Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/3137392e3130372e392e302f32342d3234203d3e20323633323635.roa
File:                     3137392e3130372e392e302f32342d3234203d3e20323633323635.roa (raw, json)
Hash identifier:          91Htr/tj5qYTd1XYNCXcRystXxet1sGze6RDma0+VxI=
Subject key identifier:   B3:76:A4:3B:33:87:C3:DC:7B:3B:ED:75:B8:57:60:C6:EB:94:E9:78
Certificate issuer:       /CN=CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E
Certificate serial:       1708C11C16FBA02B4AD94245D380DCA00CB13344
Authority key identifier: CB:59:E2:41:FF:AA:C5:9F:A0:BA:1D:08:D9:8F:B8:1A:87:C5:D1:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/3137392e3130372e392e302f32342d3234203d3e20323633323635.roa
Signing time:             Wed 03 Apr 2024 18:32:44 +0000
ROA not before:           Wed 03 Apr 2024 18:27:44 +0000
ROA not after:            Wed 02 Apr 2025 18:32:44 +0000
asID:                     263265
IP address blocks:        179.107.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.crl
                          rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 02:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:08:c1:1c:16:fb:a0:2b:4a:d9:42:45:d3:80:dc:a0:0c:b1:33:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E
        Validity
            Not Before: Apr  3 18:27:44 2024 GMT
            Not After : Apr  2 18:32:44 2025 GMT
        Subject: CN=B376A43B3387C3DC7B3BED75B85760C6EB94E978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9a:d5:0e:6b:fc:cc:bb:13:75:2b:7f:d3:1f:
                    10:cf:d2:c8:42:58:14:c6:58:fc:c5:99:b3:0c:1e:
                    52:a2:50:f7:4a:73:3e:de:e9:1e:3b:1a:c3:3b:1f:
                    22:0d:d4:1c:d7:4b:9f:0a:72:8e:ad:6b:bb:0e:9b:
                    15:c7:dd:61:13:a5:c0:1f:89:4a:65:f4:fc:fb:af:
                    8f:6d:64:61:14:15:fc:24:2b:8b:f5:ca:a7:cb:86:
                    88:16:6d:89:1a:b5:a1:e7:40:a1:b0:b3:e9:f9:5b:
                    b7:b7:6e:c9:28:db:69:41:a3:c2:44:ff:d7:e3:52:
                    6c:91:6e:8b:61:13:46:b1:7e:2e:2f:44:1c:25:1d:
                    78:3c:7e:f5:39:ef:5f:5d:dc:27:9e:d8:ef:67:99:
                    09:ca:d6:87:0a:42:67:74:b4:83:72:3d:e2:54:2a:
                    81:54:7c:4c:1f:90:28:c3:22:8a:ac:e2:4e:3f:d5:
                    8c:e9:36:37:0d:02:7c:3c:9b:e1:70:5d:b4:77:b7:
                    82:32:33:e1:bd:77:39:14:f6:7f:4a:20:34:1c:71:
                    c4:50:98:00:ec:8a:91:fd:2f:9e:01:ab:a2:93:4c:
                    55:c8:63:75:36:ce:b2:44:c1:90:d4:c9:be:0f:fe:
                    1f:1e:39:af:f5:3d:2a:fc:2e:03:6f:98:40:a2:b3:
                    b2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:76:A4:3B:33:87:C3:DC:7B:3B:ED:75:B8:57:60:C6:EB:94:E9:78
            X509v3 Authority Key Identifier:
                keyid:CB:59:E2:41:FF:AA:C5:9F:A0:BA:1D:08:D9:8F:B8:1A:87:C5:D1:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/3137392e3130372e392e302f32342d3234203d3e20323633323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:3f:cb:94:a6:01:34:9a:bc:26:da:e1:b4:b1:39:30:8d:9e:
         90:b5:0b:e8:9f:26:9b:56:bd:27:b6:1a:86:c8:0a:86:f2:28:
         21:1b:0c:e9:ec:34:dd:55:f3:b5:be:75:fc:4b:12:8e:9f:57:
         d0:f2:30:9b:95:ff:31:a3:dd:7e:e2:a8:22:c0:de:57:32:67:
         57:9a:23:74:35:72:bb:73:b5:33:59:50:90:1c:c5:b8:62:30:
         00:fc:5b:38:89:de:d3:1b:f0:1a:af:9f:c3:8f:c9:db:c8:b9:
         6a:e8:36:ce:6a:2f:ed:f3:21:ff:8a:ba:f0:21:57:22:40:1d:
         dd:aa:66:31:40:4a:f2:33:5a:06:f7:80:55:9e:d1:e4:3c:03:
         63:11:e0:cb:54:3a:c6:81:b6:45:f6:f1:63:28:fe:73:f0:d9:
         99:9f:e3:1a:d6:48:2e:63:25:f8:2d:5f:90:fa:00:83:97:66:
         34:ec:28:4d:39:79:b9:76:e2:1e:69:b3:89:ed:8d:a2:3f:6c:
         e0:47:5b:02:fd:a8:83:7e:74:7e:eb:21:08:41:f8:d9:ce:54:
         66:b3:c9:b0:ed:65:9b:89:14:90:32:c7:f9:23:3d:82:0d:e7:
         b5:bf:48:c8:ee:5c:9a:87:6b:78:ed:14:61:e5:1b:cd:e6:86:
         42:cc:74:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:58 2024 by rpki-client on console-fra.rpki-client.org