Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35322e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e35322e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          KXYp+q0K+QUIoRFqbhknJ62eiXYAzzxBUxb8lLjWDsU=
Subject key identifier:   C3:0F:08:34:61:E5:2C:F5:EF:AA:E0:C3:FF:18:0C:CF:2A:CF:F4:E5
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       3D4ABB99D15CEFF525B514F9DEA01A1A699D86AC
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35322e302f32342d3234203d3e20323633333437.roa
Signing time:             Fri 08 Nov 2024 20:13:49 +0000
ROA not before:           Fri 08 Nov 2024 20:08:49 +0000
ROA not after:            Fri 07 Nov 2025 20:13:49 +0000
asID:                     263347
IP address blocks:        191.37.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:4a:bb:99:d1:5c:ef:f5:25:b5:14:f9:de:a0:1a:1a:69:9d:86:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Nov  8 20:08:49 2024 GMT
            Not After : Nov  7 20:13:49 2025 GMT
        Subject: CN=C30F083461E52CF5EFAAE0C3FF180CCF2ACFF4E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b0:74:08:29:e1:90:3b:14:f8:55:9f:0c:53:
                    21:c2:a7:6b:d3:a1:e1:c6:6e:2a:6f:2b:54:b4:75:
                    a5:dc:06:cb:80:2d:13:2e:72:3e:5c:14:77:11:ae:
                    49:f1:bc:c9:20:92:78:6c:79:82:f5:de:3c:4b:06:
                    05:c5:27:17:02:14:a7:39:4a:19:e9:29:74:6b:d5:
                    f8:67:f7:4e:7e:73:a3:8a:3f:3f:b3:41:74:e2:94:
                    5a:b7:00:86:be:8e:26:7b:71:46:37:e1:65:62:47:
                    3c:a4:7a:f8:86:1e:8e:8c:21:e3:76:d8:e6:83:e3:
                    db:35:82:b5:09:d8:cf:0d:ed:8a:1d:45:07:4a:03:
                    cb:0e:de:95:66:86:59:20:85:84:28:ed:20:36:ec:
                    e8:ad:2e:32:18:7c:48:65:4f:0a:8d:fc:24:d3:48:
                    8c:3f:bf:23:31:83:88:32:50:66:af:6e:39:e1:d0:
                    15:f3:68:93:03:e3:ed:62:fc:10:3c:72:bb:2e:c8:
                    ee:64:e6:44:cb:20:54:c0:5e:fc:35:ff:a4:f1:dc:
                    4b:4f:0f:8e:03:3d:09:76:a7:ef:23:44:4e:56:72:
                    80:b5:c6:1b:14:4b:cd:ca:f6:30:4b:a9:71:d1:ac:
                    f7:b9:6e:2c:68:17:ba:66:2e:d0:0d:2f:7c:cb:ab:
                    76:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0F:08:34:61:E5:2C:F5:EF:AA:E0:C3:FF:18:0C:CF:2A:CF:F4:E5
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35322e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:32:80:23:ca:a7:07:7b:8e:e9:ce:6d:68:f6:b3:f7:70:31:
         16:68:cc:5d:7f:23:ab:09:3a:ac:bf:cf:84:37:29:57:88:05:
         23:62:eb:1e:b4:ca:6a:fe:fc:07:6f:8a:8f:c6:20:07:64:31:
         d3:cf:cf:aa:9b:a8:5d:1b:fc:a8:79:2b:16:4f:b6:2d:84:9a:
         e8:c8:47:f5:58:1d:48:1e:2b:cf:05:33:5d:2d:fe:48:17:58:
         5a:54:9e:09:66:96:79:21:4b:21:cb:34:1e:b0:37:05:07:e8:
         38:f3:00:0c:35:35:9a:5b:fd:45:08:55:9e:05:c6:91:f7:5b:
         6a:32:bc:ea:c0:74:31:fa:78:30:a8:cf:9d:14:47:b9:c9:21:
         45:23:2b:d5:5b:bf:8a:22:fa:b0:b2:4a:41:fb:48:c6:16:dd:
         11:bf:74:96:bb:0c:3a:d5:16:7d:66:6b:e7:4b:c5:b5:1a:bf:
         b7:20:a2:34:73:0f:aa:15:4c:82:91:36:a3:89:3e:1e:93:29:
         43:0f:a6:fb:20:a7:9b:c9:d7:36:b7:de:3d:1b:c4:94:25:27:
         fd:77:53:c9:19:5a:60:db:e4:64:01:45:a9:b7:0a:8d:fb:06:
         d5:1d:b0:a5:6d:ac:7d:2c:94:af:46:33:b1:9e:de:f6:08:92:
         ed:37:af:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:00 2024 by rpki-client on console-ams.rpki-client.org