Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/3137392e3130372e31332e302f32342d3234203d3e20323633323635.roa
File:                     3137392e3130372e31332e302f32342d3234203d3e20323633323635.roa (raw, json)
Hash identifier:          xvysB9HG+8o41SkTYZ7LQGI5km1V6cGD/zIT/byn2AU=
Subject key identifier:   51:B0:47:21:1E:3F:C4:1A:BD:29:1B:9A:91:A0:02:63:17:B8:5B:C5
Certificate issuer:       /CN=CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E
Certificate serial:       56556D254D83506C181BB2A8A2A5AF0199C7D244
Authority key identifier: CB:59:E2:41:FF:AA:C5:9F:A0:BA:1D:08:D9:8F:B8:1A:87:C5:D1:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/3137392e3130372e31332e302f32342d3234203d3e20323633323635.roa
Signing time:             Wed 03 Apr 2024 18:32:43 +0000
ROA not before:           Wed 03 Apr 2024 18:27:43 +0000
ROA not after:            Wed 02 Apr 2025 18:32:43 +0000
asID:                     263265
IP address blocks:        179.107.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.crl
                          rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 02:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:55:6d:25:4d:83:50:6c:18:1b:b2:a8:a2:a5:af:01:99:c7:d2:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E
        Validity
            Not Before: Apr  3 18:27:43 2024 GMT
            Not After : Apr  2 18:32:43 2025 GMT
        Subject: CN=51B047211E3FC41ABD291B9A91A0026317B85BC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5b:03:3b:b1:ee:30:88:c6:69:b5:c4:ea:31:
                    f6:12:92:01:18:13:c5:5b:9e:7b:f9:be:d8:ae:ce:
                    cd:f9:89:d9:49:68:24:f4:f8:99:b6:b3:45:ee:1f:
                    5a:65:fe:00:c1:03:eb:c2:79:0a:03:66:34:e6:09:
                    ce:c1:01:d4:4e:0e:7f:f7:d2:47:34:ec:57:d8:6c:
                    4b:8c:ee:32:f3:ad:63:04:23:c1:0e:c2:d3:f7:a0:
                    f9:b9:24:12:4c:91:41:8b:66:58:57:66:27:5e:6e:
                    da:79:75:29:ae:10:23:3d:2b:72:1b:3b:22:54:11:
                    67:e0:d0:12:67:7a:4b:ed:5e:75:60:30:93:8d:85:
                    d8:25:5c:0e:74:41:d1:86:32:69:6f:8a:ed:b1:9b:
                    34:30:2b:0e:6e:9d:f8:9a:47:6a:5c:eb:41:55:7a:
                    63:b9:5d:92:cc:70:63:e8:83:88:ba:43:eb:f9:f6:
                    36:31:cb:84:49:31:12:8d:00:9b:24:8e:58:8b:77:
                    52:c4:b4:2f:99:d1:49:94:33:09:46:a5:8f:fd:95:
                    2b:99:2b:fb:f7:1d:d1:37:a4:ce:f9:8d:c6:18:1f:
                    a5:25:9b:90:58:14:d0:93:82:c2:77:06:6e:db:44:
                    2e:91:c3:34:b1:14:30:78:99:9c:f2:5a:5c:cd:10:
                    2c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B0:47:21:1E:3F:C4:1A:BD:29:1B:9A:91:A0:02:63:17:B8:5B:C5
            X509v3 Authority Key Identifier:
