Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35302e302f32332d3233203d3e20323633333437.roa
File:                     3139312e33372e35302e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          W/wG/M4woeTQqXKkt5zLABNsSTy2jb0GrNOt27qgGrE=
Subject key identifier:   A1:A8:69:08:B2:B0:8C:EC:61:C0:81:75:4E:27:D4:3C:60:E3:5E:E6
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       2728B3C1CA2FC4C7565D4D55640FC6543B4F446E
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35302e302f32332d3233203d3e20323633333437.roa
Signing time:             Thu 06 Mar 2025 18:28:48 +0000
ROA not before:           Thu 06 Mar 2025 18:23:48 +0000
ROA not after:            Thu 05 Mar 2026 18:28:48 +0000
asID:                     263347
IP address blocks:        191.37.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 16:44:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:28:b3:c1:ca:2f:c4:c7:56:5d:4d:55:64:0f:c6:54:3b:4f:44:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Mar  6 18:23:48 2025 GMT
            Not After : Mar  5 18:28:48 2026 GMT
        Subject: CN=A1A86908B2B08CEC61C081754E27D43C60E35EE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:95:20:4e:e3:74:93:f4:b2:0c:da:4b:7a:c0:
                    ef:b9:0c:08:41:11:10:61:7f:77:8a:f2:70:fc:00:
                    c7:f2:f2:a2:a8:c2:81:47:96:d2:c1:ad:79:04:cb:
                    c6:4a:86:c9:d5:de:9c:41:0a:45:77:71:a7:e2:06:
                    8e:d1:62:8a:ed:b0:e7:f9:4d:51:44:6e:06:74:6d:
                    e8:85:2a:a6:a1:82:66:1d:ba:e6:df:55:96:e6:ff:
                    c0:a3:d2:8d:85:31:5e:81:3f:9e:ae:2d:d7:e8:cf:
                    55:69:13:4a:8b:19:24:15:6c:0c:13:a9:2d:91:8d:
                    0b:f3:95:38:ee:4d:87:0c:5c:0d:1d:1b:93:bc:5e:
                    c3:12:c4:83:4d:ae:3b:e1:e8:61:2f:77:ba:f4:3d:
                    fd:60:64:d9:aa:6b:ce:b3:24:21:7a:bb:de:9b:59:
                    3e:98:20:c8:83:d5:7b:7e:6c:65:57:df:ac:de:b0:
                    f6:ee:59:18:f6:84:99:33:2c:1f:51:59:5a:f8:01:
                    a1:5e:e0:9f:16:b0:cc:4c:d4:15:f6:4d:88:d9:19:
                    af:9f:dd:e1:20:d3:f1:3a:5b:e1:b1:e3:a9:d4:80:
                    c2:c7:c8:50:30:15:18:17:37:76:5c:c8:60:7d:3d:
                    f6:0b:68:9a:aa:b6:cd:56:7b:60:0d:80:ea:ff:ab:
                    c7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A8:69:08:B2:B0:8C:EC:61:C0:81:75:4E:27:D4:3C:60:E3:5E:E6
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35302e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:29:1a:b3:9a:09:73:7c:81:b0:71:c1:f7:0c:64:ef:35:17:
         f2:b5:da:b1:ad:43:d8:ec:15:1b:1e:cc:0b:e2:3d:6a:35:b3:
         72:f6:a7:b3:6f:54:31:d0:12:22:ef:39:96:bb:91:ff:68:74:
         bd:9f:d3:03:5b:c3:40:8f:b3:a6:9c:d8:4f:34:1c:4a:ff:80:
         b9:8b:96:ec:5b:95:4d:fa:4f:40:31:e8:92:23:66:77:33:5e:
         a1:7d:ff:e9:1b:20:73:2e:d7:66:19:b5:d7:1b:8c:61:b9:b4:
         82:b6:e3:e9:50:3a:bf:db:7a:2e:9d:87:5a:a0:96:2f:7a:18:
         d9:c8:4d:78:04:8e:7b:06:ca:6b:77:8d:18:0d:7e:54:e8:2c:
         8a:ab:5d:81:35:23:cb:bf:80:1a:ab:19:97:7a:fe:23:cc:74:
         08:15:c2:4c:67:e1:78:2b:49:69:20:f7:3b:0c:47:26:47:43:
         e8:fd:f5:0b:44:89:e0:13:36:f7:b7:f1:be:b8:cd:52:79:06:
         4b:b8:70:98:04:18:ea:ec:6e:ae:1a:a3:73:6b:71:35:b3:07:
         1e:c9:b6:99:37:88:65:5f:54:49:62:88:7d:1c:f8:df:bd:df:
         06:f4:f9:0a:63:23:a7:d6:9e:3a:24:b0:58:7d:b2:57:ab:af:
         ba:1a:d4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 02:02:19 2025 by rpki-client