Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e382e302f32342d3234203d3e20323633323536.roa
File:                     3139382e35382e382e302f32342d3234203d3e20323633323536.roa (raw, json)
Hash identifier:          mbRI+mj3HpqifMZn2Kvlm3QAWAHniEXVt5/XRdd7sPU=
Subject key identifier:   52:F3:28:47:00:BB:1E:91:6D:F4:7E:9B:00:F4:7C:47:84:8F:16:3F
Certificate issuer:       /CN=05263BF4891CB378D051DAE2EA2AF3072FC5FAEE
Certificate serial:       6B34A11330DEDEC249B56DDA42D17BAB4C955348
Authority key identifier: 05:26:3B:F4:89:1C:B3:78:D0:51:DA:E2:EA:2A:F3:07:2F:C5:FA:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05263BF4891CB378D051DAE2EA2AF3072FC5FAEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e382e302f32342d3234203d3e20323633323536.roa
Signing time:             Thu 21 Nov 2024 18:14:10 +0000
ROA not before:           Thu 21 Nov 2024 18:09:10 +0000
ROA not after:            Thu 20 Nov 2025 18:14:10 +0000
asID:                     263256
IP address blocks:        198.58.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/05263BF4891CB378D051DAE2EA2AF3072FC5FAEE.crl
                          rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/05263BF4891CB378D051DAE2EA2AF3072FC5FAEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05263BF4891CB378D051DAE2EA2AF3072FC5FAEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:34:a1:13:30:de:de:c2:49:b5:6d:da:42:d1:7b:ab:4c:95:53:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05263BF4891CB378D051DAE2EA2AF3072FC5FAEE
        Validity
            Not Before: Nov 21 18:09:10 2024 GMT
            Not After : Nov 20 18:14:10 2025 GMT
        Subject: CN=52F3284700BB1E916DF47E9B00F47C47848F163F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6a:6e:ba:b5:fd:16:a8:f5:28:35:dc:b1:83:
                    9b:55:cd:93:e4:0d:3f:86:d6:50:bf:b3:62:99:54:
                    94:97:28:d1:89:97:bc:25:ac:82:4d:9c:20:39:eb:
                    84:46:38:23:3f:c1:f7:95:25:18:eb:df:f5:81:2d:
                    d0:0e:2b:d2:b6:31:aa:3b:4b:8d:c8:d2:95:e2:e0:
                    53:fc:06:39:10:5a:c4:8e:69:06:4e:d4:71:55:21:
                    3b:00:b8:37:e3:c6:07:0b:c9:a4:7e:c8:69:b4:77:
                    c7:dc:6d:14:dd:22:47:5f:0f:a3:1d:df:fd:f3:37:
                    07:db:34:ad:b8:3b:bc:ff:a4:81:bc:be:0c:74:81:
                    bd:90:7b:8a:64:d4:26:ec:99:fc:52:d8:cc:ac:71:
                    7d:33:37:2a:15:e9:56:9c:3c:fc:4d:08:4f:7e:12:
                    38:ee:95:83:01:42:04:83:f6:27:3b:13:2e:6b:9e:
                    e9:62:4e:82:4e:88:00:c9:64:18:e1:9d:33:38:0f:
                    a9:e2:40:af:f7:15:28:a8:10:9f:04:94:61:ac:07:
                    25:f5:49:9d:5c:eb:48:1e:60:b1:8b:ff:5f:30:9c:
                    c8:3d:28:a3:75:9d:be:50:9d:07:b8:5e:2e:7f:c1:
                    aa:60:9b:b8:fa:08:82:4a:32:47:11:5d:3c:61:16:
                    5b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F3:28:47:00:BB:1E:91:6D:F4:7E:9B:00:F4:7C:47:84:8F:16:3F
            X509v3 Authority Key Identifier:
                keyid:05:26:3B:F4:89:1C:B3:78:D0:51:DA:E2:EA:2A:F3:07:2F:C5:FA:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/05263BF4891CB378D051DAE2EA2AF3072FC5FAEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05263BF4891CB378D051DAE2EA2AF3072FC5FAEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e382e302f32342d3234203d3e20323633323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.58.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:84:24:e0:c5:b2:90:3e:77:c6:6b:4d:c2:de:3d:60:26:de:
         f2:05:34:bf:9e:7e:d9:32:d0:fe:2b:a4:52:f4:1a:23:0f:68:
         29:fc:68:92:c7:5b:f7:e6:8c:2c:c8:6b:ec:2a:00:1a:72:1d:
         ba:88:7a:37:5d:ba:ef:88:5e:f0:36:e7:cb:55:e6:44:47:b9:
         95:16:95:8d:96:5a:75:3b:b7:6f:43:bb:c1:95:36:c2:ce:b8:
         fc:d1:8b:d3:8f:c9:58:ce:db:3a:8c:ce:d9:df:08:55:dd:40:
         36:61:cc:4d:0f:e5:2c:ef:e6:96:76:00:95:72:29:ae:89:11:
         da:6e:7f:79:3e:8a:9e:75:95:3d:df:21:72:7e:3c:b4:bc:f5:
         5c:82:57:22:2a:10:04:64:bf:7e:19:44:9e:cc:f2:49:9c:bc:
         e0:de:88:24:ca:ea:53:c2:92:79:fd:f3:60:2b:23:bc:2b:5f:
         dc:5b:00:67:6b:09:fa:4c:63:4a:f7:13:c5:c2:b3:c5:04:14:
         73:6e:cb:63:29:c5:ca:20:3e:0c:33:71:66:12:c7:83:51:96:
         a8:d2:9f:b9:b1:87:1f:a3:be:42:10:3c:95:a1:e1:52:61:14:
         44:e4:52:08:c9:30:14:5f:a8:49:f1:1f:7e:32:8b:7e:7b:56:
         a9:37:9a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:03 2024 by rpki-client on console-fra.rpki-client.org