Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3136382e3139342e35392e302f32342d3234203d3e20323637353133.roa
File:                     3136382e3139342e35392e302f32342d3234203d3e20323637353133.roa (raw, json)
Hash identifier:          56h2km3nX2QbV5jvuAABR3uv3WBJzWRGbACxC6mdMms=
Subject key identifier:   16:24:B1:F5:54:BA:15:A4:D2:B0:9A:07:C3:45:B6:49:4B:38:D7:2F
Certificate issuer:       /CN=CF15A08CBAD6745A044863EE535BB942BA6C046E
Certificate serial:       3AA7D1C71E7965D6A331EC8EC0A5AB8DB981ACF4
Authority key identifier: CF:15:A0:8C:BA:D6:74:5A:04:48:63:EE:53:5B:B9:42:BA:6C:04:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3136382e3139342e35392e302f32342d3234203d3e20323637353133.roa
Signing time:             Mon 01 Jul 2024 20:54:45 +0000
ROA not before:           Mon 01 Jul 2024 20:49:45 +0000
ROA not after:            Mon 30 Jun 2025 20:54:45 +0000
asID:                     267513
IP address blocks:        168.194.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a7:d1:c7:1e:79:65:d6:a3:31:ec:8e:c0:a5:ab:8d:b9:81:ac:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF15A08CBAD6745A044863EE535BB942BA6C046E
        Validity
            Not Before: Jul  1 20:49:45 2024 GMT
            Not After : Jun 30 20:54:45 2025 GMT
        Subject: CN=1624B1F554BA15A4D2B09A07C345B6494B38D72F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:50:51:6d:ea:39:22:a2:9a:e7:0c:d9:29:e6:
                    aa:b4:5b:82:0d:2c:77:2a:80:1b:4e:92:f2:2b:7f:
                    8a:28:ab:d6:7e:ab:22:f1:ae:50:cf:9b:aa:f1:9a:
                    4b:c9:7e:17:75:21:11:fa:ed:64:a2:16:ce:83:24:
                    f7:ce:d5:b3:42:43:99:5a:f1:32:0e:34:e2:43:6f:
                    1e:12:39:75:b2:66:09:3b:91:0d:14:44:cc:d7:03:
                    98:4a:4b:a0:c0:31:a7:81:04:2d:a7:62:04:c3:92:
                    ab:33:de:eb:4a:5f:ad:7a:b3:16:d2:37:41:41:1e:
                    4e:51:2f:50:1e:a3:31:ea:3b:55:d3:b9:fe:29:71:
                    2c:4f:af:22:87:80:80:b6:c6:ea:1d:df:3b:ec:65:
                    4f:38:44:94:f8:a0:0d:fb:0f:f5:9f:7c:7a:57:9d:
                    af:6a:40:7e:ec:83:c0:fd:40:9e:1f:88:c1:dc:ce:
                    36:43:1a:b8:ac:a7:bd:5a:4f:e4:bf:e1:fe:d3:fa:
                    e9:b1:a3:0a:21:03:3d:4b:7c:c4:2a:7a:1f:00:20:
                    cc:10:41:31:29:70:76:cf:c8:99:69:a0:1a:03:99:
                    a2:e8:72:36:1b:25:a6:55:28:26:6e:fa:f5:11:a3:
                    2c:83:99:27:82:63:7e:15:9f:8c:f2:1c:df:8e:ed:
                    8b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:24:B1:F5:54:BA:15:A4:D2:B0:9A:07:C3:45:B6:49:4B:38:D7:2F
            X509v3 Authority Key Identifier:
                keyid:CF:15:A0:8C:BA:D6:74:5A:04:48:63:EE:53:5B:B9:42:BA:6C:04:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3136382e3139342e35392e302f32342d3234203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:45:b5:54:bb:ca:bb:10:91:7c:b4:8d:d3:6e:9e:81:e8:34:
         27:4b:6a:3b:84:20:c4:2f:d2:a0:fe:7c:3f:7f:cd:3a:fb:ae:
         1c:31:eb:bb:63:64:cd:26:7a:d0:59:68:f0:3e:17:dd:89:48:
         63:51:c0:86:34:db:13:cc:4c:95:6d:3d:d1:91:d0:a4:aa:80:
         ce:2d:bd:19:ce:37:ba:45:42:7c:ae:e7:4b:73:12:bc:7a:c0:
         30:80:40:1b:36:9f:6c:ee:98:8c:9d:a9:94:99:8b:5a:1d:37:
         52:15:16:40:19:56:9e:0a:67:f5:f4:3c:2c:06:5f:c9:11:d5:
         f4:82:b6:57:e8:d9:d6:9c:c9:11:9a:d8:fb:9c:42:6f:7a:e9:
         2f:3d:95:be:e4:bc:f1:78:09:80:31:89:a4:11:a9:8a:09:c8:
         5f:1f:f4:c4:ec:ab:42:49:82:8c:a8:a4:89:f1:62:58:2d:f1:
         9b:fe:bb:14:9d:bf:0e:04:7d:93:3c:cc:89:e3:e5:6c:da:93:
         19:57:4c:5a:61:12:98:f9:57:5a:d7:1e:53:96:aa:6f:9b:ff:
         00:ec:ec:e2:74:ba:7f:90:96:56:c1:16:9b:28:bd:1a:52:36:
         d5:77:a2:3d:4d:f1:76:be:9e:3b:bf:9b:5b:31:88:bf:8d:3a:
         e8:01:13:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:34 2024 by rpki-client on console-fra.rpki-client.org