Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35382e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e35382e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          0ivK8br2x9Hn3oVzYLA7uNfKyuU4kEuYsFIJt6x4S0I=
Subject key identifier:   F3:F1:B4:10:28:DB:7C:8B:A4:CA:6F:3B:B7:77:83:A1:43:98:F6:22
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       5B88672A99E441448D00B202FAA9FEF43CEA5D78
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35382e302f32342d3234203d3e20323633333437.roa
Signing time:             Thu 07 Nov 2024 18:26:05 +0000
ROA not before:           Thu 07 Nov 2024 18:21:05 +0000
ROA not after:            Thu 06 Nov 2025 18:26:05 +0000
asID:                     263347
IP address blocks:        191.37.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:88:67:2a:99:e4:41:44:8d:00:b2:02:fa:a9:fe:f4:3c:ea:5d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Nov  7 18:21:05 2024 GMT
            Not After : Nov  6 18:26:05 2025 GMT
        Subject: CN=F3F1B41028DB7C8BA4CA6F3BB77783A14398F622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6c:4c:39:a8:d0:3e:29:2c:98:9f:af:37:59:
                    bb:2f:0f:33:11:40:ff:1b:f9:fb:4c:c7:14:86:4d:
                    7e:f0:0c:51:bc:e3:0a:4b:59:6c:25:ca:91:76:2f:
                    a0:27:6b:b1:aa:84:97:60:42:ac:f1:1e:55:28:00:
                    a2:ac:9f:b9:42:40:5f:dd:46:86:39:7d:60:a5:2b:
                    5c:35:ed:0f:a7:80:b3:1b:79:1b:fd:69:40:50:f5:
                    99:94:00:5a:6e:f4:5f:12:e5:40:19:9f:f3:3f:b5:
                    52:ed:c1:19:a3:9b:62:c9:a0:f1:61:1c:74:aa:f2:
                    18:d3:d0:28:c6:47:94:a0:9e:14:ed:a2:f0:ce:05:
                    58:e2:26:7a:ed:2f:01:63:23:46:39:3a:7d:89:62:
                    ca:7f:2a:55:f5:7b:d1:b1:74:3c:e3:44:46:a2:d5:
                    14:bc:59:d9:5d:fb:2c:ba:b5:95:15:62:28:b1:d0:
                    1a:2e:e4:68:f1:34:f7:e0:6d:f7:fd:64:86:a8:fa:
                    97:a0:a1:7f:90:59:c2:b7:fa:37:fa:65:d1:2c:7d:
                    b9:1f:31:cb:ec:ed:4e:91:69:f4:00:b9:65:d3:47:
                    8f:aa:7e:f4:5d:33:0a:9b:66:3e:79:b6:3a:82:33:
                    04:ad:5c:d7:64:3f:69:4c:3d:bc:e8:0f:5e:2d:0e:
                    a8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F1:B4:10:28:DB:7C:8B:A4:CA:6F:3B:B7:77:83:A1:43:98:F6:22
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35382e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:72:62:99:47:09:23:d3:b3:e2:25:fc:b6:99:c1:9f:50:a9:
         c1:35:5b:fe:be:88:45:e1:e6:94:c3:3a:39:c4:56:27:2c:1e:
         68:1c:59:92:96:b2:e1:51:ed:19:13:f0:81:da:28:ae:c4:81:
         47:1b:6d:a1:ba:61:3c:e3:82:c8:52:4b:2a:f3:24:83:07:f9:
         fe:02:c8:22:8a:1b:d3:7f:01:93:d9:92:97:c2:a3:c9:8d:89:
         ae:8a:4f:85:27:49:f4:31:b2:f0:62:51:27:d0:89:0b:87:89:
         9b:4d:6c:50:64:41:28:99:09:b6:77:e5:be:8f:b4:8a:80:d1:
         e7:9a:1c:c7:dc:8c:ff:f4:7b:91:82:b3:df:10:a8:5a:2d:63:
         4e:6b:5d:09:b9:21:61:c4:85:4a:06:8d:83:9b:41:13:91:97:
         e8:6a:f0:b9:d0:2b:71:07:96:f0:24:f5:48:c7:d1:4a:9f:48:
         f9:e2:4b:50:1a:ba:86:45:4b:89:d8:94:cb:b8:22:61:59:62:
         e1:9e:0a:73:99:be:8b:ae:51:0a:f6:ca:58:42:1f:3a:99:51:
         1c:55:7c:55:e1:4f:c2:ec:6d:c5:6c:b0:61:d6:4e:fd:d9:78:
         98:f5:e8:08:46:20:dd:b5:44:19:06:86:bb:63:5a:d8:96:59:
         cd:75:d1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:26 2024 by rpki-client on console-fra.rpki-client.org