Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34322e302f32332d3233203d3e20323633333437.roa
File:                     3139312e33372e34322e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          RZZwmlrrClGaEd/8V/VYEWuhPy5z0tT6+Im+tZIrZPw=
Subject key identifier:   7C:ED:D4:AC:D0:53:75:A2:36:BF:11:13:F9:48:18:12:45:C7:AC:FE
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       70B42A5E53A4C6C057A5E8D95D3CCAC2E8C28789
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34322e302f32332d3233203d3e20323633333437.roa
Signing time:             Thu 04 Apr 2024 17:40:27 +0000
ROA not before:           Thu 04 Apr 2024 17:35:27 +0000
ROA not after:            Thu 03 Apr 2025 17:40:27 +0000
asID:                     263347
IP address blocks:        191.37.42.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b4:2a:5e:53:a4:c6:c0:57:a5:e8:d9:5d:3c:ca:c2:e8:c2:87:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Apr  4 17:35:27 2024 GMT
            Not After : Apr  3 17:40:27 2025 GMT
        Subject: CN=7CEDD4ACD05375A236BF1113F948181245C7ACFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:59:e5:a9:28:8c:5e:9b:12:dd:ff:45:09:ef:
                    c9:e0:d0:cf:81:99:f1:6b:75:17:34:1c:63:5f:39:
                    99:99:f9:98:29:a3:32:24:d0:2f:a8:6e:21:87:d8:
                    bf:88:2e:ae:c9:18:99:5d:d8:59:96:19:34:03:be:
                    7a:c1:71:72:93:21:98:6c:3d:2d:75:ce:f6:39:d8:
                    d0:62:4d:ed:db:61:f6:e9:1a:a2:9d:64:62:e8:6b:
                    85:53:43:0d:ef:96:ee:9b:90:89:97:6f:fd:da:02:
                    ff:44:96:e8:d0:2c:f7:7c:d8:ee:c9:b0:1f:75:2c:
                    c6:45:23:4a:bf:bc:b2:b2:6a:9a:d4:ea:90:5f:51:
                    41:b0:c8:4e:b9:64:76:78:d8:14:76:8d:32:58:4f:
                    6c:c5:fd:88:29:8c:11:b8:34:88:9a:26:f9:31:96:
                    b7:9a:54:e3:fb:34:e5:71:0f:ac:f7:dd:cf:10:01:
                    83:27:4c:11:99:22:0f:45:81:b7:47:46:23:c7:e6:
                    e3:bf:9e:7f:0e:77:64:34:e4:4d:99:6a:0a:b1:0a:
                    39:35:e6:e3:d1:b0:89:73:47:24:5d:02:9c:2c:83:
                    5e:d1:92:ac:ee:d7:4b:18:90:62:e4:b0:a4:25:55:
                    b1:73:99:4c:b6:aa:b4:ee:59:9e:8b:23:ee:f9:81:
                    c9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:ED:D4:AC:D0:53:75:A2:36:BF:11:13:F9:48:18:12:45:C7:AC:FE
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34322e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:28:c4:89:35:f6:0b:45:f5:4b:72:c5:d8:6d:35:9c:00:25:
         0d:2d:1a:05:db:e2:12:5d:8a:ae:8a:81:a0:3d:17:f3:d0:e5:
