Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33382e302f32332d3233203d3e20323633333437.roa
File:                     3139312e33372e33382e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          5rt0cIr0LwA3g+Oa0lK1aX4azcvJ59/gPUUSisj8du4=
Subject key identifier:   4D:70:92:3D:A1:C6:41:4C:7B:41:AD:93:6F:BD:87:C3:57:86:AA:F2
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       70F5292202A8A776F40651B62CD45638C393FFA9
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33382e302f32332d3233203d3e20323633333437.roa
Signing time:             Thu 04 Apr 2024 17:40:28 +0000
ROA not before:           Thu 04 Apr 2024 17:35:28 +0000
ROA not after:            Thu 03 Apr 2025 17:40:28 +0000
asID:                     263347
IP address blocks:        191.37.38.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f5:29:22:02:a8:a7:76:f4:06:51:b6:2c:d4:56:38:c3:93:ff:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Apr  4 17:35:28 2024 GMT
            Not After : Apr  3 17:40:28 2025 GMT
        Subject: CN=4D70923DA1C6414C7B41AD936FBD87C35786AAF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0b:56:85:f0:2f:37:d1:32:04:e7:9b:4a:4d:
                    0f:de:77:85:02:4f:67:5a:9a:5e:5b:c2:3a:93:2b:
                    92:b9:2b:f3:58:71:cf:df:74:4c:4f:02:27:db:1b:
                    0e:2f:cc:df:38:f7:90:d2:64:78:1d:20:66:15:f1:
                    cd:5e:61:5a:ac:b1:09:2d:bb:44:49:c9:ee:3b:f6:
                    ed:91:93:81:97:f0:f2:0d:88:62:46:23:5b:bb:fa:
                    6b:09:ca:56:48:f5:43:f7:d9:8c:77:ad:b4:47:23:
                    26:d3:ef:90:83:5a:3d:d9:e9:f0:4d:35:61:b0:1b:
                    1e:fc:42:05:c2:df:37:54:64:04:5e:61:ff:34:a9:
                    98:27:fc:c0:3f:b4:42:62:30:76:64:0e:fd:34:75:
                    7e:e0:30:fa:dd:2b:84:36:a6:e3:f4:a6:b5:95:8c:
                    f4:51:c8:60:fb:c1:0d:e7:73:b9:f6:ce:6c:dd:f6:
                    ec:c3:18:c0:40:d4:72:52:33:ed:56:79:97:8d:48:
                    1f:eb:dc:09:d5:b8:53:1d:51:2d:73:09:af:67:db:
                    3a:2a:4f:2d:8c:19:36:c3:39:cf:79:8b:2d:54:9d:
                    01:ba:28:63:43:4e:50:ec:79:c6:cd:f6:3d:c3:44:
                    c8:5f:3f:0f:31:82:ab:fd:fc:40:f5:e2:03:ef:3e:
                    ad:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:70:92:3D:A1:C6:41:4C:7B:41:AD:93:6F:BD:87:C3:57:86:AA:F2
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33382e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:b2:f6:43:23:5e:e4:ce:0e:fa:54:07:ae:48:09:60:9d:cf:
         03:f5:a5:ee:5f:a2:ba:88:a9:9b:fa:60:9b:8e:81:4a:77:6d:
