Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33342e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e33342e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          vSEYJNGVxkP+FcET5WqpmPjk9pg7cikGkrZILjEJSfs=
Subject key identifier:   AA:A7:7F:57:2B:6C:A0:7B:1D:1D:18:3C:67:B0:B3:43:34:1E:29:AA
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       57E26CF2D1018697DE4A292A881DA0E615196647
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33342e302f32342d3234203d3e20323633333437.roa
Signing time:             Fri 08 Nov 2024 13:51:55 +0000
ROA not before:           Fri 08 Nov 2024 13:46:55 +0000
ROA not after:            Fri 07 Nov 2025 13:51:55 +0000
asID:                     263347
IP address blocks:        191.37.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e2:6c:f2:d1:01:86:97:de:4a:29:2a:88:1d:a0:e6:15:19:66:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Nov  8 13:46:55 2024 GMT
            Not After : Nov  7 13:51:55 2025 GMT
        Subject: CN=AAA77F572B6CA07B1D1D183C67B0B343341E29AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:44:a7:08:45:cd:34:2b:0e:da:f4:fa:10:5a:
                    bf:ae:6c:b3:5b:88:85:c5:37:7a:c6:6e:de:be:c6:
                    08:50:86:77:8e:43:33:c5:a0:d7:c2:6d:d9:dc:1e:
                    f3:74:48:85:c7:15:98:19:ad:ff:7d:ef:41:f7:e5:
                    29:1c:68:b1:03:bf:ca:f3:25:ce:08:83:c0:df:76:
                    9f:c4:46:57:19:bb:26:3a:3d:41:23:d6:3d:2d:6f:
                    e5:f8:ee:b5:bf:39:50:91:49:f3:97:05:b8:17:ca:
                    08:05:2d:06:ef:32:1a:12:1d:0a:17:75:36:65:80:
                    1c:8f:89:d3:33:00:82:4e:e5:8f:c0:ff:05:e4:45:
                    d2:ad:c0:e9:b1:7f:85:92:18:ca:55:b9:b8:98:0d:
                    45:01:ab:0d:6b:74:3e:8a:d5:04:8f:b0:6e:10:6d:
                    c9:91:11:8a:95:0c:70:92:fc:55:4c:7d:54:51:53:
                    b5:73:f3:a0:a4:3c:31:75:81:83:72:7a:b6:9f:eb:
                    ca:d4:12:e8:e8:68:21:30:21:f7:ab:17:d4:fa:39:
                    52:b6:d1:a3:36:ed:dd:f6:30:d1:d0:42:0b:e8:c0:
                    81:cd:f3:0b:dd:e2:ec:93:5d:3c:70:78:dc:45:c4:
                    cd:e6:37:d8:66:31:a5:00:a6:45:b6:f1:6c:fe:b4:
                    a3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A7:7F:57:2B:6C:A0:7B:1D:1D:18:3C:67:B0:B3:43:34:1E:29:AA
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33342e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:f2:51:b0:61:dd:3b:8e:f1:29:7f:df:71:45:8e:3f:be:e3:
         b6:c9:bf:15:8a:89:87:51:af:0b:24:2e:f3:05:33:3a:96:ed:
         ac:47:f5:f3:2d:b7:a2:90:6e:90:46:51:dd:c2:5d:07:0b:20:
         82:8c:e4:5c:63:a9:b0:4e:5e:b4:b6:78:a1:b0:cb:6b:5e:0b:
         24:b2:64:1d:26:84:cd:87:28:a2:57:64:f9:84:7a:83:e9:8d:
         de:6b:81:56:57:0a:94:6c:d5:7c:06:15:d7:85:3f:ad:ea:49:
         48:42:ae:1d:d7:6c:56:14:d7:73:42:f0:cd:0d:fd:a7:91:be:
         21:ed:03:2b:c3:8c:45:dc:90:87:af:bb:c6:10:7d:00:44:0b:
         0d:22:ee:43:1e:c1:7e:27:f0:13:76:f5:12:11:f1:a1:f0:e9:
         96:d0:64:95:92:7c:ff:75:c3:d2:26:0b:65:72:4b:1c:1a:bc:
         d9:e1:ff:7a:16:1d:c2:ac:7c:e5:88:df:72:31:91:84:3e:a2:
         ed:df:8e:96:65:5b:b2:b1:e2:3e:f9:72:ca:fe:44:cd:9a:c2:
         54:be:82:53:be:c4:8d:ed:0f:f7:7c:5b:18:4e:5a:55:51:37:
         c3:d4:a8:d1:39:29:aa:de:f0:7d:aa:70:cf:76:5f:db:f2:a8:
         62:76:a0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:00 2024 by rpki-client on console-ams.rpki-client.org