Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/3137392e3130372e31342e302f32342d3234203d3e20323633323635.roa
File:                     3137392e3130372e31342e302f32342d3234203d3e20323633323635.roa (raw, json)
Hash identifier:          s9ma5sFhUxQjRQPjc1avS7ATDEehMkmocBh9jFvUmkA=
Subject key identifier:   DF:10:D7:80:A0:68:8D:3A:FE:3B:E9:3B:A6:3B:E9:8C:27:69:B6:B3
Certificate issuer:       /CN=CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E
Certificate serial:       1CB1C8415404DAC12D3FB08595ED6D82B2E0AB5F
Authority key identifier: CB:59:E2:41:FF:AA:C5:9F:A0:BA:1D:08:D9:8F:B8:1A:87:C5:D1:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/3137392e3130372e31342e302f32342d3234203d3e20323633323635.roa
Signing time:             Wed 03 Apr 2024 18:32:43 +0000
ROA not before:           Wed 03 Apr 2024 18:27:43 +0000
ROA not after:            Wed 02 Apr 2025 18:32:43 +0000
asID:                     263265
IP address blocks:        179.107.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.crl
                          rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 02:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b1:c8:41:54:04:da:c1:2d:3f:b0:85:95:ed:6d:82:b2:e0:ab:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E
        Validity
            Not Before: Apr  3 18:27:43 2024 GMT
            Not After : Apr  2 18:32:43 2025 GMT
        Subject: CN=DF10D780A0688D3AFE3BE93BA63BE98C2769B6B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ec:e2:a1:04:b5:29:b4:e9:64:e2:dd:c0:6a:
                    e2:85:91:a2:50:08:96:ab:e9:e1:ae:4f:be:1a:34:
                    87:c5:b2:79:16:0f:07:1a:53:27:e0:04:4a:e3:38:
                    d4:7c:83:54:50:f2:b0:f4:b9:46:80:a3:8f:ef:87:
                    e4:19:d9:e2:b5:4b:5a:78:6e:1b:df:e1:21:f1:ab:
                    10:f9:6f:6b:12:a7:1c:e1:18:ed:26:64:07:90:dc:
                    95:e2:37:6e:cc:10:f7:77:ca:92:a9:7c:a3:89:12:
                    af:27:c6:7e:67:57:03:86:63:be:76:ea:91:bf:6a:
                    4c:6b:cc:2d:97:75:da:02:b9:c3:a5:0a:b5:b0:25:
                    b0:97:f9:24:0e:37:ac:52:9f:35:d0:51:46:55:d3:
                    ba:6c:51:86:90:a3:06:b7:76:9b:d4:cc:58:42:b0:
                    35:0d:71:46:e6:f8:0f:b1:c4:0b:2b:86:59:50:ce:
                    bb:1c:83:ec:2f:d8:cc:17:0c:ef:60:13:c1:14:ba:
                    49:53:8a:0c:c4:0e:51:74:f6:10:da:f2:a4:79:df:
                    66:b8:d1:c9:64:1e:6e:f7:6d:a6:d9:00:3d:e9:c7:
                    3a:53:bf:bf:67:ad:b3:3b:63:de:bb:6e:2f:e9:25:
                    2e:36:45:1d:13:05:bc:dd:3e:34:6f:66:c2:39:18:
                    5d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:10:D7:80:A0:68:8D:3A:FE:3B:E9:3B:A6:3B:E9:8C:27:69:B6:B3
            X509v3 Authority Key Identifier:
                keyid:CB:59:E2:41:FF:AA:C5:9F:A0:BA:1D:08:D9:8F:B8:1A:87:C5:D1:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/3137392e3130372e31342e302f32342d3234203d3e20323633323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:32:24:0c:1c:b9:0d:33:20:d5:44:58:57:08:65:5b:6a:7f:
         ff:14:7d:7b:62:0e:77:77:bf:b1:3b:f2:7a:74:11:e9:af:95:
         23:76:25:c0:20:9b:fb:d3:1b:7d:25:74:00:22:c7:8a:c7:1a:
         2e:f6:54:61:8d:6c:71:e9:79:e6:14:36:97:b8:22:60:81:95:
         7c:5b:f7:dc:bf:d9:7d:9f:f6:68:8c:ee:15:35:47:2e:d9:df:
         e3:e9:68:fa:34:d5:b5:d1:38:91:da:0d:fb:be:c4:4d:e1:7f:
         38:11:47:c3:bb:7a:2e:20:d3:3c:9f:32:18:d1:ce:d7:97:b1:
         b8:4d:25:64:86:30:a5:b5:0a:14:e2:60:33:1f:cc:03:a2:de:
         8b:bd:28:a5:8e:ad:44:ce:52:0e:88:90:dd:01:30:6f:99:9c:
         4e:d2:f8:06:1b:fd:ae:d8:14:a3:89:74:2f:0f:62:3e:d2:b9:
         d7:30:19:6f:4f:ab:f2:68:9e:37:3f:72:16:62:41:34:13:5a:
         7c:59:25:14:31:9c:fa:1b:b2:c1:45:34:12:f2:50:62:f6:c1:
         78:17:9f:0b:26:97:7d:77:8d:f7:6f:b6:07:36:c5:f6:0a:e2:
         18:3c:24:54:d1:b6:e9:32:a1:17:e5:ae:22:d2:19:48:9a:a5:
         e2:b6:30:16
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHLHIQVQE2sEtP7CFle1tgrLgq18wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I1OUUyNDFGRkFBQzU5RkEwQkExRDA4RDk4RkI4MUE4
N0M1RDE3RTAeFw0yNDA0MDMxODI3NDNaFw0yNTA0MDIxODMyNDNaMDMxMTAvBgNV
BAMTKERGMTBENzgwQTA2ODhEM0FGRTNCRTkzQkE2M0JFOThDMjc2OUI2QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO7OKhBLUptOlk4t3AauKFkaJQ
CJar6eGuT74aNIfFsnkWDwcaUyfgBErjONR8g1RQ8rD0uUaAo4/vh+QZ2eK1S1p4
bhvf4SHxqxD5b2sSpxzhGO0mZAeQ3JXiN27MEPd3ypKpfKOJEq8nxn5nVwOGY752
6pG/akxrzC2XddoCucOlCrWwJbCX+SQON6xSnzXQUUZV07psUYaQowa3dpvUzFhC
sDUNcUbm+A+xxAsrhllQzrscg+wv2MwXDO9gE8EUuklTigzEDlF09hDa8qR532a4
0clkHm73babZAD3pxzpTv79nrbM7Y967bi/pJS42RR0TBbzdPjRvZsI5GF1BAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3xDXgKBojTr+O+k7pjvpjCdptrMwHwYDVR0j
BBgwFoAUy1niQf+qxZ+guh0I2Y+4GofF0X4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHkybzU1MzdjQzZZY0NzQkFOOHZXTUJVNWFRTUpjNW16aEtCNHV0Tm1h
VXovMS9DQjU5RTI0MUZGQUFDNTlGQTBCQTFEMDhEOThGQjgxQTg3QzVEMTdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCNTlFMjQxRkZBQUM1OUZB
MEJBMUQwOEQ5OEZCODFBODdDNUQxN0UuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh5Mm81NTM3Y0M2WWNDc0JBTjh2V01CVTVhUU1KYzVtemhLQjR1dE5tYVV6LzEv
MzEzNzM5MmUzMTMwMzcyZTMxMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMjM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzaw4wDQYJKoZIhvcNAQELBQADggEBAFAyJAwc
uQ0zINVEWFcIZVtqf/8UfXtiDnd3v7E78np0EemvlSN2JcAgm/vTG30ldAAix4rH
Gi72VGGNbHHpeeYUNpe4ImCBlXxb99y/2X2f9miM7hU1Ry7Z3+PpaPo01bXROJHa
Dfu+xE3hfzgRR8O7ei4g0zyfMhjRzteXsbhNJWSGMKW1ChTiYDMfzAOi3ou9KKWO
rUTOUg6IkN0BMG+ZnE7S+AYb/a7YFKOJdC8PYj7SudcwGW9Pq/Jonjc/chZiQTQT
WnxZJRQxnPobssFFNBLyUGL2wXgXnwsml313jfdvtgc2xfYK4hg8JFTRtukyoRfl
riLSGUiapeK2MBY=
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:58 2024 by rpki-client on console-fra.rpki-client.org