Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35322e302f32332d3233203d3e20323633333437.roa
File:                     3139312e33372e35322e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          2GzPmKG1ks9Peh9cFh+eode0cfugvMpbnKphX0LG1Yw=
Subject key identifier:   66:29:AD:A4:F2:33:97:7F:69:CB:B1:D8:92:91:CD:93:F4:37:FC:3E
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       4E9409A17A9363116FA90888AD7FDF2C4D325397
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35322e302f32332d3233203d3e20323633333437.roa
Signing time:             Thu 04 Apr 2024 17:40:28 +0000
ROA not before:           Thu 04 Apr 2024 17:35:28 +0000
ROA not after:            Thu 03 Apr 2025 17:40:28 +0000
asID:                     263347
IP address blocks:        191.37.52.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:94:09:a1:7a:93:63:11:6f:a9:08:88:ad:7f:df:2c:4d:32:53:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Apr  4 17:35:28 2024 GMT
            Not After : Apr  3 17:40:28 2025 GMT
        Subject: CN=6629ADA4F233977F69CBB1D89291CD93F437FC3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bd:36:dd:e7:ac:84:bc:d3:0b:8d:a3:67:b6:
                    c8:23:85:da:eb:a0:93:8e:79:72:d9:c0:73:b5:a5:
                    e9:f1:03:d2:f1:0a:45:ab:ab:1f:8e:be:b0:cf:39:
                    41:7f:3e:99:93:d0:1e:60:03:6b:72:59:c8:2f:6a:
                    a8:e4:44:a1:24:9f:8c:ae:20:ef:e2:5c:25:b1:bc:
                    2e:50:fb:67:9f:f6:73:81:cf:f4:89:97:77:2f:5d:
                    bb:8f:f9:85:32:52:61:bb:a4:98:31:08:c9:b4:29:
                    2c:47:51:80:3a:18:36:46:e9:46:07:c3:42:3f:5e:
                    60:e9:00:a7:c0:c0:91:b1:2b:c9:c1:ea:47:98:fc:
                    01:1f:1f:39:0d:de:45:2d:5b:2f:50:f3:d5:d8:fc:
                    6c:92:1f:c2:1e:4c:33:6c:91:a6:27:89:ec:67:87:
                    f9:ba:ff:4a:26:f1:a6:f8:30:71:32:e7:94:33:28:
                    59:44:72:82:96:4b:28:76:e5:99:33:d3:5c:22:18:
                    e3:ce:f9:5c:33:19:77:91:dc:a8:c5:45:37:a8:38:
                    a4:00:8d:89:62:c6:96:b4:4c:93:37:a6:29:6c:e0:
                    41:50:5b:59:dd:b2:67:9d:f4:a4:14:69:58:40:63:
                    d1:f5:4f:44:4b:17:1b:87:40:20:19:76:8d:7c:2b:
                    27:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:29:AD:A4:F2:33:97:7F:69:CB:B1:D8:92:91:CD:93:F4:37:FC:3E
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35322e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:75:81:aa:e1:56:39:fd:6b:db:bf:12:b4:f1:1d:55:31:81:
         75:69:a4:13:25:30:2c:29:12:6f:4a:bc:73:b0:6d:3c:d9:84:
         50:be:8e:ef:bb:71:80:ed:a6:fc:c6:d6:23:07:6e:06:38:74:
         bc:2e:e0:6d:d5:ee:9e:d0:3b:09:2f:87:e0:2e:8e:f8:bb:52:
         dd:c3:33:68:bd:21:e9:96:2f:ba:56:cf:48:aa:bc:3a:5f:c9:
         dc:dd:01:77:91:d1:17:de:91:71:db:65:72:42:0f:d9:e5:5f:
         2c:f5:b4:b7:0e:e0:63:ed:d1:a9:9f:1b:02:45:06:83:32:00:
         be:54:e1:e6:bb:1e:71:1c:95:44:6b:6d:46:cc:1c:d4:82:4b:
         58:eb:07:08:9d:4f:67:d6:48:4d:b4:6f:48:0d:11:d1:0a:e2:
         c7:17:2c:ff:e2:65:01:56:8a:bc:77:b8:00:9c:1e:e2:a7:42:
         2d:62:a9:ec:2d:2d:6a:b2:6c:7f:0e:88:d8:88:6b:87:85:2b:
         b0:de:57:da:20:b9:03:c0:23:aa:ff:23:c5:19:b8:6e:99:32:
         5e:5b:a7:b6:c1:ea:6e:8e:c5:bb:d5:43:c7:61:30:33:7b:f4:
         c8:f2:98:d6:95:9b:4a:09:1a:a3:46:69:2b:8c:27:9f:28:e6:
         2c:9d:37:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:48:02 2024 by rpki-client on console-ams.rpki-client.org