Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34342e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e34342e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          hoCL37OSvyb5kUx1DgqGlu6cn7Ep5TXxSuxANUPTHxs=
Subject key identifier:   0B:A4:44:FC:73:59:E9:A7:3A:F6:BC:62:CE:BA:22:BE:06:F6:BD:C0
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       6363E088CA2789740270E7090282D9DCA7461889
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34342e302f32342d3234203d3e20323633333437.roa
Signing time:             Fri 08 Nov 2024 13:55:34 +0000
ROA not before:           Fri 08 Nov 2024 13:50:34 +0000
ROA not after:            Fri 07 Nov 2025 13:55:34 +0000
asID:                     263347
IP address blocks:        191.37.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:63:e0:88:ca:27:89:74:02:70:e7:09:02:82:d9:dc:a7:46:18:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Nov  8 13:50:34 2024 GMT
            Not After : Nov  7 13:55:34 2025 GMT
        Subject: CN=0BA444FC7359E9A73AF6BC62CEBA22BE06F6BDC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:aa:4c:3b:3a:d2:07:04:32:35:54:e9:10:99:
                    3b:1a:72:20:3b:a9:f5:b8:03:21:0d:b5:2d:d5:c2:
                    9d:9d:9a:d3:ab:ab:7a:5f:8e:60:bf:74:7e:da:c1:
                    3f:d2:78:d7:06:ac:be:bf:23:06:4b:d4:dc:d0:a6:
                    d6:ad:6f:9a:77:fc:82:00:79:16:bb:4b:c1:3e:f4:
                    ed:94:d2:6a:d5:a8:76:a1:96:98:51:8d:3c:3b:77:
                    b6:1e:03:b1:a0:44:1b:7b:8d:51:ad:db:e9:86:23:
                    53:92:e3:a3:71:3e:65:d9:52:43:92:e7:ba:24:52:
                    08:d8:cb:92:5d:fa:53:cb:22:5d:74:b0:39:16:d0:
                    30:a4:ab:55:a2:b7:d2:20:4d:6b:8a:3d:df:52:07:
                    9f:06:db:a5:14:ea:4e:34:03:65:31:df:b5:e8:64:
                    74:f9:7c:42:4c:1d:cc:57:88:a6:76:a6:9e:18:da:
                    2e:64:22:c7:79:8c:7c:00:e1:9d:94:ef:67:52:da:
                    1d:d4:1b:03:1d:f4:48:83:22:f2:8b:c1:4b:e9:29:
                    d0:05:ca:c1:a5:11:11:d5:47:cf:6b:d7:9a:2e:e4:
                    8d:b5:c4:62:9b:b0:38:a5:52:fe:62:ff:43:74:4d:
                    78:46:7b:2d:22:50:88:c2:c4:2e:e3:63:ad:c1:45:
                    a8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A4:44:FC:73:59:E9:A7:3A:F6:BC:62:CE:BA:22:BE:06:F6:BD:C0
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34342e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:c3:0f:52:e0:e7:74:2c:31:48:35:62:13:dc:4f:44:2f:24:
         3b:cf:0e:73:ca:77:81:69:cc:e1:cf:fa:c6:f6:1f:12:4c:fc:
