Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/3137392e3130372e31352e302f32342d3234203d3e20323633323635.roa
File:                     3137392e3130372e31352e302f32342d3234203d3e20323633323635.roa (raw, json)
Hash identifier:          KwPZVpGnEMa1RgS3pFV/WZ2KE+rl/S3PUuRBVuOSYkM=
Subject key identifier:   A3:5B:56:AC:6D:BE:0D:09:A9:C7:43:F2:A9:02:5B:66:46:41:BD:35
Certificate issuer:       /CN=CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E
Certificate serial:       0CC0AFCE7440216D020AF0F16A66FCB8F02C560D
Authority key identifier: CB:59:E2:41:FF:AA:C5:9F:A0:BA:1D:08:D9:8F:B8:1A:87:C5:D1:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/3137392e3130372e31352e302f32342d3234203d3e20323633323635.roa
Signing time:             Wed 05 Mar 2025 19:00:18 +0000
ROA not before:           Wed 05 Mar 2025 18:55:18 +0000
ROA not after:            Wed 04 Mar 2026 19:00:18 +0000
asID:                     263265
IP address blocks:        179.107.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.crl
                          rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 03:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c0:af:ce:74:40:21:6d:02:0a:f0:f1:6a:66:fc:b8:f0:2c:56:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E
        Validity
            Not Before: Mar  5 18:55:18 2025 GMT
            Not After : Mar  4 19:00:18 2026 GMT
        Subject: CN=A35B56AC6DBE0D09A9C743F2A9025B664641BD35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:62:df:f9:cc:2f:9e:ce:7f:15:fa:d2:b4:ef:
                    ce:9c:1b:bd:24:23:20:8c:c9:29:a4:28:5a:e5:52:
                    4f:63:ed:fe:23:c5:e9:97:0a:9b:6f:ba:23:b5:f4:
                    54:86:c3:63:d0:09:48:bf:e6:f4:6f:94:b5:e1:f1:
                    38:d7:73:c4:46:f4:4f:21:bd:d4:cb:3a:82:f2:aa:
                    6d:0f:24:33:52:61:93:e4:32:7a:81:74:ef:06:17:
                    73:49:14:89:35:9a:a9:f8:97:14:e7:0d:b4:b8:14:
                    56:56:2f:10:bf:53:c4:6b:10:b9:ce:ff:61:3c:ab:
                    60:77:a4:1e:43:ab:ad:ad:15:49:da:95:88:b2:74:
                    90:d8:26:3a:22:4f:b9:ae:c4:21:dd:8e:4a:d1:65:
                    a5:cb:ce:f9:ab:65:59:d6:c1:91:9f:64:09:42:b1:
                    f9:e8:0b:ff:70:13:4c:ca:1c:fd:8f:11:51:fa:15:
                    0f:39:a9:2b:9e:ec:d0:f1:1d:dc:e9:64:e3:8a:0a:
                    98:97:71:d6:cc:7a:ee:82:f9:bd:3d:28:5a:52:0e:
                    81:52:bc:da:59:00:a2:ca:73:54:4e:e4:74:a9:24:
                    0f:37:09:34:7e:4f:ce:33:7e:ed:82:aa:9a:50:5f:
                    3d:b6:44:d0:c4:2a:ae:5f:81:56:e4:16:c5:ea:9b:
                    85:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5B:56:AC:6D:BE:0D:09:A9:C7:43:F2:A9:02:5B:66:46:41:BD:35
            X509v3 Authority Key Identifier:
                keyid:CB:59:E2:41:FF:AA:C5:9F:A0:BA:1D:08:D9:8F:B8:1A:87:C5:D1:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/3137392e3130372e31352e302f32342d3234203d3e20323633323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:b0:a1:fb:f9:2e:c7:2b:a5:1c:85:e9:8e:21:c0:17:30:5d:
         32:07:ee:8b:85:3d:e2:6c:ce:26:eb:89:d2:92:57:10:d0:34:
         e5:f4:3f:8d:23:84:8c:26:31:08:13:c4:8e:fb:fd:86:90:f7:
         6c:fa:26:44:fe:a4:a7:86:c7:74:56:18:01:d3:19:18:c1:c7:
         d7:ac:1a:9f:34:0a:0d:38:56:31:54:87:e3:35:59:36:c1:fa:
         5e:72:a7:6e:1d:8b:87:68:69:74:05:b9:bc:24:f1:c2:71:02:
         17:40:b6:b1:ce:fd:d5:b0:f1:31:6c:39:2f:1e:75:d8:50:a2:
         9b:a8:ff:61:1f:c8:6f:81:50:f8:45:1b:6f:d0:19:98:70:9a:
         86:74:65:0d:db:17:cc:b2:9e:3b:33:e2:d8:26:d3:bf:d9:d2:
         a0:73:48:b9:35:4f:c8:95:3b:ca:b2:1d:77:bd:48:67:4a:3e:
         1c:86:a8:fe:e2:e3:91:bc:da:2a:0f:3c:15:9d:15:10:58:41:
         a7:0c:74:c2:e4:77:37:da:55:f8:ec:f7:a4:47:d9:43:ff:e3:
         5e:36:ab:f2:95:4b:35:49:79:40:f8:e7:fa:db:d3:a7:c6:d0:
         4d:4a:45:04:42:a6:3e:0e:86:34:f5:fd:64:9f:00:44:64:70:
         9b:7a:6b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:42:32 2025 by rpki-client