         30:ca:b6:5c:13:b1:85:f7:e1:a9:54:15:b8:f6:44:46:2e:75:
         92:09:be:8d:cb:2a:b9:eb:3e:bb:28:e0:95:52:d0:7e:4f:42:
         6f:0f:db:5f:91:77:7c:4b:69:a1:1b:74:5f:94:c2:e6:42:94:
         37:63:b7:cc:bb:a0:68:78:3a:95:95:57:40:42:22:49:0c:cd:
         2d:ce:ac:d2:b2:18:3f:fc:9d:88:ba:40:25:77:37:92:08:e3:
         d5:b1:bb:5e:bd:92:ed:7b:01:28:12:e3:45:75:ba:38:4d:34:
         7e:e8:59:a3:7f:61:a5:99:9a:a8:e5:32:69:04:ab:66:44:99:
         0a:10:c8:3c:e5:f3:ca:ef:5e:a4:a1:69:ae:fa:d4:54:e6:29:
         cf:5d:fc:c1:dc:4a:27:bb:ed:29:ac:b3:c0:3b:e6:8e:64:9b:
         aa:8f:15:8f:36:2c:db:7d:18:8e:97:1e:cd:27:01:09:47:75:
         05:96:af:4c:52:df:c6:79:b6:05:93:9c:d8:83:6a:7b:0e:62:
         e5:87:51:8e:44:f1:62:db:1b:4a:e5:01:54:11:bd:4a:43:56:
         6b:90:65:5f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcPUpIgKop3b0BlG2LNRWOMOT/6kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMwOTE2Njk3Q0M3N0ExQTg3NkU0ODY1QkUwMkY1NUE4
RUZGOUJGMjAeFw0yNDA0MDQxNzM1MjhaFw0yNTA0MDMxNzQwMjhaMDMxMTAvBgNV
BAMTKDRENzA5MjNEQTFDNjQxNEM3QjQxQUQ5MzZGQkQ4N0MzNTc4NkFBRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIC1aF8C830TIE55tKTQ/ed4UC
T2daml5bwjqTK5K5K/NYcc/fdExPAifbGw4vzN8495DSZHgdIGYV8c1eYVqssQkt
u0RJye479u2Rk4GX8PINiGJGI1u7+msJylZI9UP32Yx3rbRHIybT75CDWj3Z6fBN
NWGwGx78QgXC3zdUZAReYf80qZgn/MA/tEJiMHZkDv00dX7gMPrdK4Q2puP0prWV
jPRRyGD7wQ3nc7n2zmzd9uzDGMBA1HJSM+1WeZeNSB/r3AnVuFMdUS1zCa9n2zoq
Ty2MGTbDOc95iy1UnQG6KGNDTlDsecbN9j3DRMhfPw8xgqv9/ED14gPvPq1/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUTXCSPaHGQUx7Qa2Tb72Hw1eGqvIwHwYDVR0j
BBgwFoAUAwkWaXzHehqHbkhlvgL1Wo7/m/IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVeWFzTm5lVW1TcXhESnVwZG15c3dteUtSdENHZEt0dmtQODUxSHh5
ZEMvMS8wMzA5MTY2OTdDQzc3QTFBODc2RTQ4NjVCRTAyRjU1QThFRkY5QkYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzMDkxNjY5N0NDNzdBMUE4
NzZFNDg2NUJFMDJGNTVBOEVGRjlCRjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVXlhc05uZVVtU3F4REp1cGRteXN3bXlLUnRDR2RLdHZrUDg1MUh4eWRDLzEv
MzEzOTMxMmUzMzM3MmUzMzM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMz
MzMzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBvyUmMA0GCSqGSIb3DQEBCwUAA4IBAQAPsvZDI17k
zg76VAeuSAlgnc8D9aXuX6K6iKmb+mCbjoFKd20wyrZcE7GF9+GpVBW49kRGLnWS
Cb6Nyyq56z67KOCVUtB+T0JvD9tfkXd8S2mhG3RflMLmQpQ3Y7fMu6BoeDqVlVdA
QiJJDM0tzqzSshg//J2IukAldzeSCOPVsbtevZLtewEoEuNFdbo4TTR+6Fmjf2Gl
mZqo5TJpBKtmRJkKEMg85fPK716koWmu+tRU5inPXfzB3Eonu+0prLPAO+aOZJuq
jxWPNizbfRiOlx7NJwEJR3UFlq9MUt/GebYFk5zYg2p7DmLlh1GORPFi2xtK5QFU
Eb1KQ1ZrkGVf
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:26 2024 by rpki-client on console-fra.rpki-client.org