Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35342e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e35342e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          xqRaANiXEVdfQmz2BVcB4lcrbll94fIDmHaYyFubl/A=
Subject key identifier:   AB:6D:2E:A2:C5:75:49:FF:C3:51:BE:F9:76:12:D7:7E:6E:22:9A:49
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       73C8D54D0528E6CDFCC98C30CC5546A3978F9211
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35342e302f32342d3234203d3e20323633333437.roa
Signing time:             Fri 08 Nov 2024 20:14:11 +0000
ROA not before:           Fri 08 Nov 2024 20:09:11 +0000
ROA not after:            Fri 07 Nov 2025 20:14:11 +0000
asID:                     263347
IP address blocks:        191.37.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c8:d5:4d:05:28:e6:cd:fc:c9:8c:30:cc:55:46:a3:97:8f:92:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Nov  8 20:09:11 2024 GMT
            Not After : Nov  7 20:14:11 2025 GMT
        Subject: CN=AB6D2EA2C57549FFC351BEF97612D77E6E229A49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:72:51:fc:26:5f:4d:19:c4:eb:3b:e6:f7:cb:
                    b2:27:0c:fa:cc:33:50:3c:3c:8c:78:b9:9f:18:0c:
                    ad:bf:e8:d9:45:7f:ea:15:23:ac:6c:fb:ec:d1:db:
                    e7:49:b0:45:0a:97:34:dd:cb:99:5f:86:96:a5:86:
                    9c:20:49:a0:09:ae:5d:7c:ae:72:f8:8c:2d:54:70:
                    8b:c3:18:a8:e6:a3:9e:1e:67:af:1c:ff:10:08:62:
                    f0:a8:c5:6c:6e:75:bf:04:ff:d6:ce:0f:fa:f5:aa:
                    53:48:14:b6:4c:2f:bd:8b:7c:4e:c7:9f:f0:74:c7:
                    46:4b:26:0f:ad:25:16:ee:6c:3e:b3:09:bb:8a:8f:
                    88:e7:f4:93:cc:aa:cb:bd:96:3a:06:26:dd:d4:c8:
                    8a:f1:13:88:cf:ae:40:8a:b5:93:e0:20:9a:5a:e2:
                    70:bf:12:bd:09:3f:25:df:55:23:0d:7c:bb:59:3d:
                    58:3b:f3:f9:6d:ae:55:e2:6e:e3:33:0a:0d:44:7c:
                    12:10:72:63:8d:5e:95:17:d7:4b:52:d5:dd:d2:95:
                    b0:88:72:ee:e9:4f:4e:c6:d4:c7:e3:f0:f2:74:20:
                    16:8a:9b:51:d4:46:8d:f7:38:a0:60:7d:9f:c2:7e:
                    2f:b7:98:3f:50:ec:a4:5d:3b:07:3e:90:83:a0:e2:
                    69:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6D:2E:A2:C5:75:49:FF:C3:51:BE:F9:76:12:D7:7E:6E:22:9A:49
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35342e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:10:77:97:d6:60:ce:d6:a3:fd:e7:8e:8c:8a:f5:fe:1f:39:
         1b:e3:b2:95:d6:85:cf:c8:83:3e:4e:2f:c3:3d:3a:87:5a:f7:
         28:f0:25:6f:05:97:1d:a9:9f:db:1b:d4:56:fa:14:af:92:46:
         24:19:08:49:5e:f3:c2:62:3d:d3:4e:2f:f0:51:1a:07:25:06:
         cb:ef:b2:23:3f:0f:44:5d:87:56:f2:ed:10:66:80:94:ff:c6:
         21:56:9c:05:cf:f1:3e:3b:ac:04:6b:bf:db:7f:45:55:cd:e2:
         28:18:37:5f:6a:83:0a:07:0f:c4:a3:72:3e:8e:b8:5d:31:82:
         93:ec:78:9c:a8:b7:d5:56:39:6e:6d:de:ff:94:b2:d5:f9:23:
         41:20:fa:18:c2:53:d0:9d:a8:03:5c:b7:9b:00:b3:e3:bb:94:
         cc:fa:9b:69:27:19:bf:31:b0:d3:04:a3:25:05:71:74:45:85:
         31:4e:15:f5:bb:bc:b5:25:bc:6a:52:fc:8f:ab:09:54:14:ae:
         5f:ed:73:20:e2:20:53:a0:9c:bb:be:fa:94:16:f5:aa:60:03:
         fe:8b:42:9b:25:3e:20:b4:e6:e1:ff:40:5c:74:6d:db:8a:41:
         81:59:6c:22:57:5a:eb:a2:ac:52:40:f8:c0:11:67:c8:a8:f0:
         46:c5:dc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:48:02 2024 by rpki-client on console-ams.rpki-client.org