Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/3137392e3130372e382e302f32312d3231203d3e20323633323635.roa
File:                     3137392e3130372e382e302f32312d3231203d3e20323633323635.roa (raw, json)
Hash identifier:          JnG2RCarY0PXY1mZUkzMFYF+KajU9PjL0Ud1dYktipw=
Subject key identifier:   9E:AA:89:C5:CC:64:35:15:B6:C1:CC:B2:D0:64:FA:6F:3F:19:62:A0
Certificate issuer:       /CN=CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E
Certificate serial:       3D4AE9D4B218701345D1A022576A3EBD955109FD
Authority key identifier: CB:59:E2:41:FF:AA:C5:9F:A0:BA:1D:08:D9:8F:B8:1A:87:C5:D1:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/3137392e3130372e382e302f32312d3231203d3e20323633323635.roa
Signing time:             Wed 03 Apr 2024 18:32:43 +0000
ROA not before:           Wed 03 Apr 2024 18:27:43 +0000
ROA not after:            Wed 02 Apr 2025 18:32:43 +0000
asID:                     263265
IP address blocks:        179.107.8.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.crl
                          rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:4a:e9:d4:b2:18:70:13:45:d1:a0:22:57:6a:3e:bd:95:51:09:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E
        Validity
            Not Before: Apr  3 18:27:43 2024 GMT
            Not After : Apr  2 18:32:43 2025 GMT
        Subject: CN=9EAA89C5CC643515B6C1CCB2D064FA6F3F1962A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:69:31:7f:ec:a7:8a:01:90:62:55:a8:02:24:
                    60:83:c4:43:ba:9d:55:fa:60:24:89:81:7d:49:98:
                    8d:b5:8e:fe:04:37:98:7e:53:db:e7:f8:d1:a8:77:
                    ed:c6:76:06:6f:2d:04:f3:a2:31:50:14:e7:53:12:
                    ea:f9:f2:c3:66:e8:e1:ca:66:3a:1c:74:1c:5e:9f:
                    20:52:2a:a1:a2:16:fa:0e:56:f2:7a:d5:dd:81:aa:
                    00:ac:44:e1:d8:10:99:e5:01:2f:10:10:e7:d5:22:
                    cc:b2:cd:50:4a:59:85:6a:db:26:48:4d:40:c2:29:
                    c4:ba:15:91:f1:3a:e5:5c:d9:05:a5:f2:4f:64:b5:
                    13:5d:f0:11:7d:4a:af:0f:ab:0b:f4:90:47:5a:c6:
                    75:b5:e9:60:8b:5b:f1:c5:93:20:e4:45:36:f9:e3:
                    70:4f:db:82:51:57:97:00:01:21:8d:ea:68:f6:e5:
                    7f:6d:77:e1:ed:ef:6b:52:61:ca:24:44:c4:c4:b6:
                    1a:70:aa:13:3e:d2:22:c7:88:7b:f9:90:98:6c:ee:
                    e6:cd:1f:f4:c1:59:b0:ce:8a:76:b8:90:f3:0d:ab:
                    82:35:af:45:2c:20:ae:e9:71:7a:b1:46:51:63:cc:
                    81:22:f5:38:af:85:9b:fe:d8:c1:74:97:22:0c:2e:
                    03:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AA:89:C5:CC:64:35:15:B6:C1:CC:B2:D0:64:FA:6F:3F:19:62:A0
            X509v3 Authority Key Identifier:
                keyid:CB:59:E2:41:FF:AA:C5:9F:A0:BA:1D:08:D9:8F:B8:1A:87:C5:D1:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/3137392e3130372e382e302f32312d3231203d3e20323633323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3c:3f:cc:35:53:00:6a:27:f5:33:fa:9f:f4:71:d0:57:79:f8:
         cd:9f:a7:93:79:c3:a5:08:b9:51:67:0c:2b:c0:77:ec:5d:9c:
         25:46:f0:b7:1d:37:fc:df:11:69:9d:3b:66:63:4d:fa:df:38:
         d9:f0:76:94:cf:09:d7:00:18:f8:06:22:3c:82:8f:29:8e:04:
         bc:40:34:b9:42:5c:90:fd:4f:ce:ff:f7:18:70:70:0f:bf:7e:
         73:47:18:a3:cc:af:80:fc:46:cb:84:2b:2e:3b:19:f2:2b:0d:
         b8:87:c4:5d:7d:e0:56:5f:fe:48:ac:80:50:94:53:a5:2b:c1:
         ef:ef:eb:0f:8f:8e:1a:c6:6c:de:42:70:9d:bd:ad:c0:5b:77:
         85:03:50:b5:e3:1d:4f:5c:ed:f6:43:97:c9:b8:3f:85:fb:38:
         9f:68:0d:c9:69:05:f2:1a:bc:ae:06:4c:f9:26:81:56:9b:da:
         1a:89:81:af:05:09:00:27:fa:f8:a4:70:9d:a7:b4:fc:f8:75:
         0d:15:07:17:6f:de:94:d3:a2:db:ca:0f:8b:f8:1a:5b:a2:44:
         e4:a0:47:96:55:e0:de:1d:bf:3a:b6:69:6c:04:5d:cb:c4:7d:
         76:47:fe:9a:58:43:38:1c:f0:ee:d0:b6:fc:10:2a:f9:3d:1f:
         7e:0c:7c:cd
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPUrp1LIYcBNF0aAiV2o+vZVRCf0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I1OUUyNDFGRkFBQzU5RkEwQkExRDA4RDk4RkI4MUE4
N0M1RDE3RTAeFw0yNDA0MDMxODI3NDNaFw0yNTA0MDIxODMyNDNaMDMxMTAvBgNV
BAMTKDlFQUE4OUM1Q0M2NDM1MTVCNkMxQ0NCMkQwNjRGQTZGM0YxOTYyQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZaTF/7KeKAZBiVagCJGCDxEO6
nVX6YCSJgX1JmI21jv4EN5h+U9vn+NGod+3GdgZvLQTzojFQFOdTEur58sNm6OHK
ZjocdBxenyBSKqGiFvoOVvJ61d2BqgCsROHYEJnlAS8QEOfVIsyyzVBKWYVq2yZI
TUDCKcS6FZHxOuVc2QWl8k9ktRNd8BF9Sq8Pqwv0kEdaxnW16WCLW/HFkyDkRTb5
43BP24JRV5cAASGN6mj25X9td+Ht72tSYcokRMTEthpwqhM+0iLHiHv5kJhs7ubN
H/TBWbDOina4kPMNq4I1r0UsIK7pcXqxRlFjzIEi9TivhZv+2MF0lyIMLgNtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUnqqJxcxkNRW2wcyy0GT6bz8ZYqAwHwYDVR0j
BBgwFoAUy1niQf+qxZ+guh0I2Y+4GofF0X4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHkybzU1MzdjQzZZY0NzQkFOOHZXTUJVNWFRTUpjNW16aEtCNHV0Tm1h
VXovMS9DQjU5RTI0MUZGQUFDNTlGQTBCQTFEMDhEOThGQjgxQTg3QzVEMTdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCNTlFMjQxRkZBQUM1OUZB
MEJBMUQwOEQ5OEZCODFBODdDNUQxN0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh5Mm81NTM3Y0M2WWNDc0JBTjh2V01CVTVhUU1KYzVtemhLQjR1dE5tYVV6LzEv
MzEzNzM5MmUzMTMwMzcyZTM4MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzNjMz
MzIzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDs2sIMA0GCSqGSIb3DQEBCwUAA4IBAQA8P8w1UwBq
J/Uz+p/0cdBXefjNn6eTecOlCLlRZwwrwHfsXZwlRvC3HTf83xFpnTtmY0363zjZ
8HaUzwnXABj4BiI8go8pjgS8QDS5QlyQ/U/O//cYcHAPv35zRxijzK+A/EbLhCsu
OxnyKw24h8RdfeBWX/5IrIBQlFOlK8Hv7+sPj44axmzeQnCdva3AW3eFA1C14x1P
XO32Q5fJuD+F+zifaA3JaQXyGryuBkz5JoFWm9oaiYGvBQkAJ/r4pHCdp7T8+HUN
FQcXb96U06Lbyg+L+BpbokTkoEeWVeDeHb86tmlsBF3LxH12R/6aWEM4HPDu0Lb8
ECr5PR9+DHzN
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:36 2024 by rpki-client on console-ams.rpki-client.org