Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33372e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e33372e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          3eStpymLbBxb84ywiCvOixqDyKLoHIwrnQMK3TEFbAI=
Subject key identifier:   84:23:2E:C9:2C:23:6B:64:1A:E4:64:E8:72:9A:5E:56:F1:B9:6E:AB
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       3635EE01F825F33C747B07245BFDD84780EA9218
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33372e302f32342d3234203d3e20323633333437.roa
Signing time:             Fri 08 Nov 2024 13:52:56 +0000
ROA not before:           Fri 08 Nov 2024 13:47:56 +0000
ROA not after:            Fri 07 Nov 2025 13:52:56 +0000
asID:                     263347
IP address blocks:        191.37.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:35:ee:01:f8:25:f3:3c:74:7b:07:24:5b:fd:d8:47:80:ea:92:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Nov  8 13:47:56 2024 GMT
            Not After : Nov  7 13:52:56 2025 GMT
        Subject: CN=84232EC92C236B641AE464E8729A5E56F1B96EAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:45:cc:a0:13:88:41:5d:8f:0c:94:1c:22:3c:
                    32:18:97:8b:20:91:82:cb:13:c7:d5:10:40:31:ff:
                    15:91:42:38:ae:8a:80:26:44:94:55:59:70:3e:5d:
                    35:00:bf:a3:c1:30:c6:54:29:8b:b5:1a:db:a2:01:
                    05:a1:b9:7e:f0:94:39:5f:d1:79:09:40:25:ef:a1:
                    17:68:b2:1a:ef:58:4c:b6:29:ad:e1:31:16:df:ef:
                    98:64:de:1a:8e:08:9b:6e:ac:05:6a:79:e5:c3:cb:
                    b2:d0:e7:78:7b:44:85:19:24:e0:26:43:7f:43:13:
                    5e:fe:76:7e:e1:74:fc:56:ab:dd:e0:3a:8c:ef:1d:
                    08:9a:f0:e0:07:5e:78:87:6d:00:24:ed:c3:31:36:
                    ab:7b:17:46:cd:87:8d:2b:ce:c2:34:65:20:d4:12:
                    77:94:65:54:4e:66:01:6c:96:d4:2c:b1:dc:0f:93:
                    d4:fb:2a:2b:f2:ca:01:c2:53:00:75:98:5f:49:e6:
                    03:3a:80:92:62:58:74:97:ab:a2:6e:c9:f2:9b:6d:
                    68:43:b3:ab:b1:6d:d7:d9:bb:e1:2a:83:46:55:5b:
                    a3:e0:3f:16:54:55:ee:32:35:52:75:b5:d3:06:eb:
                    37:21:49:d9:46:b5:c3:57:05:f8:6e:84:61:61:d4:
                    f4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:23:2E:C9:2C:23:6B:64:1A:E4:64:E8:72:9A:5E:56:F1:B9:6E:AB
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33372e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:34:76:07:a7:6a:d1:de:cd:fb:fe:91:03:e5:f5:62:d7:a1:
         0e:74:d4:97:3b:a5:13:53:0d:b2:de:0a:91:0c:f0:7c:16:88:
         1a:3f:13:40:62:76:16:44:21:fd:43:3a:f4:82:0f:c7:bb:ce:
         61:b6:f4:01:6f:af:07:78:cd:4b:26:12:70:32:a7:3d:86:e5:
         28:1e:07:46:cc:c8:91:a7:1d:77:71:6f:e4:3a:03:79:a7:41:
         0c:17:9e:26:4c:6c:3e:7e:8c:cf:3e:32:d4:30:4d:9f:60:ef:
         91:7e:da:c9:87:9d:84:60:c2:ba:cc:90:31:26:03:58:09:d3:
         9f:10:08:c6:43:09:52:52:8b:0b:02:02:9e:17:a9:af:21:02:
         95:c9:f7:ef:9c:a2:80:e8:2e:fd:51:54:fb:f9:3d:14:45:c3:
         6f:95:8c:26:78:96:76:33:cd:58:8c:9f:4f:2a:d8:3e:06:f0:
         37:b0:a4:a8:4a:2f:07:98:ff:89:3d:87:db:0f:ff:fd:8e:34:
         2e:a5:15:e6:58:af:47:c0:48:c2:9b:9e:a0:d3:f5:fa:28:7e:
         76:44:53:95:81:5d:cc:37:1d:cc:05:5c:29:18:fa:b5:cc:04:
         a8:33:79:7c:15:e3:10:52:07:93:48:28:5d:4c:f6:5b:14:eb:
         63:74:63:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:26 2024 by rpki-client on console-fra.rpki-client.org