Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3232322e302f32332d3233203d3e20323733333039.roa
File:                     3139312e33372e3232322e302f32332d3233203d3e20323733333039.roa (raw, json)
Hash identifier:          KGSGKyF3VGyj+gwdI4nwDKA7TYoZ9rK0W4UEsn7BS9M=
Subject key identifier:   DB:53:94:75:40:40:2F:D7:C7:BA:B1:A1:3F:1A:EE:D0:95:C5:0E:3F
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       73E3F8B92D63147B77AACC2CBBFCC425D8D173B2
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3232322e302f32332d3233203d3e20323733333039.roa
Signing time:             Thu 09 May 2024 13:16:32 +0000
ROA not before:           Thu 09 May 2024 13:11:32 +0000
ROA not after:            Thu 08 May 2025 13:16:32 +0000
asID:                     273309
IP address blocks:        191.37.222.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e3:f8:b9:2d:63:14:7b:77:aa:cc:2c:bb:fc:c4:25:d8:d1:73:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: May  9 13:11:32 2024 GMT
            Not After : May  8 13:16:32 2025 GMT
        Subject: CN=DB53947540402FD7C7BAB1A13F1AEED095C50E3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b6:ac:05:1a:1c:e4:1e:84:d8:47:e8:75:cb:
                    c7:98:36:68:0d:6e:d8:57:2c:bc:4d:52:96:cf:19:
                    43:54:88:57:19:bf:b6:c4:51:1d:4c:0d:c4:a0:16:
                    c9:c5:72:f0:b6:48:24:70:ac:3c:49:ad:66:59:a2:
                    9e:f2:83:7f:61:f7:06:2d:72:e2:eb:b8:3d:3e:a2:
                    4a:2d:95:bf:a9:33:15:db:e7:5b:e9:07:71:4a:61:
                    30:78:a6:3f:7a:4a:4d:3b:b6:58:28:4e:ea:5a:89:
                    34:21:d8:6b:ad:e1:b0:b0:1a:54:b8:c7:87:3c:b2:
                    d2:57:91:9b:8e:6e:8e:a6:c4:c6:34:21:27:17:fb:
                    1b:d3:c3:cb:3c:2f:63:c7:7d:71:14:56:77:04:38:
                    00:8f:44:64:b7:4e:11:15:60:f3:d3:b5:e4:83:f5:
                    0e:25:12:2d:d9:0f:f9:d3:d3:92:52:3c:9f:b3:93:
                    74:b8:c1:8b:83:19:ea:3c:53:ad:f4:be:85:79:47:
                    99:69:57:63:19:c7:da:69:79:77:23:61:ad:18:bd:
                    a6:73:b1:3f:4d:2a:90:97:3e:5f:79:34:6e:d8:5e:
                    ae:46:08:cd:83:ac:f6:eb:32:57:40:cf:b5:f6:2e:
                    8c:a0:64:39:42:cd:11:d0:fa:31:09:6e:19:2b:4a:
                    67:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:53:94:75:40:40:2F:D7:C7:BA:B1:A1:3F:1A:EE:D0:95:C5:0E:3F
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3232322e302f32332d3233203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:7a:79:8b:be:72:10:cb:0c:93:1f:eb:17:5f:5b:29:8b:a7:
         0b:21:6f:80:3e:7f:6a:8a:67:8f:c4:21:58:b9:6f:e7:4d:c7:
         2e:85:e9:90:13:94:1e:d8:79:fd:59:28:32:ef:93:d3:f6:fc:
         bd:50:6d:c3:0d:11:ee:4c:12:cd:34:16:4e:83:55:ea:a5:9c:
         a6:36:e8:7c:bc:d0:02:34:88:6e:9c:e6:dc:7c:54:84:32:6e:
         69:66:d5:a2:1f:e9:43:54:d7:9e:c6:5a:51:ed:87:d4:3e:c2:
         52:a6:61:9f:ea:bb:23:0a:a4:b7:dc:d9:89:2f:30:b0:21:df:
         76:71:0f:f4:35:77:b1:f8:6f:5f:66:63:61:8e:5e:3a:0c:0f:
         e4:f0:2e:88:d7:3b:16:76:cb:eb:39:c9:1e:dc:e7:40:08:27:
         ed:a4:8d:8d:24:cd:1e:9c:65:35:02:63:31:06:1f:a4:8a:5c:
         a5:7e:8d:80:92:4a:16:94:c2:88:bf:56:16:91:26:e4:ae:1c:
         61:00:d8:ae:cb:dd:38:e1:84:f0:27:81:6f:b2:a5:57:ca:a7:
         a7:40:63:fe:0d:5a:94:9b:61:41:c1:24:72:4f:d4:78:39:19:
         30:d5:5f:d9:42:67:79:34:3c:4a:a7:53:18:9a:56:31:e6:e0:
         aa:46:0a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:09 2024 by rpki-client on console-ams.rpki-client.org