Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3136372e3234392e3130352e302f32342d3234203d3e203532343638.roa
File:                     3136372e3234392e3130352e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          0QaE+0NsA2GcByNFGxGFdvMjsBMg1MWonA76yBSZhnU=
Subject key identifier:   E2:A5:8B:F8:04:4E:00:8D:F0:FC:2A:18:3E:5F:1D:5E:8B:6A:53:8B
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       1A8B961B12F0891A0C9A8B877D9ACD7E867CFED1
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3136372e3234392e3130352e302f32342d3234203d3e203532343638.roa
Signing time:             Thu 06 Jun 2024 19:53:05 +0000
ROA not before:           Thu 06 Jun 2024 19:48:05 +0000
ROA not after:            Thu 05 Jun 2025 19:53:05 +0000
asID:                     52468
IP address blocks:        167.249.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 12:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:8b:96:1b:12:f0:89:1a:0c:9a:8b:87:7d:9a:cd:7e:86:7c:fe:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jun  6 19:48:05 2024 GMT
            Not After : Jun  5 19:53:05 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0d:db:d3:66:24:c0:93:ef:20:91:9d:25:ea:
                    ca:87:b7:76:05:37:36:f6:17:ef:59:f7:0f:ab:99:
                    5e:48:94:31:a8:37:6f:5e:26:43:73:3e:fb:5f:5f:
                    54:ef:62:c7:f3:60:90:15:e6:73:8b:f2:c2:05:48:
                    df:f1:39:4e:ff:ec:a3:b7:ff:b9:87:58:38:47:02:
                    3e:bb:c8:32:7d:78:d0:88:42:e8:7d:f7:50:90:5a:
                    1d:d0:63:70:8f:36:df:2b:77:7a:81:a5:51:6a:53:
                    0b:e7:c2:20:9c:2d:af:28:ff:f9:fe:64:14:8f:7e:
                    9b:0b:58:12:63:a4:01:2a:f3:52:20:7b:1b:97:a7:
                    67:c9:c5:f5:4f:c1:ee:20:11:b2:90:83:39:44:2e:
                    9e:5e:06:49:fc:9b:59:a8:32:7d:28:fa:56:76:9c:
                    05:7e:4c:27:b8:ec:22:6e:0e:12:0d:d0:0a:33:64:
                    dc:7d:5e:3f:df:0a:79:a3:70:0b:38:45:8a:8d:01:
                    90:f1:cb:d2:5d:63:9d:c8:0a:0b:80:b7:6e:12:72:
                    bf:ce:c5:24:62:89:bb:82:0a:13:9e:6d:69:d0:9d:
                    19:07:3e:70:d7:d9:34:57:20:eb:c1:75:0c:65:03:
                    3b:54:82:d4:db:10:93:fc:38:4e:e6:dc:62:93:92:
                    57:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A5:8B:F8:04:4E:00:8D:F0:FC:2A:18:3E:5F:1D:5E:8B:6A:53:8B
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3136372e3234392e3130352e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:72:84:8c:fa:39:bd:28:e1:1c:11:a8:a6:0c:49:74:81:05:
         0d:aa:1d:2b:08:18:67:8c:46:53:09:ae:8b:57:00:d5:48:ab:
         90:04:1d:24:18:5a:dd:52:a2:5e:59:fd:82:6f:03:a1:ea:9d:
         8c:74:4e:57:57:11:c7:4a:dd:e5:eb:0d:de:71:2b:6c:bf:97:
         dc:5c:16:07:d7:b1:c4:ea:9d:73:34:37:66:be:49:2b:23:9a:
         d4:93:43:ec:38:ee:d3:a3:d6:30:bd:eb:38:d5:04:84:20:85:
         21:a6:76:45:3e:15:7c:31:c6:b5:e8:4e:9f:6b:66:7f:7f:9d:
         ed:68:c0:46:eb:a7:8e:ba:7e:ad:8d:4e:23:ed:27:a5:51:84:
         8d:97:0a:2c:e6:0b:51:da:03:42:40:ce:43:22:fa:dc:71:d3:
         b9:9e:f3:d5:a0:61:9e:ba:a4:ea:8a:95:f6:38:87:12:62:4e:
         38:d5:c3:e5:ed:08:27:32:de:98:20:e6:6d:f7:7a:c1:6f:91:
         0e:c6:10:56:5d:de:a8:19:a0:42:2a:45:b9:18:7c:9b:b0:01:
         2c:d3:00:87:27:78:02:cd:85:63:ed:14:f1:e8:ca:19:d5:d9:
         35:0b:9c:ca:e8:17:c5:30:24:5d:12:7a:cd:55:e8:1c:a9:13:
         54:3d:9b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 12:35:55 2024 by rpki-client on console-fra.rpki-client.org