                keyid:CB:59:E2:41:FF:AA:C5:9F:A0:BA:1D:08:D9:8F:B8:1A:87:C5:D1:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/3137392e3130372e31332e302f32342d3234203d3e20323633323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:b8:4d:be:5b:08:a1:3b:44:47:08:4c:cd:e2:11:1d:b0:d3:
         32:68:99:79:f5:76:e6:d8:6b:91:d5:56:8b:7c:dc:d1:fb:85:
         00:9f:cb:5b:50:e1:2c:4a:b1:43:ec:e9:98:31:f4:2f:16:2d:
         09:31:57:6e:7b:bf:90:22:e9:2b:15:40:14:39:28:0a:4c:25:
         fe:f0:ef:48:4f:63:13:1a:75:b9:15:05:5b:ca:d8:a5:d3:9e:
         75:a8:56:a1:4b:71:ca:74:c4:f0:1d:c9:b8:1c:61:96:14:76:
         d8:cb:c7:3c:53:fb:4f:73:c1:15:58:7f:ea:90:36:7c:64:fc:
         5b:ef:bf:4f:16:55:d5:1f:ba:34:5d:41:cf:cc:e1:e9:f8:ee:
         85:ec:cc:e7:56:e3:7b:7c:d4:8d:1e:44:c9:44:fb:13:c3:9c:
         0d:a6:95:f8:2c:68:d7:70:37:f8:04:11:83:8e:bb:c2:13:ad:
         c6:c5:de:89:1c:e0:0a:36:7f:a2:cf:1c:06:0f:41:b0:64:02:
         d0:ac:77:ac:95:4e:f0:9b:81:ac:28:d4:48:0b:dc:da:11:7d:
         19:6b:98:b3:0a:5f:a2:ec:c1:b7:bf:e4:24:97:56:53:35:5e:
         83:a7:0a:cd:8b:13:da:88:c2:bb:2d:58:31:28:7a:d1:97:4f:
         a3:d8:c5:af
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVlVtJU2DUGwYG7KooqWvAZnH0kQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I1OUUyNDFGRkFBQzU5RkEwQkExRDA4RDk4RkI4MUE4
N0M1RDE3RTAeFw0yNDA0MDMxODI3NDNaFw0yNTA0MDIxODMyNDNaMDMxMTAvBgNV
BAMTKDUxQjA0NzIxMUUzRkM0MUFCRDI5MUI5QTkxQTAwMjYzMTdCODVCQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaWwM7se4wiMZptcTqMfYSkgEY
E8Vbnnv5vtiuzs35idlJaCT0+Jm2s0XuH1pl/gDBA+vCeQoDZjTmCc7BAdRODn/3
0kc07FfYbEuM7jLzrWMEI8EOwtP3oPm5JBJMkUGLZlhXZidebtp5dSmuECM9K3Ib
OyJUEWfg0BJnekvtXnVgMJONhdglXA50QdGGMmlviu2xmzQwKw5unfiaR2pc60FV
emO5XZLMcGPog4i6Q+v59jYxy4RJMRKNAJskjliLd1LEtC+Z0UmUMwlGpY/9lSuZ
K/v3HdE3pM75jcYYH6Ulm5BYFNCTgsJ3Bm7bRC6RwzSxFDB4mZzyWlzNECzTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUUbBHIR4/xBq9KRuakaACYxe4W8UwHwYDVR0j
BBgwFoAUy1niQf+qxZ+guh0I2Y+4GofF0X4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHkybzU1MzdjQzZZY0NzQkFOOHZXTUJVNWFRTUpjNW16aEtCNHV0Tm1h
VXovMS9DQjU5RTI0MUZGQUFDNTlGQTBCQTFEMDhEOThGQjgxQTg3QzVEMTdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCNTlFMjQxRkZBQUM1OUZB
MEJBMUQwOEQ5OEZCODFBODdDNUQxN0UuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh5Mm81NTM3Y0M2WWNDc0JBTjh2V01CVTVhUU1KYzVtemhLQjR1dE5tYVV6LzEv
MzEzNzM5MmUzMTMwMzcyZTMxMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMjM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzaw0wDQYJKoZIhvcNAQELBQADggEBAIe4Tb5b
CKE7REcITM3iER2w0zJomXn1dubYa5HVVot83NH7hQCfy1tQ4SxKsUPs6Zgx9C8W
LQkxV257v5Ai6SsVQBQ5KApMJf7w70hPYxMadbkVBVvK2KXTnnWoVqFLccp0xPAd
ybgcYZYUdtjLxzxT+09zwRVYf+qQNnxk/Fvvv08WVdUfujRdQc/M4en47oXszOdW
43t81I0eRMlE+xPDnA2mlfgsaNdwN/gEEYOOu8ITrcbF3okc4Ao2f6LPHAYPQbBk
AtCsd6yVTvCbgawo1EgL3NoRfRlrmLMKX6Lswbe/5CSXVlM1XoOnCs2LE9qIwrst
WDEoetGXT6PYxa8=
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:58 2024 by rpki-client on console-fra.rpki-client.org