Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34382e302f32332d3234203d3e20323633333437.roa
File:                     3139312e33372e34382e302f32332d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          kGWw6ACtNqfxt1JlI4i2QbdqGZ8dpoQGhac2vd//lJ4=
Subject key identifier:   88:1C:EE:DE:86:77:4D:5C:B0:A5:E8:A9:DB:11:63:59:00:A5:C8:D1
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       66AA9D220A96029087885C06325CC569566CC12E
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34382e302f32332d3234203d3e20323633333437.roa
Signing time:             Wed 11 Sep 2024 16:01:27 +0000
ROA not before:           Wed 11 Sep 2024 15:56:27 +0000
ROA not after:            Wed 10 Sep 2025 16:01:27 +0000
asID:                     263347
IP address blocks:        191.37.48.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:aa:9d:22:0a:96:02:90:87:88:5c:06:32:5c:c5:69:56:6c:c1:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Sep 11 15:56:27 2024 GMT
            Not After : Sep 10 16:01:27 2025 GMT
        Subject: CN=881CEEDE86774D5CB0A5E8A9DB11635900A5C8D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d5:69:72:bc:cd:ce:74:3d:d2:4f:e1:95:b6:
                    5e:51:2f:0d:f5:ae:1c:7a:d6:47:cd:90:69:08:e1:
                    84:d7:24:b0:ac:5a:49:3c:2d:ce:e2:28:ac:11:2c:
                    e7:16:25:06:b1:0e:04:4e:e6:ca:93:d3:ca:ea:0f:
                    76:a3:11:06:5f:33:65:1b:44:5c:ba:0f:26:62:4b:
                    a0:9d:6a:12:a2:ca:6c:8b:cb:e2:63:a3:36:93:e7:
                    b3:1a:50:ef:82:a5:ef:c3:9b:01:66:18:79:f1:4b:
                    66:db:d0:69:49:be:45:0e:29:fd:b8:3c:77:02:2f:
                    80:bf:31:5b:61:a0:d9:36:78:de:21:b3:e3:7c:be:
                    0e:88:b9:3a:26:68:13:68:69:29:c3:ab:4d:2e:84:
                    c5:58:6c:7c:ad:f7:ae:b7:67:55:1b:cd:5d:ef:fd:
                    69:4b:12:5d:8c:03:9d:6f:7a:da:49:5e:a2:47:fb:
                    0d:2c:d2:36:2c:a3:2e:c7:dd:6b:82:19:07:0d:4e:
                    a1:41:04:90:59:27:9a:6a:b3:44:95:58:11:3a:00:
                    4f:66:c3:58:22:78:c2:47:2e:63:02:d8:34:45:01:
                    ca:33:e3:bc:2d:ea:4a:a1:e9:6d:6a:23:67:71:89:
                    e1:70:a2:7e:f0:84:53:ac:ee:55:fc:c5:90:94:87:
                    66:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1C:EE:DE:86:77:4D:5C:B0:A5:E8:A9:DB:11:63:59:00:A5:C8:D1
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34382e302f32332d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:07:86:8d:29:af:54:ab:07:39:e9:68:16:2b:3b:b6:fd:f7:
         20:67:d7:36:1f:ec:5a:11:f0:d0:2b:57:2c:b4:6e:47:e1:71:
         36:70:14:09:a4:b9:48:b0:3f:0f:66:90:2f:af:bd:ea:1b:61:
         7b:cd:98:8a:dd:a2:ff:c4:45:13:95:0e:ef:22:72:21:51:4d:
         98:3f:3e:ca:6e:ab:35:d0:11:28:81:83:7d:dc:0c:75:2c:d4:
         51:32:74:83:fb:46:b2:4d:53:e3:5d:96:eb:71:98:9d:80:87:
         38:69:2c:42:10:1e:52:bb:f2:c9:6f:19:96:b6:ba:c3:b2:d8:
         59:47:1d:7f:eb:e5:16:cc:f6:3d:d5:fc:4e:51:1d:8c:6d:89:
         7d:07:00:19:c7:01:9b:fa:a6:05:f5:5c:f1:e0:dd:36:1e:a6:
         a6:1f:d6:cb:19:f3:2e:34:08:9a:67:7f:3d:6f:05:c5:37:87:
         02:5a:48:84:7a:2b:26:f1:d2:0e:0b:a1:71:d5:f1:e7:b1:fd:
         6f:4d:cc:06:2e:e2:23:f2:72:70:1e:89:f5:e2:7d:b3:5f:42:
         15:a1:d6:07:9f:7a:1d:b7:05:ae:86:c1:26:8a:6d:32:94:c0:
         2a:91:fb:e5:c6:b6:df:bb:c5:22:f5:ac:42:91:11:ae:d5:c4:
         49:cc:f8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:00 2024 by rpki-client on console-ams.rpki-client.org