:f8:f4:ba:35:08:11:e6:60:2d:a7:74:fc:df:
                    3f:24:df:cc:84:09:8f:23:28:03:1f:22:bc:51:b5:
                    35:72:73:66:75:39:b4:d5:ed:5f:c9:3a:90:d6:f4:
                    da:c5:8d:12:2e:50:25:b4:66:c6:c1:d5:c2:09:cf:
                    ba:03:14:ae:9e:b9:a0:fc:28:ee:b5:f0:eb:f5:eb:
                    e4:b2:9b:54:5b:f2:3a:d3:56:df:6b:45:31:9c:a2:
                    59:3f:28:22:66:62:41:dc:07:63:70:30:b6:20:1c:
                    90:0b:e1:03:11:d9:de:45:1c:5e:33:cf:35:7c:86:
                    5a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C0:BF:D7:0D:4E:1D:72:B0:F8:65:09:3B:DE:B0:14:C9:38:08:2F
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33342e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:4a:48:78:f0:a3:36:89:27:77:26:f6:2f:5f:f2:06:b6:af:
         27:21:d0:52:90:82:54:bf:bc:4f:e1:92:a2:7a:dd:0b:f4:7e:
         b7:3c:f7:ca:07:41:a0:26:22:96:af:b1:4d:3c:ce:83:59:4b:
         48:63:73:97:82:69:73:55:f9:a5:92:9a:3a:c0:13:6c:f1:96:
         42:8a:93:0f:26:b2:bd:12:fa:e1:c8:62:33:54:26:6e:9b:49:
         bc:ca:c4:8d:73:89:71:6b:74:16:8e:13:7a:4d:8d:90:76:91:
         cb:8e:82:4d:63:d8:d7:ca:8b:a5:90:b2:99:8c:b2:dc:90:e5:
         7e:51:19:a5:d8:80:95:d1:a1:ae:a7:e2:d8:2d:8b:40:e0:5c:
         c5:34:fe:4a:c4:00:16:d1:d9:a5:db:e2:18:9c:14:7c:a4:f1:
         13:6d:f9:a6:ff:90:ab:58:04:1c:33:d0:37:2e:20:e2:d7:7e:
         7c:e3:d1:a4:59:68:00:75:cf:1b:a0:66:d9:bd:0a:e7:f9:9d:
         f5:6c:47:91:99:0d:27:22:24:8e:7e:78:06:a7:1a:14:d6:74:
         c0:e5:2d:22:8c:5a:53:56:bb:18:9c:d4:b1:64:70:0d:c2:20:
         b4:12:90:2e:ee:ec:3d:a3:bd:48:f2:3f:4d:28:1f:35:47:8c:
         1f:58:85:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:00 2024 by rpki-client on console-ams.rpki-client.org