Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35362e302f32332d3233203d3e20323633333437.roa
File:                     3139312e33372e35362e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          qWvwms3ilh9+XgXfxxizRqCemrQcqAsI2i1j5+x4hWU=
Subject key identifier:   E4:68:1C:16:B1:90:1D:3B:F0:CF:72:5D:6C:0D:E2:95:0C:78:E4:AB
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       5547F535B0FA46BBF4E299B3041918A427B64B3A
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35362e302f32332d3233203d3e20323633333437.roa
Signing time:             Thu 04 Apr 2024 17:40:27 +0000
ROA not before:           Thu 04 Apr 2024 17:35:27 +0000
ROA not after:            Thu 03 Apr 2025 17:40:27 +0000
asID:                     263347
IP address blocks:        191.37.56.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:47:f5:35:b0:fa:46:bb:f4:e2:99:b3:04:19:18:a4:27:b6:4b:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Apr  4 17:35:27 2024 GMT
            Not After : Apr  3 17:40:27 2025 GMT
        Subject: CN=E4681C16B1901D3BF0CF725D6C0DE2950C78E4AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c6:76:13:86:53:87:ba:42:47:d7:77:c8:c6:
                    21:f0:22:72:45:02:cd:72:a6:87:ca:69:51:88:84:
                    f1:d9:80:58:3b:16:ec:e1:8b:4a:b6:b9:81:99:68:
                    62:44:a9:64:bb:43:d2:ef:80:ab:62:4e:85:26:55:
                    05:be:60:a8:63:64:75:9a:e5:c9:64:55:ad:2b:b5:
                    99:a3:4d:c1:ef:e0:0c:6e:5b:81:1b:83:a9:00:a7:
                    ef:ff:8f:c2:ca:b7:41:a0:c3:97:10:3b:9b:79:df:
                    04:2e:42:64:54:b3:f2:33:2d:19:08:02:70:e2:92:
                    f2:25:3f:ae:8c:a4:c8:60:52:7f:04:ed:dd:2d:07:
                    e3:ff:8e:bf:d4:e0:a5:5a:25:ac:8d:62:84:3d:59:
                    57:5f:11:3f:be:a3:0c:6e:47:94:f1:b5:4d:c1:17:
                    a2:31:e5:e1:74:5b:10:52:f1:ce:52:64:d7:f4:e7:
                    99:cc:36:f0:0d:13:52:9e:b2:e5:27:4f:9a:7b:ec:
                    98:6f:4a:2a:17:62:04:27:ba:5c:81:40:80:5b:db:
                    c7:c8:67:18:bd:da:db:62:2a:04:f9:16:f9:dd:9f:
                    a1:0c:ee:86:c1:30:f7:1f:df:ee:88:10:6f:ba:37:
                    52:46:ed:45:c5:27:c2:6e:50:e5:85:b3:e0:3b:b2:
                    4e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:68:1C:16:B1:90:1D:3B:F0:CF:72:5D:6C:0D:E2:95:0C:78:E4:AB
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35362e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:a2:22:c5:87:2c:63:82:95:18:64:9b:ce:81:e4:c0:6a:c1:
         bd:8e:4d:4f:20:49:ec:47:fd:ec:7b:b7:f6:53:0a:6f:e9:d4:
