Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/3139312e3234332e39322e302f32322d3234203d3e20323638353436.roa
File:                     3139312e3234332e39322e302f32322d3234203d3e20323638353436.roa (raw, json)
Hash identifier:          l688Dx39g3Wqh15KDX6V85nwAeFJZFJqe4Ibusv0Ido=
Subject key identifier:   B4:0E:42:08:61:7D:4D:2A:A5:DE:08:94:A2:99:DF:06:1D:83:8E:F1
Certificate issuer:       /CN=37CA3286264D504D79210CC12A74E15D2E230251
Certificate serial:       03CFD60FD5834FFDA1948453394ACAD8FB52EADB
Authority key identifier: 37:CA:32:86:26:4D:50:4D:79:21:0C:C1:2A:74:E1:5D:2E:23:02:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37CA3286264D504D79210CC12A74E15D2E230251.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/3139312e3234332e39322e302f32322d3234203d3e20323638353436.roa
Signing time:             Mon 12 Aug 2024 13:16:41 +0000
ROA not before:           Mon 12 Aug 2024 13:11:41 +0000
ROA not after:            Mon 11 Aug 2025 13:16:41 +0000
asID:                     268546
IP address blocks:        191.243.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/37CA3286264D504D79210CC12A74E15D2E230251.crl
                          rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/37CA3286264D504D79210CC12A74E15D2E230251.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37CA3286264D504D79210CC12A74E15D2E230251.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 03:08:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:cf:d6:0f:d5:83:4f:fd:a1:94:84:53:39:4a:ca:d8:fb:52:ea:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37CA3286264D504D79210CC12A74E15D2E230251
        Validity
            Not Before: Aug 12 13:11:41 2024 GMT
            Not After : Aug 11 13:16:41 2025 GMT
        Subject: CN=B40E4208617D4D2AA5DE0894A299DF061D838EF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ae:b5:3f:57:47:e5:47:27:cc:ab:0e:5e:79:
                    34:48:b5:a8:3b:cb:76:8d:67:bc:ac:28:4d:21:1b:
                    23:91:b1:2c:c2:f7:3f:b8:6a:92:f9:f6:37:8c:1e:
                    ca:0c:0d:21:6a:44:b2:8c:a7:67:ac:46:ec:e1:aa:
                    1e:58:90:bf:3d:b7:de:eb:15:e9:94:da:36:39:ba:
                    fa:64:da:e6:62:7c:82:ff:44:78:6a:92:2b:56:74:
                    57:73:b8:b4:60:2a:0d:67:8e:ef:cd:9d:ea:f8:24:
                    8c:3d:9c:0b:90:b8:69:f4:c6:87:ff:e2:d0:68:33:
                    37:19:7a:a1:cb:66:a0:1d:39:e8:69:dc:ab:dc:48:
                    98:80:0e:e6:4d:18:b6:52:e4:ad:99:fe:d6:c1:5e:
                    bf:e0:3f:94:05:d2:c2:aa:c2:90:4d:a6:7f:a1:84:
                    42:27:03:df:bc:c2:d8:5d:76:8d:77:cb:74:ab:c5:
                    6f:70:10:48:f3:37:36:87:92:b4:98:0b:83:3f:37:
                    60:54:97:28:71:6a:83:fe:73:d9:fd:12:cf:4b:a8:
                    f8:1c:5f:ba:fc:4c:fd:22:83:61:8a:38:1b:a6:a6:
                    2d:bb:27:01:87:49:66:66:f2:85:dd:a5:e8:79:6c:
                    48:0d:52:09:87:c4:66:86:dd:10:ba:05:c2:56:c5:
                    bb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0E:42:08:61:7D:4D:2A:A5:DE:08:94:A2:99:DF:06:1D:83:8E:F1
            X509v3 Authority Key Identifier:
                keyid:37:CA:32:86:26:4D:50:4D:79:21:0C:C1:2A:74:E1:5D:2E:23:02:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/37CA3286264D504D79210CC12A74E15D2E230251.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37CA3286264D504D79210CC12A74E15D2E230251.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/3139312e3234332e39322e302f32322d3234203d3e20323638353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:95:ce:ea:a1:cd:bf:69:8f:4b:c8:20:68:b2:53:ba:96:1e:
         a9:08:59:e1:5d:38:55:b3:e4:32:c7:d1:fe:c5:5e:0f:59:f6:
         95:1c:51:51:76:98:c7:42:3e:49:72:89:e3:d8:d1:7e:24:59:
         a9:95:4e:b0:0d:b0:75:ba:7d:54:1e:e9:2e:19:20:e6:6e:a2:
         0f:01:1f:8b:b5:e3:a6:9b:bd:ef:aa:e1:2e:da:fa:43:92:20:
         f8:2b:2a:31:e9:91:22:72:d1:b8:9d:15:6b:21:e0:45:92:7c:
         17:5c:07:31:0b:ed:9b:9f:4f:96:2e:86:fa:8f:98:74:d8:d5:
         f1:97:60:d3:80:37:11:65:ec:79:19:9d:a7:e3:0e:c4:29:6e:
         b5:75:0d:45:38:b6:ca:1c:96:32:59:62:97:77:50:f1:80:74:
         3b:e8:a7:c0:f8:c5:c3:96:40:95:42:8e:4f:60:dc:40:fb:6a:
         db:41:d6:5c:e4:64:4b:98:d8:85:7c:3e:45:e4:f1:03:12:4e:
         62:a6:e5:9b:ce:c9:2a:d1:3a:b1:c5:68:0a:ac:49:7d:d7:6d:
         ce:2e:07:47:6e:4d:18:e0:a5:66:35:05:77:38:76:0e:1c:78:
         80:ec:53:3f:3c:88:1c:23:d9:a1:cf:67:09:8e:97:4f:a7:f2:
         54:ec:fe:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:00 2024 by rpki-client on console-fra.rpki-client.org