Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34322e302f32332d3233203d3e20323633333437.roa
File:                     3139312e33372e34322e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          JM2scMNgKZ1CI60S6Z2/0/pPYeEvFASEq7vajAoY/Cc=
Subject key identifier:   F5:BD:0C:44:A6:99:27:26:B9:B8:6E:1E:A6:5E:D2:AA:8D:AC:38:6C
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       036F163CF87AD31495497F17D195DDA773A2BBF3
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34322e302f32332d3233203d3e20323633333437.roa
Signing time:             Thu 07 Nov 2024 15:46:59 +0000
ROA not before:           Thu 07 Nov 2024 15:41:59 +0000
ROA not after:            Thu 06 Nov 2025 15:46:59 +0000
asID:                     263347
IP address blocks:        191.37.42.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:6f:16:3c:f8:7a:d3:14:95:49:7f:17:d1:95:dd:a7:73:a2:bb:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Nov  7 15:41:59 2024 GMT
            Not After : Nov  6 15:46:59 2025 GMT
        Subject: CN=F5BD0C44A6992726B9B86E1EA65ED2AA8DAC386C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:04:7c:88:32:3c:fa:99:84:da:7a:ed:ff:c7:
                    33:8f:30:ab:89:52:2b:00:e9:77:d1:0a:01:90:d6:
                    7d:da:bc:68:79:21:4a:77:ac:21:70:19:91:d9:36:
                    79:cb:5f:96:14:ef:53:3e:76:34:93:c6:5e:71:5d:
                    96:90:fc:9b:d3:af:26:f1:63:df:96:41:48:d3:de:
                    76:85:e9:33:98:0a:c9:2d:b8:9e:53:5b:e4:1c:fc:
                    8a:43:9e:85:27:e3:f0:54:d4:07:2d:8f:65:5c:0e:
                    d0:9c:a2:1e:a7:82:f9:0c:bb:5c:1e:c9:9b:c7:3e:
                    15:d1:e9:ab:19:84:35:cc:8d:5d:47:b2:02:97:43:
                    53:80:21:4f:a9:2b:f6:98:0c:e3:98:0a:d1:9c:b7:
                    25:f1:21:c3:70:02:be:da:5d:3a:cb:94:35:0a:75:
                    84:cd:78:e4:5b:27:3b:0b:fa:95:58:10:50:14:b6:
                    65:47:54:98:43:01:6c:4a:36:9a:6f:3c:6a:5a:7e:
                    ca:78:20:cf:1d:1e:8d:23:c4:75:43:67:8c:f2:66:
                    94:ad:cf:0b:38:51:c2:10:be:ce:7c:c8:d8:f0:50:
                    be:b8:6f:84:b1:27:26:d1:ae:ed:c8:8f:de:d1:0f:
                    6e:a0:e2:36:6f:12:71:aa:27:fc:68:9b:55:5f:d5:
                    af:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BD:0C:44:A6:99:27:26:B9:B8:6E:1E:A6:5E:D2:AA:8D:AC:38:6C
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34322e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:c0:03:ec:12:84:96:c4:ab:4b:06:28:af:c5:a5:ea:c3:b6:
         27:76:58:85:c3:d3:4a:f5:8b:a4:68:e2:05:b1:47:1e:44:2e:
         b1:a4:81:82:ea:a2:4a:a1:fd:ae:da:21:42:31:16:b3:e9:4c:
         40:bd:b5:0f:cc:67:bd:2a:99:6f:15:4f:42:2c:6d:bc:23:b9:
         8d:62:23:30:e9:1a:d4:46:c3:f7:cf:3c:0e:28:e7:68:7c:2e:
         e8:42:87:ab:80:fa:24:10:04:eb:45:46:4f:59:ad:f7:09:06:
         d2:5f:51:b3:0e:73:0e:59:6c:02:78:7e:08:1d:74:ed:9a:dd:
         66:64:a9:2b:29:1b:60:e0:48:5f:9a:c6:95:a7:79:20:8b:fa:
         21:ac:38:c1:37:ae:5a:a8:da:25:12:b3:33:f8:77:da:26:54:
         c0:c9:ac:a5:7a:7a:8b:a8:aa:0e:45:cb:cd:f7:56:fa:23:08:
         e1:37:9e:07:05:0a:c2:a0:b8:f3:78:af:2c:33:3e:c8:95:29:
         83:56:4d:6e:65:3e:bc:99:69:94:0a:fe:c7:23:ad:a4:e4:48:
         f0:7b:de:7e:d1:f0:cc:e1:a7:f5:91:0e:da:08:98:de:1b:80:
         29:21:e9:78:5b:16:26:40:13:94:59:2b:1a:9a:22:06:bd:98:
         71:fa:98:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:26 2024 by rpki-client on console-fra.rpki-client.org