Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34382e302f32302d3230203d3e20323633333437.roa
File:                     3139312e33372e34382e302f32302d3230203d3e20323633333437.roa (raw, json)
Hash identifier:          zG5pHHdW4aXff2VMSdQ7npf/TerG8NIVNmlaL8l9s64=
Subject key identifier:   54:33:63:8F:62:C8:50:CD:D4:16:A3:0A:12:41:EB:8F:25:9A:DF:09
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       17E3B3C2CB54DA3E439A3E9043FA818513E1FF63
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34382e302f32302d3230203d3e20323633333437.roa
Signing time:             Thu 04 Apr 2024 17:40:25 +0000
ROA not before:           Thu 04 Apr 2024 17:35:25 +0000
ROA not after:            Thu 03 Apr 2025 17:40:25 +0000
asID:                     263347
IP address blocks:        191.37.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e3:b3:c2:cb:54:da:3e:43:9a:3e:90:43:fa:81:85:13:e1:ff:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Apr  4 17:35:25 2024 GMT
            Not After : Apr  3 17:40:25 2025 GMT
        Subject: CN=5433638F62C850CDD416A30A1241EB8F259ADF09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:db:82:83:be:b1:2e:66:b4:4b:41:68:b8:c9:
                    d1:93:d1:d0:4d:0e:af:c1:16:94:11:5f:95:4e:7d:
                    e7:c0:94:d7:0f:f8:4f:fc:26:0d:1e:c4:a9:4a:f9:
                    ab:ed:22:fb:42:e0:43:51:9b:8a:50:fc:18:d5:77:
                    09:6f:1c:be:fe:9d:b5:13:2c:06:4a:2b:21:f7:93:
                    7d:0b:fe:bf:da:bb:0c:47:f9:fe:fe:61:c0:89:65:
                    6b:4a:99:7c:f5:de:b3:8f:8d:cc:eb:8f:12:04:fe:
                    43:5d:9f:73:51:05:d3:53:68:5b:50:cc:2b:c6:6b:
                    fb:bd:c4:d5:51:a1:51:41:46:89:7e:86:16:2c:be:
                    d8:77:ff:12:51:b7:a9:40:c8:10:3f:58:f2:2e:1b:
                    7b:d7:88:4c:d8:6f:78:e8:af:5b:6d:55:3f:e9:eb:
                    32:c9:5b:ae:5a:4b:75:a6:a2:bf:f6:13:a7:c3:f6:
                    71:36:8e:49:00:60:2d:a6:b0:01:bd:33:2f:bf:11:
                    9d:f6:07:ae:88:6b:7a:e9:39:95:15:44:fe:83:fa:
                    d6:92:fe:af:ee:59:37:ef:d4:46:43:f2:86:01:a4:
                    f5:5a:b8:cd:7a:a8:e3:9a:e6:4e:18:fd:c4:01:a2:
                    1c:3e:0d:72:fb:6a:c8:cc:6c:bd:e9:25:88:49:e1:
                    50:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:33:63:8F:62:C8:50:CD:D4:16:A3:0A:12:41:EB:8F:25:9A:DF:09
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34382e302f32302d3230203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         63:35:94:8f:e4:a2:98:ee:f4:e1:98:d5:c4:26:81:95:e5:cf:
         86:fa:9d:75:e3:43:67:e0:bc:6e:d7:53:52:ab:bd:23:03:f7:
         66:ee:28:b4:98:a3:18:c7:de:aa:e8:93:7e:1f:26:35:ab:00:
         bc:62:a7:85:26:11:67:a6:77:5f:79:d7:7d:d2:3a:25:86:aa:
         97:38:e9:dc:90:50:20:17:1e:35:80:83:9a:8e:46:af:26:ce:
         43:b7:c6:64:5f:40:2e:55:40:fa:2b:f7:2a:3d:61:77:a8:c8:
         bc:e3:63:8c:1d:c3:2d:63:1b:1c:ce:e7:74:17:38:16:eb:dc:
         39:4c:45:e0:d4:7d:63:4d:a6:07:9e:0e:01:07:71:b4:32:46:
         e1:22:68:be:ae:f3:f0:8b:3d:18:4a:e3:2d:b9:6f:25:f7:ee:
         b0:b1:a4:d5:a0:2e:ac:c9:6e:5b:89:3f:30:43:19:b5:ad:9d:
         ab:8a:fe:61:f3:b3:f7:32:14:6b:44:1d:ab:0d:7d:4e:cb:13:
         36:36:cf:c7:57:3d:4f:da:07:0a:b5:57:3f:c2:3b:b6:ea:a2:
         fd:e7:23:0f:92:28:83:01:6e:9a:d4:89:94:94:af:a3:75:ed:
         f6:96:a8:68:09:42:8d:a0:9a:ed:0e:e1:47:95:91:be:c6:e2:
         de:47:80:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:26 2024 by rpki-client on console-fra.rpki-client.org