Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/3137392e3130372e31312e302f32342d3234203d3e20323633323635.roa
File:                     3137392e3130372e31312e302f32342d3234203d3e20323633323635.roa (raw, json)
Hash identifier:          pGJWyMsCsrrYgMDX028zqdlw9cRvdBfHTd9TJ0Vl7zI=
Subject key identifier:   1B:5B:D8:F8:D3:5A:FF:A2:AA:3A:5F:A6:53:FE:07:80:03:40:D2:2A
Certificate issuer:       /CN=CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E
Certificate serial:       397603B90FF2DCC9AA71C260E0731C5633A16BD0
Authority key identifier: CB:59:E2:41:FF:AA:C5:9F:A0:BA:1D:08:D9:8F:B8:1A:87:C5:D1:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/3137392e3130372e31312e302f32342d3234203d3e20323633323635.roa
Signing time:             Wed 03 Apr 2024 18:32:43 +0000
ROA not before:           Wed 03 Apr 2024 18:27:43 +0000
ROA not after:            Wed 02 Apr 2025 18:32:43 +0000
asID:                     263265
IP address blocks:        179.107.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.crl
                          rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 02:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:76:03:b9:0f:f2:dc:c9:aa:71:c2:60:e0:73:1c:56:33:a1:6b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E
        Validity
            Not Before: Apr  3 18:27:43 2024 GMT
            Not After : Apr  2 18:32:43 2025 GMT
        Subject: CN=1B5BD8F8D35AFFA2AA3A5FA653FE07800340D22A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9e:3e:8c:87:2d:c2:e8:25:22:bf:01:6d:4f:
                    58:f4:4c:94:e1:98:98:19:06:20:21:f0:28:80:12:
                    ca:a2:b2:95:a0:ae:53:1d:e4:6d:68:ce:9a:9a:b8:
                    bc:33:d9:fe:c0:ec:be:78:81:b8:8c:d3:05:63:63:
                    68:85:f7:3a:39:29:18:17:1e:fb:2f:04:7f:6f:a2:
                    ce:75:43:bb:ea:72:82:b7:64:f3:c9:e5:42:ec:85:
                    91:fb:29:81:43:98:ad:1f:19:84:5c:04:18:89:4d:
                    0f:db:97:33:36:c6:fe:75:aa:30:a1:4f:63:e9:76:
                    5b:4f:8e:1a:fa:1e:fa:a2:1a:31:05:83:82:a1:4d:
                    0d:7c:ef:79:60:7f:2c:aa:c1:7c:d6:55:26:28:bf:
                    0c:f0:47:46:37:55:f5:c2:3a:65:9e:e9:b9:30:a8:
                    e4:69:f6:33:1d:3e:ae:b3:df:2f:89:30:90:41:30:
                    59:88:77:c9:53:ce:3a:44:5c:db:62:8c:0e:b2:69:
                    98:2c:8d:66:9d:63:4e:47:4e:61:23:67:c4:3d:f6:
                    14:07:86:dd:03:93:e3:90:cc:d1:49:ad:77:d7:03:
                    85:ba:4e:47:35:70:d8:95:c9:5a:33:53:d6:75:ae:
                    47:c5:7b:4c:14:96:7c:0b:64:4c:11:46:50:2c:9d:
                    da:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5B:D8:F8:D3:5A:FF:A2:AA:3A:5F:A6:53:FE:07:80:03:40:D2:2A
            X509v3 Authority Key Identifier:
                keyid:CB:59:E2:41:FF:AA:C5:9F:A0:BA:1D:08:D9:8F:B8:1A:87:C5:D1:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/3137392e3130372e31312e302f32342d3234203d3e20323633323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:8f:8f:ef:54:18:0c:51:98:d9:b5:52:79:24:a1:7e:12:74:
         8c:b6:ec:01:e1:b0:d3:10:39:d8:ca:e3:48:35:8d:10:ea:71:
         f1:40:ff:66:c8:3b:34:61:61:af:4e:24:ef:63:2f:a6:64:7f:
         2b:6d:2c:13:5d:41:5f:02:c4:95:7a:93:52:aa:ba:66:52:c0:
         4e:ba:a9:4b:bb:0f:5b:49:8d:16:d8:b8:23:31:a4:48:9e:7d:
         b7:66:46:89:8f:8a:fe:68:bc:8e:b5:a2:b8:7d:3f:de:18:4e:
         0e:36:7f:c7:b2:13:ad:af:2b:3f:03:ec:56:05:72:53:a4:e4:
         2a:46:da:2d:fe:67:92:95:92:7b:f5:f3:84:89:63:ab:1d:99:
         19:fd:aa:bd:25:55:ef:fa:b9:1e:19:48:be:9f:78:4c:9a:04:
         fa:a3:fd:60:fe:26:26:65:c3:13:93:96:b3:63:3b:d6:e0:af:
         9c:55:99:d6:0c:15:02:c9:81:00:1b:93:e0:42:c1:c9:28:0c:
         e4:f6:ea:dc:ad:93:5d:9b:5c:c1:06:45:e6:27:dc:04:76:00:
         20:e9:06:e1:84:26:da:f7:e8:d0:2a:26:e1:a4:a2:af:e7:58:
         41:d8:e8:29:27:fd:16:ae:77:88:e1:d4:11:34:cb:ae:a4:9b:
         c5:7b:1c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:58 2024 by rpki-client on console-fra.rpki-client.org