Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3233332e302f32342d3234203d3e203532343638.roa
File:                     3138372e3130382e3233332e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          a3byjFcn829G/On3XEzSSIC7KK+CtGvM+UyrE6TsjTI=
Subject key identifier:   AA:E2:A8:77:40:48:E5:12:96:36:81:B7:A7:5E:B3:27:68:60:7B:5C
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       543ABC609D7B78AA6F836A964345C7294F94236E
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3233332e302f32342d3234203d3e203532343638.roa
Signing time:             Thu 04 Jan 2024 21:00:00 +0000
ROA not before:           Thu 04 Jan 2024 20:55:00 +0000
ROA not after:            Thu 02 Jan 2025 21:00:00 +0000
asID:                     52468
IP address blocks:        187.108.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Mar 2024 02:33:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:3a:bc:60:9d:7b:78:aa:6f:83:6a:96:43:45:c7:29:4f:94:23:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Jan  4 20:55:00 2024 GMT
            Not After : Jan  2 21:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c8:f4:14:6d:e4:2a:5b:1d:48:e7:76:71:bd:
                    d1:e8:21:04:43:2f:f2:0a:64:4d:97:43:1b:e7:2c:
                    d8:32:87:f7:e6:9d:bb:48:3f:d9:94:2b:d8:18:1a:
                    ba:aa:d4:e9:3c:c0:8c:3b:0d:e0:39:91:bd:1f:a6:
                    fa:d5:be:07:62:bf:2f:dc:12:8b:af:83:4e:64:33:
                    bb:10:8e:45:b5:3c:9b:7d:a0:83:10:cc:47:e5:c4:
                    93:92:39:e8:86:1f:63:ed:b6:1c:e9:15:7a:24:c9:
                    7d:98:58:42:fa:f8:36:7f:92:87:b5:76:1c:0b:3c:
                    50:89:02:c9:9e:a3:5f:a7:ff:52:b8:da:10:4a:99:
                    41:2f:65:5e:6a:df:e9:9d:23:eb:f6:f0:2a:e4:eb:
                    3c:27:ff:c2:5e:8d:24:ef:9a:24:97:7a:89:57:c1:
                    f4:f1:fe:62:31:c0:b9:3e:d8:26:71:e3:21:6b:71:
                    db:bb:c6:aa:be:05:17:84:cc:da:c1:7d:30:fa:61:
                    22:a5:49:4d:de:f8:ae:66:f6:71:c3:dd:9e:d9:67:
                    8a:94:30:0c:39:df:4e:ed:f7:99:d1:a8:26:1b:c9:
                    9a:05:77:d8:57:d5:81:1c:5e:d7:e1:4b:53:64:b8:
                    57:1d:ab:c5:d6:16:a7:4e:40:5f:4f:ba:f3:fa:ca:
                    09:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E2:A8:77:40:48:E5:12:96:36:81:B7:A7:5E:B3:27:68:60:7B:5C
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3233332e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:9f:69:19:60:53:90:11:24:96:82:f4:3a:e0:1b:c2:e3:08:
         32:e3:da:85:ca:a5:d0:99:d4:03:ee:1c:a0:ab:c3:0a:37:6b:
         d3:c7:18:9f:51:d5:3f:4d:1d:77:81:79:a6:05:12:7f:23:e4:
         28:10:d0:73:b5:63:95:44:7a:85:16:53:c3:3c:94:80:d1:ee:
         61:f2:5d:a7:3e:2f:cc:a5:22:03:00:a5:39:11:d8:34:b6:0d:
         65:7b:14:06:42:02:7e:d9:a0:21:e9:7e:64:4e:95:c5:92:78:
         9b:82:58:ba:08:23:19:70:f5:41:3d:09:65:aa:08:a0:ef:bc:
         b4:85:2c:4a:a9:1c:54:bd:96:0b:af:6b:fb:38:97:31:08:9e:
         62:db:c4:00:78:1a:be:27:50:63:1a:d4:b9:a5:af:e4:ad:9e:
         14:e1:d5:de:eb:a5:a6:fe:f7:73:c2:0b:d1:e3:46:b3:71:5c:
         07:49:31:7d:8d:be:5c:3d:6a:5d:38:06:03:59:dc:e2:b6:9e:
         86:85:54:6e:f0:98:e3:28:ee:e1:66:16:d9:9a:7b:fc:8a:03:
         58:8f:67:b6:91:02:00:d9:d3:5c:4e:33:22:27:3a:61:2a:f6:
         76:e2:2d:9d:ff:73:01:20:09:ab:83:d0:9b:9c:bf:2a:10:97:
         33:36:7c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 03:42:54 2024 by rpki-client on console-fra.rpki-client.org