Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33352e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e33352e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          5tHrr4IABSe9Zr1b9nIvjmO0/6EdOoEmoS4OMyXLhLY=
Subject key identifier:   73:92:EF:70:1B:45:9C:F4:55:68:45:25:A6:BC:57:2F:E4:D3:AA:D7
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       2605742CC4FAFC0BB39DAF92E45CEB1C845A8DCF
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33352e302f32342d3234203d3e20323633333437.roa
Signing time:             Fri 08 Nov 2024 13:52:08 +0000
ROA not before:           Fri 08 Nov 2024 13:47:08 +0000
ROA not after:            Fri 07 Nov 2025 13:52:08 +0000
asID:                     263347
IP address blocks:        191.37.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:05:74:2c:c4:fa:fc:0b:b3:9d:af:92:e4:5c:eb:1c:84:5a:8d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Nov  8 13:47:08 2024 GMT
            Not After : Nov  7 13:52:08 2025 GMT
        Subject: CN=7392EF701B459CF455684525A6BC572FE4D3AAD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:59:83:4d:85:b8:ec:be:5c:16:85:0e:22:a2:
                    bf:c2:80:24:f1:3a:71:3c:e6:13:d6:ab:27:67:82:
                    83:af:bd:83:52:f7:e1:8b:c4:26:6b:55:68:77:24:
                    32:02:bb:a9:3e:c8:94:08:21:93:f7:ea:b4:e1:81:
                    2c:e9:95:9c:ad:d2:62:85:35:8c:9e:d2:58:5f:b5:
                    07:10:78:09:52:c5:a0:b1:a8:be:4d:d7:b8:37:c3:
                    c5:b9:17:2a:aa:2c:9a:7b:79:93:ed:8f:44:51:cb:
                    db:2b:84:36:34:dd:a5:62:10:1b:a5:06:da:0a:e2:
                    4a:12:3b:b1:17:57:4f:c8:b3:be:4c:f1:13:29:c9:
                    06:95:ca:1d:61:fe:c0:10:97:11:b3:81:a4:72:81:
                    3b:29:bf:42:d6:c0:22:83:82:df:55:59:12:a6:1c:
                    9b:a5:57:24:58:f1:44:43:86:33:41:f5:1d:a1:1e:
                    2b:6f:5b:95:c5:4b:c0:85:a7:f4:8c:69:d6:1e:f7:
                    e3:16:c6:ea:7f:46:c7:ad:7a:cd:fd:c3:7b:6a:6e:
                    be:07:8c:a6:bd:a1:40:98:f1:b5:f3:96:f4:83:b3:
                    d9:3e:0d:0b:91:28:74:78:aa:66:7b:16:d9:32:ed:
                    c0:a8:b8:70:65:33:fe:f5:3c:96:e9:b8:e2:25:78:
                    bc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:92:EF:70:1B:45:9C:F4:55:68:45:25:A6:BC:57:2F:E4:D3:AA:D7
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33352e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:04:f0:38:de:c5:02:51:fa:79:f1:b2:a0:f3:c9:20:c4:1e:
         52:7e:c7:81:5b:fd:59:97:c9:5d:a5:c6:d3:c3:0d:b9:33:72:
         a5:27:d6:97:ac:7e:3c:88:53:d1:b6:6b:d0:a2:ab:d1:df:5f:
         a0:7d:c8:29:38:13:93:d5:b0:90:69:ff:81:44:82:8b:e1:03:
         8e:84:4e:f3:6b:59:91:84:2f:48:95:e4:1e:0e:92:1b:89:5f:
         2c:4f:b5:0f:68:ca:7f:6a:49:7c:33:78:30:02:48:21:fd:e8:
         29:73:22:2a:ee:41:ea:c3:93:49:4d:6d:f1:61:c5:6c:95:89:
         d0:e3:61:e3:a3:10:bd:4d:d1:55:cf:c9:4b:8b:40:b7:ac:04:
         f0:28:df:ac:f4:95:d8:c4:d3:0b:b2:ef:ef:01:89:53:af:ed:
         95:2c:75:fb:a9:53:fd:40:0f:23:e9:74:fc:38:38:d2:8c:85:
         1b:78:b8:5c:7b:51:f0:73:97:b3:40:9a:93:d1:d4:04:94:2b:
         e8:3e:c6:37:b5:3c:cc:99:64:fe:33:e3:24:b7:27:a7:78:87:
         67:65:8e:90:98:d3:24:cf:b8:7b:65:31:e1:59:88:45:e5:1f:
         19:de:18:7c:a1:f2:88:75:fd:f2:4c:3b:0c:30:84:95:82:79:
         05:23:cb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:00 2024 by rpki-client on console-ams.rpki-client.org