Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33362e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e33362e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          vMhHG0qPjuHpq9doIX7W22Ybsd8n/wWM3xrPZfURt2o=
Subject key identifier:   21:37:D9:DE:C3:A7:C8:17:B3:2D:A4:0D:BB:32:F5:26:DE:30:73:DE
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       448E068CD9F64CEB50B2ADE362931C13583B4AF3
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33362e302f32342d3234203d3e20323633333437.roa
Signing time:             Fri 08 Nov 2024 13:52:26 +0000
ROA not before:           Fri 08 Nov 2024 13:47:26 +0000
ROA not after:            Fri 07 Nov 2025 13:52:26 +0000
asID:                     263347
IP address blocks:        191.37.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8e:06:8c:d9:f6:4c:eb:50:b2:ad:e3:62:93:1c:13:58:3b:4a:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Nov  8 13:47:26 2024 GMT
            Not After : Nov  7 13:52:26 2025 GMT
        Subject: CN=2137D9DEC3A7C817B32DA40DBB32F526DE3073DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:93:13:21:3c:be:4e:4b:b3:db:02:51:a2:47:
                    94:92:80:15:fa:b3:09:0b:01:d6:3a:3a:34:cc:b7:
                    17:80:76:be:27:ec:1e:86:9f:c3:71:50:97:aa:e7:
                    c0:30:8d:40:1c:4a:17:94:c5:6d:60:e1:64:ef:1c:
                    21:ce:74:16:4f:27:74:a5:e3:09:4d:a3:6b:64:5b:
                    a9:43:26:1f:f2:58:36:81:80:4d:6b:06:0e:cf:7b:
                    c4:2d:28:09:ed:b3:ff:36:aa:6a:c7:43:1c:cb:7e:
                    aa:67:2d:b0:67:51:06:69:bc:83:35:14:92:e9:a9:
                    d4:48:08:bd:05:25:6c:06:30:f2:7a:b5:3f:8c:cc:
                    74:f5:c6:ab:2c:d9:57:2a:42:fc:9b:cb:a7:03:26:
                    78:2f:5b:66:8e:3e:f1:cb:90:12:e5:4c:89:88:42:
                    f6:8f:fa:ad:5d:99:97:c0:39:b1:bc:be:57:51:e5:
                    0b:69:00:bf:91:5c:75:b1:73:37:3e:20:85:63:f2:
                    6f:6b:ac:d4:45:a0:2b:7a:5a:d5:e5:b2:b7:ab:64:
                    ec:71:98:3a:fb:e8:96:08:03:6b:53:95:48:4d:d6:
                    0c:ae:72:f1:1d:2d:16:e9:84:ab:aa:9d:1d:fd:e9:
                    91:0f:59:90:00:1c:fe:3e:cb:50:a6:e8:34:00:6a:
                    18:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:37:D9:DE:C3:A7:C8:17:B3:2D:A4:0D:BB:32:F5:26:DE:30:73:DE
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33362e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:50:ce:e4:b4:29:48:b4:e6:ed:82:0a:72:c0:a8:6a:6f:77:
         5e:bd:67:77:40:2f:dc:a3:b5:50:b0:e6:3b:ae:6f:d1:70:b1:
         a3:62:de:b7:6c:6e:fc:8d:44:c2:cb:df:8e:0e:68:52:00:f9:
         57:5a:98:52:a4:52:d9:f9:ca:a6:13:3b:8a:be:ab:ff:4f:57:
         f0:a4:81:5f:2c:92:75:d5:43:e8:b5:96:d6:a2:c0:f7:0c:91:
         3f:66:5c:b1:b9:76:43:81:71:fb:e8:e9:4e:9a:c6:b9:7d:2c:
         4d:79:ee:cb:ef:68:01:1c:1d:18:d9:54:d4:43:b3:fb:15:86:
         cd:bd:1e:88:65:fc:af:b1:eb:85:82:cc:32:00:29:7a:45:2f:
         ad:6c:fd:96:a9:09:9a:1e:2d:34:af:41:da:94:5c:37:9c:16:
         ce:61:7b:23:54:c5:00:c7:df:6d:2f:74:f7:13:d2:68:31:d0:
         dd:37:11:30:89:45:a1:db:31:35:5a:77:44:db:ec:d7:8a:38:
         43:60:3f:72:63:f9:87:01:60:ae:6a:e0:2d:c8:48:c2:1c:9a:
         f2:c1:10:24:83:ce:ce:a6:84:9f:1a:41:6e:46:c6:2b:0f:09:
         3b:e0:ba:a4:c2:88:3c:1f:ab:65:f8:2a:08:32:19:b0:04:01:
         cf:e5:98:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:26 2024 by rpki-client on console-fra.rpki-client.org