Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e31312e302f32342d3234203d3e20323633323536.roa
File:                     3139382e35382e31312e302f32342d3234203d3e20323633323536.roa (raw, json)
Hash identifier:          jncAYJZtS9co060sTgYdorS5Q030Pvl2xgVCCDy7vzY=
Subject key identifier:   8E:13:FF:5A:EE:64:70:6F:F2:52:7F:31:1C:FD:5E:36:08:0D:A4:54
Certificate issuer:       /CN=05263BF4891CB378D051DAE2EA2AF3072FC5FAEE
Certificate serial:       564A076BB71FAB7084BB8CF41AA019CCBE730A82
Authority key identifier: 05:26:3B:F4:89:1C:B3:78:D0:51:DA:E2:EA:2A:F3:07:2F:C5:FA:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05263BF4891CB378D051DAE2EA2AF3072FC5FAEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e31312e302f32342d3234203d3e20323633323536.roa
Signing time:             Thu 21 Nov 2024 18:14:21 +0000
ROA not before:           Thu 21 Nov 2024 18:09:21 +0000
ROA not after:            Thu 20 Nov 2025 18:14:21 +0000
asID:                     263256
IP address blocks:        198.58.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/05263BF4891CB378D051DAE2EA2AF3072FC5FAEE.crl
                          rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/05263BF4891CB378D051DAE2EA2AF3072FC5FAEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05263BF4891CB378D051DAE2EA2AF3072FC5FAEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:4a:07:6b:b7:1f:ab:70:84:bb:8c:f4:1a:a0:19:cc:be:73:0a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05263BF4891CB378D051DAE2EA2AF3072FC5FAEE
        Validity
            Not Before: Nov 21 18:09:21 2024 GMT
            Not After : Nov 20 18:14:21 2025 GMT
        Subject: CN=8E13FF5AEE64706FF2527F311CFD5E36080DA454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:76:b5:f4:94:c5:33:fd:96:12:b6:ec:3b:ba:
                    ee:6e:7a:65:b9:d8:09:ce:58:1e:a1:e8:f5:25:36:
                    1a:6a:2f:30:1b:09:3d:df:01:4e:2c:94:08:de:de:
                    46:66:7d:d2:64:a4:10:c3:50:2a:aa:87:1d:11:fe:
                    83:a0:f8:5f:80:d8:18:45:83:f7:d3:a9:0e:50:5e:
                    96:5e:65:3e:f8:9a:fd:13:97:7b:49:f5:cd:5c:9a:
                    71:7f:b6:b2:8a:ba:97:2b:53:e0:82:bc:11:fb:c7:
                    43:45:94:27:3b:1d:9c:ca:c5:7c:f2:7c:88:d6:a3:
                    2c:59:4d:de:43:2e:48:6b:21:13:f4:98:ee:66:98:
                    23:c3:37:93:4f:b5:95:40:b2:db:4b:90:5b:00:88:
                    cc:60:c3:45:9c:f9:9b:5a:85:29:81:62:42:11:2d:
                    58:d7:1b:4a:63:93:b8:4b:ed:a5:01:49:f6:9e:8a:
                    03:2d:28:db:c8:2b:bc:46:ff:9d:59:aa:57:01:12:
                    f2:75:af:06:2c:95:82:55:e7:91:7f:ef:52:97:0d:
                    77:67:49:22:8f:db:d4:d0:68:fa:bb:0f:00:c7:ef:
                    cc:9c:6c:4d:00:e9:1c:1e:e2:15:f7:15:23:91:81:
                    60:68:5d:fa:c5:67:cd:23:82:a5:c9:6b:c7:19:3c:
                    71:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:13:FF:5A:EE:64:70:6F:F2:52:7F:31:1C:FD:5E:36:08:0D:A4:54
            X509v3 Authority Key Identifier:
                keyid:05:26:3B:F4:89:1C:B3:78:D0:51:DA:E2:EA:2A:F3:07:2F:C5:FA:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/05263BF4891CB378D051DAE2EA2AF3072FC5FAEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05263BF4891CB378D051DAE2EA2AF3072FC5FAEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e31312e302f32342d3234203d3e20323633323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.58.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:70:39:a7:81:a8:99:77:c4:e1:61:34:a1:5b:3e:f5:7f:ad:
         e9:da:41:d6:d4:3e:31:9b:a4:ad:dd:7b:53:e2:88:5c:c7:06:
         20:48:1f:2c:41:26:65:51:11:1a:09:1e:db:94:f3:b0:7a:5e:
         9a:12:6a:3c:66:60:27:ed:74:a3:49:09:33:25:70:7a:13:5a:
         31:50:ed:f1:8f:66:e8:55:60:69:53:61:f7:c3:8a:b1:b7:62:
         8c:c5:dd:a5:8e:98:01:ac:bc:dd:4a:37:b4:aa:d9:0f:b6:16:
         87:c2:90:60:43:62:5b:c0:a3:1d:9f:86:55:17:fe:30:87:37:
         a5:5f:d1:ea:50:ed:1f:a7:c2:2a:c4:d6:32:ce:de:5d:fa:ee:
         bb:bd:9f:b9:2d:56:3c:4b:c3:07:42:7c:bd:13:11:52:a0:37:
         ac:3a:32:a5:24:97:22:c6:bb:a6:87:fe:ba:8f:3f:26:36:ce:
         52:04:b0:6e:b9:9c:10:ce:8d:f8:c0:90:2a:d8:6c:02:95:cf:
         62:e9:8b:c2:23:54:f4:2c:77:24:4d:f1:d4:56:59:4f:bb:17:
         fd:3d:24:2f:cb:38:dc:fa:30:e0:9e:8c:64:6d:5d:5a:d2:bb:
         74:6c:f9:56:af:ec:29:bc:06:a3:83:77:71:73:51:56:56:71:
         48:90:f8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:03 2024 by rpki-client on console-fra.rpki-client.org