Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3136372e3234392e3130372e302f32342d3234203d3e203532343638.roa
File:                     3136372e3234392e3130372e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          dY/cIhf0qQVmpV5bLVOE5ivAe1XXi4IwK39dN/6hS3E=
Subject key identifier:   8B:33:FE:4D:87:15:14:31:46:5F:B3:40:F1:F8:37:DD:78:44:F7:AA
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       0CFB258ADFAE5AA014507BC7CCAA6144B22835EC
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3136372e3234392e3130372e302f32342d3234203d3e203532343638.roa
Signing time:             Thu 06 Jun 2024 19:53:03 +0000
ROA not before:           Thu 06 Jun 2024 19:48:03 +0000
ROA not after:            Thu 05 Jun 2025 19:53:03 +0000
asID:                     52468
IP address blocks:        167.249.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Nov 2024 18:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:fb:25:8a:df:ae:5a:a0:14:50:7b:c7:cc:aa:61:44:b2:28:35:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jun  6 19:48:03 2024 GMT
            Not After : Jun  5 19:53:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:46:6c:ca:1e:63:49:6f:cc:8d:d2:14:49:74:
                    34:2b:41:7e:90:d5:ba:7a:3c:cc:3b:ab:70:1b:17:
                    2e:6f:9a:38:23:fa:38:5a:76:05:7f:bd:c7:4a:fe:
                    d4:d1:ab:39:a1:6a:07:c5:8f:df:96:39:4c:05:d1:
                    86:bd:59:72:ba:15:11:b8:27:3a:3b:79:16:b6:e6:
                    2b:5d:1b:67:13:60:00:24:65:bd:d4:c0:79:08:47:
                    62:e3:d7:0a:7e:47:7b:28:0f:7c:7d:55:99:65:15:
                    3d:47:2f:09:42:17:d9:4a:cb:fe:dc:be:88:bd:3b:
                    12:ab:c5:d3:aa:b1:ba:fc:cf:8e:74:7e:b0:f7:6a:
                    94:f4:88:82:cf:9e:68:31:0a:88:1a:ce:83:cc:db:
                    3a:bc:3b:b0:58:bf:6c:d8:ed:fe:c6:1d:b5:72:d4:
                    73:03:8b:ee:96:4f:2a:15:38:7d:8b:c5:62:30:30:
                    f2:c6:40:23:03:9d:18:30:a0:44:1e:4e:4e:f2:c2:
                    8e:0b:ef:17:59:47:62:7b:75:c5:46:a8:3a:89:4e:
                    78:0a:85:10:27:93:4d:f7:14:6a:3e:a2:5a:e0:e3:
                    23:48:dd:37:f6:10:47:27:ea:de:4a:60:d7:f7:65:
                    bf:cc:df:cb:38:f4:60:c6:34:a5:e1:9a:c0:84:da:
                    6b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:33:FE:4D:87:15:14:31:46:5F:B3:40:F1:F8:37:DD:78:44:F7:AA
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3136372e3234392e3130372e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:f9:65:76:78:a1:fa:20:2d:96:2d:86:d9:41:e4:f0:c6:e7:
         5e:b9:6c:97:fa:e2:a5:83:48:bb:15:08:cc:31:06:62:e7:66:
         0e:fd:11:9b:61:6b:cb:ed:ee:f2:15:21:c2:e9:4b:49:8b:24:
         21:71:0b:f1:54:54:c6:b7:9f:ae:a8:fc:d0:09:c5:e5:48:a5:
         62:90:29:98:d7:57:91:40:f3:7d:75:eb:48:3f:54:6a:e0:00:
         c7:46:b2:66:36:cb:c7:5f:7b:ed:b4:f2:72:7d:be:de:5a:36:
         39:5f:5a:e5:e9:f5:01:f5:cc:62:31:3d:13:90:1a:b0:ad:f4:
         6e:0c:0f:56:7f:a5:ce:0e:0b:b7:e0:d6:99:ca:f1:db:9c:3b:
         aa:af:19:d1:e6:ed:d9:ed:16:46:25:77:9a:0b:24:4f:42:50:
         f0:68:46:3c:0d:b4:78:ea:ea:82:31:9d:cc:bc:4a:02:65:2f:
         58:39:32:5d:da:09:eb:8e:07:7d:07:49:ce:67:40:d9:30:fc:
         ee:15:37:40:de:e5:87:0e:4b:bc:bf:73:e2:4e:d6:ae:0e:c5:
         72:fe:ed:8b:b3:8b:5b:a9:10:f4:92:dd:89:21:ca:a1:13:31:
         ed:af:5f:43:4b:b5:ec:9d:5c:e1:78:26:61:be:d0:cf:6e:69:
         7d:3e:ab:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:58:00 2024 by rpki-client on console-fra.rpki-client.org