         62:14:2e:dd:6a:64:7a:53:fc:2d:6b:9d:8a:5d:7d:39:9f:87:
         89:e7:8e:e5:81:48:92:bb:8a:7a:58:10:10:d7:79:8a:a1:00:
         96:97:e0:fb:40:f3:e1:c0:94:4d:77:3b:2a:f2:e2:d8:38:e9:
         7c:ab:58:a9:ca:33:f4:e1:3a:95:30:ce:e7:06:57:8f:57:0d:
         0f:55:fc:21:9c:6c:e6:c3:a2:1c:b3:26:00:c8:6e:67:da:46:
         90:7a:9b:33:29:81:de:0c:36:9d:77:d5:d1:f0:9c:ee:03:28:
         ee:8c:10:5e:68:a2:cc:6e:e3:5c:cd:a0:a1:1e:df:81:88:9d:
         67:e7:dc:f4:a3:9a:9d:75:dd:68:9e:31:25:cd:9d:82:aa:f0:
         be:a2:90:4d:9a:9c:14:03:c5:cb:a7:f6:75:df:7b:e4:f3:34:
         fc:a9:ab:c8:bc:28:66:20:bc:45:2f:84:dd:23:34:0e:ef:38:
         d2:e2:79:90:34:f6:85:b1:7a:59:ee:fc:cf:92:be:b8:a3:86:
         a0:2a:f7:7d:8c:40:26:b9:9a:b4:b2:2f:c4:25:41:22:61:6d:
         3f:f5:14:8d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVUf1NbD6Rrv04pmzBBkYpCe2SzowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMwOTE2Njk3Q0M3N0ExQTg3NkU0ODY1QkUwMkY1NUE4
RUZGOUJGMjAeFw0yNDA0MDQxNzM1MjdaFw0yNTA0MDMxNzQwMjdaMDMxMTAvBgNV
BAMTKEU0NjgxQzE2QjE5MDFEM0JGMENGNzI1RDZDMERFMjk1MEM3OEU0QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5xnYThlOHukJH13fIxiHwInJF
As1ypofKaVGIhPHZgFg7Fuzhi0q2uYGZaGJEqWS7Q9LvgKtiToUmVQW+YKhjZHWa
5clkVa0rtZmjTcHv4AxuW4Ebg6kAp+//j8LKt0Ggw5cQO5t53wQuQmRUs/IzLRkI
AnDikvIlP66MpMhgUn8E7d0tB+P/jr/U4KVaJayNYoQ9WVdfET++owxuR5TxtU3B
F6Ix5eF0WxBS8c5SZNf055nMNvANE1KesuUnT5p77JhvSioXYgQnulyBQIBb28fI
Zxi92ttiKgT5Fvndn6EM7obBMPcf3+6IEG+6N1JG7UXFJ8JuUOWFs+A7sk63AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU5GgcFrGQHTvwz3JdbA3ilQx45KswHwYDVR0j
BBgwFoAUAwkWaXzHehqHbkhlvgL1Wo7/m/IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVeWFzTm5lVW1TcXhESnVwZG15c3dteUtSdENHZEt0dmtQODUxSHh5
ZEMvMS8wMzA5MTY2OTdDQzc3QTFBODc2RTQ4NjVCRTAyRjU1QThFRkY5QkYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzMDkxNjY5N0NDNzdBMUE4
NzZFNDg2NUJFMDJGNTVBOEVGRjlCRjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVXlhc05uZVVtU3F4REp1cGRteXN3bXlLUnRDR2RLdHZrUDg1MUh4eWRDLzEv
MzEzOTMxMmUzMzM3MmUzNTM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMz
MzMzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBvyU4MA0GCSqGSIb3DQEBCwUAA4IBAQCmoiLFhyxj
gpUYZJvOgeTAasG9jk1PIEnsR/3se7f2Uwpv6dRiFC7damR6U/wta52KXX05n4eJ
547lgUiSu4p6WBAQ13mKoQCWl+D7QPPhwJRNdzsq8uLYOOl8q1ipyjP04TqVMM7n
BlePVw0PVfwhnGzmw6IcsyYAyG5n2kaQepszKYHeDDadd9XR8JzuAyjujBBeaKLM
buNczaChHt+BiJ1n59z0o5qddd1onjElzZ2CqvC+opBNmpwUA8XLp/Z133vk8zT8
qavIvChmILxFL4TdIzQO7zjS4nmQNPaFsXpZ7vzPkr64o4agKvd9jEAmuZq0si/E
JUEiYW0/9RSN
-----END CERTIFICATE-----
Generated at Fri Sep 20 10:51:49 2024 by rpki-client on console-fra.rpki-client.org