         26:e8:93:2a:c0:1a:5c:56:70:a6:2f:93:f1:10:ae:5f:00:1a:
         3e:1c:b6:72:4b:81:ac:4c:24:04:ae:1a:42:0c:ff:a4:38:e1:
         c6:95:7b:fe:5c:c9:73:28:bc:f0:14:6b:2a:be:81:b6:c5:58:
         f4:e7:16:ad:53:61:ee:18:9d:05:64:1e:e8:ab:a0:5f:da:a2:
         2d:7b:85:15:30:12:36:20:76:6d:e4:e1:4b:48:a8:6e:d7:6d:
         3b:e0:b0:92:8b:5f:ec:c7:65:47:f3:56:f9:35:ea:f6:67:77:
         4d:a6:c2:b2:f7:02:67:08:46:46:93:fc:29:ca:20:e1:ce:f3:
         5c:2d:f8:a3:e7:78:24:23:e5:56:25:c2:85:6e:c9:a5:02:82:
         0d:d9:43:2e:db:1e:20:af:f3:16:e6:02:e7:e2:48:e5:a0:90:
         e4:cf:f9:14:38:ef:61:6a:7c:91:07:1f:c3:e4:61:90:e9:5b:
         91:76:2d:26:c4:94:d2:02:68:6f:5b:c6:88:42:4a:36:d4:b0:
         e8:92:c4:36:5a:e4:4f:6d:98:3f:7a:0d:99:0c:79:bd:72:e5:
         6b:51:92:1f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcLQqXlOkxsBXpejZXTzKwujCh4kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMwOTE2Njk3Q0M3N0ExQTg3NkU0ODY1QkUwMkY1NUE4
RUZGOUJGMjAeFw0yNDA0MDQxNzM1MjdaFw0yNTA0MDMxNzQwMjdaMDMxMTAvBgNV
BAMTKDdDRURENEFDRDA1Mzc1QTIzNkJGMTExM0Y5NDgxODEyNDVDN0FDRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqWeWpKIxemxLd/0UJ78ng0M+B
mfFrdRc0HGNfOZmZ+ZgpozIk0C+obiGH2L+ILq7JGJld2FmWGTQDvnrBcXKTIZhs
PS11zvY52NBiTe3bYfbpGqKdZGLoa4VTQw3vlu6bkImXb/3aAv9ElujQLPd82O7J
sB91LMZFI0q/vLKyaprU6pBfUUGwyE65ZHZ42BR2jTJYT2zF/YgpjBG4NIiaJvkx
lreaVOP7NOVxD6z33c8QAYMnTBGZIg9FgbdHRiPH5uO/nn8Od2Q05E2ZagqxCjk1
5uPRsIlzRyRdApwsg17Rkqzu10sYkGLksKQlVbFzmUy2qrTuWZ6LI+75gcnlAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUfO3UrNBTdaI2vxET+UgYEkXHrP4wHwYDVR0j
BBgwFoAUAwkWaXzHehqHbkhlvgL1Wo7/m/IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVeWFzTm5lVW1TcXhESnVwZG15c3dteUtSdENHZEt0dmtQODUxSHh5
ZEMvMS8wMzA5MTY2OTdDQzc3QTFBODc2RTQ4NjVCRTAyRjU1QThFRkY5QkYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzMDkxNjY5N0NDNzdBMUE4
NzZFNDg2NUJFMDJGNTVBOEVGRjlCRjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVXlhc05uZVVtU3F4REp1cGRteXN3bXlLUnRDR2RLdHZrUDg1MUh4eWRDLzEv
MzEzOTMxMmUzMzM3MmUzNDMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMz
MzMzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBvyUqMA0GCSqGSIb3DQEBCwUAA4IBAQBSKMSJNfYL
RfVLcsXYbTWcACUNLRoF2+ISXYquioGgPRfz0OUm6JMqwBpcVnCmL5PxEK5fABo+
HLZyS4GsTCQErhpCDP+kOOHGlXv+XMlzKLzwFGsqvoG2xVj05xatU2HuGJ0FZB7o
q6Bf2qIte4UVMBI2IHZt5OFLSKhu12074LCSi1/sx2VH81b5Ner2Z3dNpsKy9wJn
CEZGk/wpyiDhzvNcLfij53gkI+VWJcKFbsmlAoIN2UMu2x4gr/MW5gLn4kjloJDk
z/kUOO9hanyRBx/D5GGQ6VuRdi0mxJTSAmhvW8aIQko21LDoksQ2WuRPbZg/eg2Z
DHm9cuVrUZIf
-----END CERTIFICATE-----
Generated at Fri Jun 28 09:51:00 2024 by rpki-client on console-ams.rpki-client.org