Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35352e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e35352e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          suMLg1r51DnAplntzanIXsjq7E30SXyEIxznWM4ywMc=
Subject key identifier:   72:20:B0:50:60:73:AD:54:16:DC:0F:23:F1:8B:BE:42:7A:AF:64:16
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       31D01EA356A4DAA3FA92B156A84DBD1DEF75B9E5
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35352e302f32342d3234203d3e20323633333437.roa
Signing time:             Fri 08 Nov 2024 20:14:25 +0000
ROA not before:           Fri 08 Nov 2024 20:09:25 +0000
ROA not after:            Fri 07 Nov 2025 20:14:25 +0000
asID:                     263347
IP address blocks:        191.37.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 09:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d0:1e:a3:56:a4:da:a3:fa:92:b1:56:a8:4d:bd:1d:ef:75:b9:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Nov  8 20:09:25 2024 GMT
            Not After : Nov  7 20:14:25 2025 GMT
        Subject: CN=7220B0506073AD5416DC0F23F18BBE427AAF6416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fa:2a:d6:87:c5:dd:1a:89:69:22:02:54:f1:
                    14:4f:89:2a:1c:ce:d5:5d:7b:2e:07:bb:e5:59:0b:
                    f3:34:26:07:b1:d1:39:8b:40:97:b0:43:5a:24:1a:
                    c5:df:0b:fe:9b:6b:b0:f1:32:5e:d1:ae:95:c9:93:
                    84:51:4b:d2:1e:4d:1a:f6:94:dc:73:aa:22:f7:17:
                    a9:67:65:8a:98:33:4f:d1:6c:20:33:51:53:a9:70:
                    dd:fb:b2:a7:a9:df:14:09:a9:5d:82:20:57:ac:20:
                    3a:6c:28:ea:bc:f7:4d:a3:7b:25:16:28:8c:a9:9f:
                    dc:fc:b0:a7:1e:90:71:1a:f5:b4:61:f1:ce:cc:cf:
                    3a:96:40:d7:bb:2a:12:c1:38:c6:75:9d:c0:eb:55:
                    81:64:e7:60:79:0f:12:36:a4:55:24:e8:40:c4:32:
                    6a:b2:76:2a:b0:8f:19:94:77:f6:0c:e7:b3:4c:5b:
                    e9:bd:e8:c5:d2:f6:73:5a:a5:8e:d5:85:b2:64:ce:
                    4b:79:ac:e1:6d:1f:a8:0a:4f:bf:14:de:14:6d:5d:
                    63:97:d4:63:72:f4:2d:ce:b7:fe:7a:0b:e8:37:30:
                    81:69:f3:29:22:bf:ed:4c:02:3f:c9:66:36:59:95:
                    04:db:30:0b:59:a9:60:27:e8:29:d1:01:8e:46:dc:
                    07:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:20:B0:50:60:73:AD:54:16:DC:0F:23:F1:8B:BE:42:7A:AF:64:16
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35352e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:b6:39:e2:5b:c1:67:1d:f8:98:cc:9b:1a:b8:f9:2c:23:eb:
         9e:23:ca:36:17:7e:00:bd:43:91:bf:38:cc:89:1a:48:0e:5f:
         49:62:2c:b1:82:67:f7:7b:3a:1c:d3:89:ab:92:35:5c:ac:10:
         06:ee:52:72:99:cc:e7:40:06:7e:48:2d:b1:5e:52:72:37:db:
         7a:40:20:74:27:bb:96:a5:50:8f:7e:a1:e0:ac:18:91:f6:78:
         db:80:1e:b3:ed:41:dc:0e:6a:5f:9d:db:a6:db:fa:5f:3d:03:
         67:c5:d4:69:aa:a8:ba:02:c2:30:bb:9b:77:c4:11:0d:62:fc:
         55:b4:78:74:d8:1f:ff:b7:dc:d0:76:5d:11:be:4e:ab:f5:ff:
         2e:19:2e:04:d0:4b:7c:ad:d4:5a:0c:09:76:ee:53:9a:28:f2:
         ac:2f:07:8c:e4:d1:19:73:70:16:95:af:8b:5f:e9:e2:15:eb:
         6e:35:a3:66:a7:b0:f0:af:28:86:ed:16:57:4b:cc:e8:96:e8:
         0e:21:97:4a:bb:7a:1a:d1:e6:a1:04:eb:38:06:9e:a4:21:fd:
         e5:8a:ca:2b:ff:5d:e6:55:89:94:0f:19:42:cf:77:32:a8:ba:
         34:aa:d5:fe:96:fe:11:77:d4:eb:94:b5:54:cd:4b:e2:a8:34:
         13:4f:b7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:40 2024 by rpki-client on console-fra.rpki-client.org