Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34302e302f32332d3233203d3e20323633333437.roa
File:                     3139312e33372e34302e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          6MpbKPBQjUFyH8zW6KIY1aKmDpmy1J+YmjsNcVbH3ys=
Subject key identifier:   C2:48:9C:49:A2:F5:AA:4B:39:26:BA:25:67:D2:AD:48:F7:6F:EF:E4
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       18AA2284BB3D168A845899B1223F4F32DF1FCA83
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34302e302f32332d3233203d3e20323633333437.roa
Signing time:             Thu 06 Mar 2025 18:28:46 +0000
ROA not before:           Thu 06 Mar 2025 18:23:46 +0000
ROA not after:            Thu 05 Mar 2026 18:28:46 +0000
asID:                     263347
IP address blocks:        191.37.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 21:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:aa:22:84:bb:3d:16:8a:84:58:99:b1:22:3f:4f:32:df:1f:ca:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Mar  6 18:23:46 2025 GMT
            Not After : Mar  5 18:28:46 2026 GMT
        Subject: CN=C2489C49A2F5AA4B3926BA2567D2AD48F76FEFE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f3:9a:51:8b:9a:c4:b3:86:ea:80:b5:72:e9:
                    0a:0a:28:0e:3f:b2:ab:4f:34:da:e2:47:52:be:70:
                    9c:49:92:e4:bd:e7:df:f3:25:7c:b7:7c:6f:98:92:
                    fe:24:a2:be:b3:ea:b3:cc:6a:2b:95:0d:80:32:ac:
                    b8:86:78:41:61:c5:b8:06:c5:10:69:56:df:24:9b:
                    e6:44:92:65:28:c6:83:be:af:0c:d4:22:d0:62:05:
                    7c:1c:aa:07:ca:0f:06:77:1f:de:bd:13:f4:3d:2b:
                    59:93:e7:6c:70:17:30:d5:f2:05:ea:78:06:e0:ae:
                    a3:99:45:bc:ea:af:43:96:a7:1c:56:a6:b8:05:a3:
                    ca:08:e1:63:ac:08:f0:0f:e0:78:81:1a:44:60:e0:
                    4b:dd:01:bd:f9:8f:84:0a:50:ae:ef:b0:8f:ac:76:
                    ce:fd:13:57:f2:d9:bd:6a:06:75:ee:20:9b:85:ee:
                    b2:ab:09:17:16:8d:83:49:77:98:ee:84:bf:0e:28:
                    0f:0f:a1:31:da:e8:2b:44:0c:c4:3c:23:17:86:38:
                    bf:ec:9a:e9:9e:e6:88:38:21:2e:35:4f:28:46:5e:
                    c2:d4:1f:ff:2f:cd:ca:36:15:01:84:87:07:c4:ac:
                    6a:0d:0e:13:b2:61:c7:ce:3b:14:91:a7:b9:3c:bf:
                    b1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:48:9C:49:A2:F5:AA:4B:39:26:BA:25:67:D2:AD:48:F7:6F:EF:E4
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34302e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:8c:59:6b:06:a3:95:e5:7a:72:ed:65:22:f6:2e:f9:79:3e:
         26:a6:6a:f5:ee:1f:1d:4d:0a:af:c9:ed:64:3a:c9:de:95:80:
         a0:a9:14:9c:f0:98:8a:44:2f:cc:29:43:ba:f7:16:93:ba:8d:
         06:a9:79:7c:53:22:01:dd:9a:c1:f7:2f:d2:46:10:d9:c5:1a:
         20:d6:56:4f:6d:ba:b5:e6:e0:d2:b7:93:f7:80:35:dc:50:04:
         0a:28:a6:f9:7b:65:d6:ef:92:38:c0:f4:da:1b:63:93:0d:6b:
         e5:e6:c4:b4:d6:af:00:03:52:4f:c7:70:11:c5:bc:0e:59:f2:
         99:85:32:52:54:05:0d:55:2a:fd:17:05:f8:b4:2a:87:cb:e8:
         de:b9:24:5b:c9:0c:eb:ab:0e:13:ec:e8:e8:0a:98:5b:9a:d1:
         9e:82:6a:cd:f5:0c:39:24:42:df:44:e8:33:a3:ab:f5:a2:9a:
         10:33:1a:48:7b:93:57:00:13:e8:02:73:07:4a:ef:63:58:25:
         9c:77:9b:62:9e:12:6b:fc:d0:ce:cf:88:eb:aa:66:fe:ad:c3:
         62:4b:5a:7e:ff:5c:7a:ba:66:8a:00:e7:e3:f0:e2:c4:f6:4b:
         ce:73:96:e6:b0:c6:41:37:a3:a1:b9:f5:08:03:c1:e2:be:a6:
         2b:e1:ff:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:52:24 2025 by rpki-client