Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/3137392e3130372e31322e302f32342d3234203d3e20323633323635.roa
File:                     3137392e3130372e31322e302f32342d3234203d3e20323633323635.roa (raw, json)
Hash identifier:          tNsyu+C2Swh+VmwH+u9nH+2m/ZJRMDaNrTvKKS28zRI=
Subject key identifier:   66:38:F1:AD:5A:5C:2C:F5:D5:D3:2D:1B:CB:E5:FE:3D:33:8E:38:4A
Certificate issuer:       /CN=CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E
Certificate serial:       12191A3F9447B4E1B575F701BDC185A9BBDBEFEC
Authority key identifier: CB:59:E2:41:FF:AA:C5:9F:A0:BA:1D:08:D9:8F:B8:1A:87:C5:D1:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/3137392e3130372e31322e302f32342d3234203d3e20323633323635.roa
Signing time:             Wed 03 Apr 2024 18:32:43 +0000
ROA not before:           Wed 03 Apr 2024 18:27:43 +0000
ROA not after:            Wed 02 Apr 2025 18:32:43 +0000
asID:                     263265
IP address blocks:        179.107.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.crl
                          rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 02:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:19:1a:3f:94:47:b4:e1:b5:75:f7:01:bd:c1:85:a9:bb:db:ef:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E
        Validity
            Not Before: Apr  3 18:27:43 2024 GMT
            Not After : Apr  2 18:32:43 2025 GMT
        Subject: CN=6638F1AD5A5C2CF5D5D32D1BCBE5FE3D338E384A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c1:57:a4:a8:da:83:24:2b:75:59:46:4e:52:
                    b0:6b:a7:63:df:21:f6:45:eb:bc:7b:0e:25:f4:e8:
                    e6:71:23:08:9c:ca:55:b9:73:6d:f1:57:e7:f6:17:
                    9c:3e:83:04:9a:7d:63:8e:06:3c:8b:66:76:b5:d8:
                    8a:2a:c0:99:5a:16:51:73:d1:57:a3:15:ec:fb:0d:
                    09:e1:02:8d:c2:ad:a2:3c:77:73:a7:ef:a0:ee:a8:
                    b1:46:61:9d:cf:b0:84:12:f4:58:a3:32:95:7d:fe:
                    c0:69:91:99:2f:5a:c0:c4:3f:e3:e6:b3:98:60:87:
                    8f:24:b2:a2:70:d9:f7:9c:ae:85:2b:a0:69:a8:63:
                    01:c5:15:0c:e2:9b:7c:80:4b:0e:63:3f:dd:12:27:
                    d2:7f:1d:02:38:db:ed:13:53:89:f3:2f:d2:f8:e7:
                    50:66:9d:d2:b0:92:a0:91:1b:f2:3f:37:a2:0a:f6:
                    5e:84:4f:90:f1:88:fd:fa:95:ef:10:da:07:9b:34:
                    32:1b:cc:ce:ee:3f:32:17:d3:b4:6f:ed:25:32:ff:
                    80:93:b7:8c:0a:3b:8c:87:a0:68:5b:71:a0:1b:e3:
                    82:c5:f0:2a:9f:28:cb:17:4e:18:86:9f:26:1f:97:
                    e4:d6:37:f5:3b:c0:3f:99:44:16:93:0a:66:3a:e9:
                    8b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:38:F1:AD:5A:5C:2C:F5:D5:D3:2D:1B:CB:E5:FE:3D:33:8E:38:4A
            X509v3 Authority Key Identifier:
                keyid:CB:59:E2:41:FF:AA:C5:9F:A0:BA:1D:08:D9:8F:B8:1A:87:C5:D1:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/3137392e3130372e31322e302f32342d3234203d3e20323633323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         df:a0:5c:9e:15:ea:b9:cb:29:d8:ec:a8:c5:67:3b:c0:d2:b2:
         52:f4:15:01:32:14:ef:f9:88:0d:33:db:5c:1c:2f:3e:54:5d:
         52:92:e5:ce:d8:2d:fa:6f:75:e0:48:22:f7:b1:62:a7:74:9e:
         3e:f6:ca:57:8f:20:fb:6c:0a:92:86:6e:2e:d5:88:b7:72:57:
         e8:2b:9d:80:9d:e2:e6:ce:c8:81:c6:03:20:b6:3a:d6:d9:88:
         ea:7b:b6:02:8e:a5:e3:b7:03:55:d6:a3:93:df:be:33:bf:e6:
         4e:a3:17:af:de:50:ba:74:95:2d:ae:c3:a5:ed:63:ac:a9:2e:
         6c:45:20:88:42:d1:a7:7a:32:28:e6:96:40:f9:7c:8d:36:53:
         ec:4b:ea:00:0a:75:d1:2a:f1:11:aa:e7:15:c1:78:df:ff:98:
         80:84:3a:a5:ff:56:04:5c:ae:b4:b0:ab:6d:87:c7:74:e5:36:
         d5:48:0c:6c:14:e4:a6:03:45:23:ae:e7:48:f0:80:8d:55:84:
         2c:bc:f8:c4:57:ae:4b:bd:3c:14:e9:e7:94:2a:10:3f:50:64:
         d2:59:06:73:8d:e9:62:63:41:19:85:56:b2:57:b1:2a:f6:0a:
         04:ef:d2:1e:87:c8:71:8b:4c:a6:47:36:61:11:d6:a6:47:7d:
         13:2f:94:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:58 2024 by rpki-client on console-fra.rpki-client.org