Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3232382e302f32322d3232203d3e203532343638.roa
File:                     3138372e3130382e3232382e302f32322d3232203d3e203532343638.roa (raw, json)
Hash identifier:          7ycKi8CJjMy20me3vMusotWwX+bdxG501gvSPDGixvg=
Subject key identifier:   B7:5C:BA:E8:AF:0E:0C:AB:23:B4:91:C8:94:43:B3:3F:02:EA:C0:D8
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       3DA261B0410E6947416C5696A0B8206AA2D269
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3232382e302f32322d3232203d3e203532343638.roa
Signing time:             Fri 24 Nov 2023 21:00:00 +0000
ROA not before:           Fri 24 Nov 2023 20:55:00 +0000
ROA not after:            Fri 22 Nov 2024 21:00:00 +0000
asID:                     52468
IP address blocks:        187.108.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Mar 2024 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a2:61:b0:41:0e:69:47:41:6c:56:96:a0:b8:20:6a:a2:d2:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Nov 24 20:55:00 2023 GMT
            Not After : Nov 22 21:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2e:eb:50:e8:c9:3d:62:df:00:88:c4:3a:e1:
                    bb:26:83:9f:95:ff:6e:60:ba:69:2e:df:3f:8d:8f:
                    33:7d:73:81:4f:84:4d:a6:fb:74:3c:52:98:ee:63:
                    87:83:45:0a:a6:1b:01:0a:bf:23:4d:ca:9d:4d:2c:
                    20:a2:0b:8b:aa:24:39:d0:b6:25:3d:fd:96:43:1c:
                    2e:22:4b:e6:20:31:85:32:b7:3d:00:89:67:cb:91:
                    b7:d9:1d:b9:f2:28:63:83:cb:ab:d4:1e:9e:7f:ea:
                    df:f3:6c:02:6e:aa:98:08:69:29:6a:8c:c8:9f:cd:
                    00:b3:a4:67:58:f5:75:46:23:cd:43:13:3b:2a:5d:
                    72:54:11:46:44:df:60:fd:f9:c1:3c:9b:da:86:f6:
                    3e:9d:8a:62:6e:eb:00:9a:1c:4f:d2:17:af:7a:31:
                    d2:bd:7a:72:a6:85:00:59:50:e5:f3:c3:2f:ef:03:
                    53:e7:61:27:fd:36:e8:8f:68:07:1b:ce:ca:a2:8b:
                    05:c0:86:15:c9:74:5f:95:6d:22:b0:86:b1:52:04:
                    6b:ed:0d:8d:dc:98:d6:7d:2b:e3:ab:26:3d:91:1b:
                    27:ca:b3:a9:16:3d:28:9a:6a:53:7f:e4:30:ea:ac:
                    f7:87:36:65:4b:3b:18:f1:94:20:40:00:07:0f:4d:
                    f0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5C:BA:E8:AF:0E:0C:AB:23:B4:91:C8:94:43:B3:3F:02:EA:C0:D8
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3232382e302f32322d3232203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:d2:39:7a:c0:8f:73:fe:91:a7:f3:ce:58:f4:b9:d5:ba:d1:
         c3:b8:c9:f0:97:3a:83:d8:04:0e:fb:d7:b5:8b:32:02:23:a3:
         b8:c2:1b:47:96:0d:75:52:0e:4d:0e:c6:b4:6a:50:2c:54:c8:
         cf:c0:84:51:4d:46:72:c5:a6:3b:6b:79:76:c0:2f:aa:8f:9e:
         fc:9b:4e:5f:90:08:b0:33:1f:e8:c7:c7:1e:e6:ac:4b:ef:8d:
         a1:0f:7e:e9:47:6d:ed:c5:e3:d8:e5:60:d6:67:03:2b:3a:c7:
         e4:35:5d:d3:d4:d3:23:96:43:82:15:60:98:c9:3d:25:a6:67:
         bd:74:3c:15:52:69:0e:5f:bb:8c:42:a3:ed:a5:0d:82:85:3b:
         10:e3:67:17:2d:f0:8f:34:8a:ad:d9:6d:18:46:8a:22:c6:dd:
         30:2a:60:a1:ff:fc:81:62:60:5e:29:90:a0:d8:8a:e4:b9:bc:
         70:89:10:65:cc:dc:29:de:b9:e6:14:f8:f8:4d:10:ec:c5:1b:
         91:ca:8b:29:5c:ef:e5:a7:1d:78:0a:af:1a:81:dc:0a:ac:77:
         ec:ae:9c:0a:76:35:6d:9f:86:e2:ea:0d:88:69:9f:7c:55:32:
         af:64:79:7b:0b:80:58:e0:56:ad:5d:24:2a:d5:b4:09:04:ac:
         9e:a2:da:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 13:30:00 2024 by rpki-client on console-ams.rpki-client.org