Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35302e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e35302e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          Ynx5ztVbi3SWwJtjfCZd1G0Vhl1OLiCMt/r+4NsHbR4=
Subject key identifier:   BD:7C:A9:FB:20:E9:06:91:39:92:41:38:66:E7:A7:B1:A5:ED:BA:C8
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       32DEC6092017C756D622DBC6A7FDE73F4F0BC585
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35302e302f32342d3234203d3e20323633333437.roa
Signing time:             Fri 08 Nov 2024 20:13:20 +0000
ROA not before:           Fri 08 Nov 2024 20:08:20 +0000
ROA not after:            Fri 07 Nov 2025 20:13:20 +0000
asID:                     263347
IP address blocks:        191.37.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:de:c6:09:20:17:c7:56:d6:22:db:c6:a7:fd:e7:3f:4f:0b:c5:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Nov  8 20:08:20 2024 GMT
            Not After : Nov  7 20:13:20 2025 GMT
        Subject: CN=BD7CA9FB20E906913992413866E7A7B1A5EDBAC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ed:0f:eb:34:e5:c1:34:06:43:8a:f1:b7:9d:
                    56:61:18:be:bd:42:e0:56:9d:28:86:b4:79:d6:ca:
                    d0:8e:72:89:c2:1a:79:0b:d2:df:8f:9d:14:f9:85:
                    09:21:5a:02:49:6d:c7:08:97:1f:f8:f2:da:bb:26:
                    e0:08:e7:2a:6b:03:f5:22:4e:f5:69:f2:5d:c3:78:
                    07:d2:31:2a:f1:b6:bc:0e:0a:b4:4e:4b:71:8c:68:
                    01:ad:eb:3e:a2:c9:83:17:fb:b3:1d:90:c1:00:51:
                    6a:90:18:90:f1:65:71:ca:7c:d4:94:60:c4:94:28:
                    0f:bf:1b:98:21:bb:83:3a:ed:0d:33:78:85:ff:8e:
                    6c:d2:ea:cf:a3:2d:19:44:0e:e5:ad:fc:2f:e5:c4:
                    84:e7:6a:5e:e5:db:ec:23:37:fd:cb:e9:50:21:d5:
                    be:ff:40:36:61:de:a6:b1:a3:e0:de:68:32:ec:35:
                    a4:8e:7d:8c:9e:39:e2:b1:32:85:50:8a:5d:56:70:
                    98:cb:20:84:72:df:dd:3e:2d:0b:6a:76:21:51:81:
                    6c:56:23:69:7d:7c:7a:23:48:76:84:32:db:2e:28:
                    56:1c:0d:b7:d3:a2:6a:0a:d7:e8:6f:15:ca:13:cd:
                    e4:76:96:2c:be:1d:40:dc:f1:bd:93:62:1d:d8:6b:
                    71:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7C:A9:FB:20:E9:06:91:39:92:41:38:66:E7:A7:B1:A5:ED:BA:C8
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35302e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:99:d9:47:98:15:42:d6:91:98:f3:df:6a:fc:3b:91:2f:07:
         77:e6:17:0b:da:ef:fb:e3:2c:bc:68:b4:ce:2a:80:13:8d:a4:
         61:43:41:32:2b:d3:ef:0d:2a:06:53:0e:c8:69:bf:c7:9e:45:
         af:c2:a2:39:eb:55:8b:78:1b:35:08:ac:eb:fa:b5:94:44:a1:
         a2:0d:4f:2c:f8:09:0d:5a:78:e6:61:2b:3a:88:d6:0e:7b:d7:
         f7:0a:3b:9e:f8:f3:51:6b:0a:10:23:9e:e4:22:16:d5:66:99:
         85:e3:5d:61:ce:26:90:f0:da:48:11:1d:18:6b:10:1d:e6:84:
         10:18:d4:7e:41:64:8f:a6:5a:44:56:3a:11:65:bd:b5:42:1e:
         10:f2:fb:dc:d8:9a:8a:30:00:a2:c0:3f:95:45:54:49:96:47:
         23:da:1c:d8:75:c9:87:8b:71:21:c1:43:61:08:1a:55:5b:28:
         f7:bf:ea:79:f3:6b:eb:ee:d7:33:a0:ba:d0:7a:d7:c4:a7:8b:
         c0:f8:8b:4c:6c:55:2d:be:82:47:c3:02:1b:50:4c:55:ff:10:
         76:86:ce:db:76:af:b0:af:09:b4:d3:bd:e1:f4:d4:dd:b5:39:
         64:65:8c:09:87:d1:ea:c0:a6:b9:e2:65:03:d8:27:a3:1d:22:
         c4:2c:a8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:00 2024 by rpki-client on console-ams.rpki-client.org