         88:cb:a5:2d:9e:30:2b:6d:03:17:65:a6:4c:f4:5a:b3:91:09:
         13:64:fa:38:f8:39:d6:cf:9b:4f:db:30:4b:89:69:d7:e7:8e:
         c5:bf:a1:99:d1:43:2a:b9:45:98:60:64:21:ba:a1:cd:44:89:
         57:ff:65:39:65:76:a1:02:69:92:31:d1:2b:bc:7a:a7:50:65:
         9d:f6:1c:05:e0:30:80:0e:15:ab:f7:ba:ee:66:dd:ce:35:a2:
         5c:f9:83:a1:47:3b:a4:bf:3e:87:40:92:0f:b1:84:f5:19:75:
         47:79:7c:22:1d:94:fc:0f:49:b8:3b:f8:80:d9:fa:fd:8f:3d:
         26:35:8d:6e:8e:05:16:74:89:e7:a4:c7:ab:8f:8c:ec:20:80:
         4e:7c:bf:21:aa:f6:24:a2:38:73:04:ea:ea:98:4a:93:5f:6f:
         a2:cb:ec:21:ee:fa:3f:9a:97:bc:e7:5d:b4:04:48:22:be:16:
         68:7b:87:56:88:b2:08:5e:b2:47:77:de:a5:be:69:67:21:cf:
         9f:4c:f0:22:29:9e:ac:c7:43:ab:cd:71:cf:1e:57:29:4b:8e:
         c5:29:24:db
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUY2PgiMoniXQCcOcJAoLZ3KdGGIkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMwOTE2Njk3Q0M3N0ExQTg3NkU0ODY1QkUwMkY1NUE4
RUZGOUJGMjAeFw0yNDExMDgxMzUwMzRaFw0yNTExMDcxMzU1MzRaMDMxMTAvBgNV
BAMTKDBCQTQ0NEZDNzM1OUU5QTczQUY2QkM2MkNFQkEyMkJFMDZGNkJEQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiqkw7OtIHBDI1VOkQmTsaciA7
qfW4AyENtS3Vwp2dmtOrq3pfjmC/dH7awT/SeNcGrL6/IwZL1NzQptatb5p3/IIA
eRa7S8E+9O2U0mrVqHahlphRjTw7d7YeA7GgRBt7jVGt2+mGI1OS46NxPmXZUkOS
57okUgjYy5Jd+lPLIl10sDkW0DCkq1Wit9IgTWuKPd9SB58G26UU6k40A2Ux37Xo
ZHT5fEJMHcxXiKZ2pp4Y2i5kIsd5jHwA4Z2U72dS2h3UGwMd9EiDIvKLwUvpKdAF
ysGlERHVR89r15ou5I21xGKbsDilUv5i/0N0TXhGey0iUIjCxC7jY63BRajpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUC6RE/HNZ6ac69rxizroivgb2vcAwHwYDVR0j
BBgwFoAUAwkWaXzHehqHbkhlvgL1Wo7/m/IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVeWFzTm5lVW1TcXhESnVwZG15c3dteUtSdENHZEt0dmtQODUxSHh5
ZEMvMS8wMzA5MTY2OTdDQzc3QTFBODc2RTQ4NjVCRTAyRjU1QThFRkY5QkYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzMDkxNjY5N0NDNzdBMUE4
NzZFNDg2NUJFMDJGNTVBOEVGRjlCRjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVXlhc05uZVVtU3F4REp1cGRteXN3bXlLUnRDR2RLdHZrUDg1MUh4eWRDLzEv
MzEzOTMxMmUzMzM3MmUzNDM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzMzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvyUsMA0GCSqGSIb3DQEBCwUAA4IBAQCGww9S4Od0
LDFINWIT3E9ELyQ7zw5zyneBaczhz/rG9h8STPyIy6UtnjArbQMXZaZM9FqzkQkT
ZPo4+DnWz5tP2zBLiWnX547Fv6GZ0UMquUWYYGQhuqHNRIlX/2U5ZXahAmmSMdEr
vHqnUGWd9hwF4DCADhWr97ruZt3ONaJc+YOhRzukvz6HQJIPsYT1GXVHeXwiHZT8
D0m4O/iA2fr9jz0mNY1ujgUWdInnpMerj4zsIIBOfL8hqvYkojhzBOrqmEqTX2+i
y+wh7vo/mpe85120BEgivhZoe4dWiLIIXrJHd96lvmlnIc+fTPAiKZ6sx0OrzXHP
HlcpS47FKSTb
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:00 2024 by rpki-client on console-ams.rpki-client.org