Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232342e302f32302d3230203d3e203238313234.roa
File:                     3138372e3130382e3232342e302f32302d3230203d3e203238313234.roa (raw, json)
Hash identifier:          JTKTRvdvWGnKCCADOC0G2DF9bysmGFO+Od0dBhxuP3Q=
Subject key identifier:   C7:26:21:4C:E3:7F:D3:DF:91:5A:37:6C:C7:2E:7C:12:16:6A:7E:8A
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       735BC466547E5D47F57CE560C37BF96AA7E76092
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232342e302f32302d3230203d3e203238313234.roa
Signing time:             Thu 06 Feb 2025 11:01:36 +0000
ROA not before:           Thu 06 Feb 2025 10:56:36 +0000
ROA not after:            Thu 05 Feb 2026 11:01:36 +0000
asID:                     28124
IP address blocks:        187.108.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 23:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:5b:c4:66:54:7e:5d:47:f5:7c:e5:60:c3:7b:f9:6a:a7:e7:60:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Feb  6 10:56:36 2025 GMT
            Not After : Feb  5 11:01:36 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:df:a9:19:f9:8c:95:45:ec:0f:3a:45:7b:69:
                    26:cf:c5:55:2a:fa:d6:39:92:d3:42:18:a3:a6:6e:
                    1b:1b:33:f6:6a:39:a0:70:fb:70:4f:73:1b:a2:85:
                    5f:b1:5e:be:a7:bf:24:a5:c9:ea:a1:51:7f:46:18:
                    22:01:b2:81:93:e8:e5:46:ad:4c:ae:52:38:47:90:
                    ef:da:14:e4:8e:4f:78:98:f5:17:50:eb:14:d7:ec:
                    11:41:5f:2a:99:8a:96:8c:d9:09:3a:75:a5:73:aa:
                    e0:6d:dd:74:0a:d3:39:a5:29:ef:d2:19:9a:e7:e6:
                    9a:be:33:f3:df:0a:22:57:af:bd:2b:87:f0:a2:8f:
                    23:cd:3a:fd:2b:29:78:62:6c:ae:cc:10:38:a5:80:
                    31:ba:fd:c5:c7:80:b5:b1:1f:a6:ff:b0:14:94:91:
                    b7:65:67:fe:92:51:ca:7f:c3:5b:35:0e:c0:a5:3a:
                    4c:90:48:5a:b8:e4:ea:57:2c:71:c2:08:9f:b9:6d:
                    e6:fd:b7:88:43:41:92:24:e5:3b:6a:d6:2f:f3:f1:
                    ea:48:8e:a3:2d:59:9b:bd:c5:dd:66:6f:81:ae:7a:
                    9d:83:a9:eb:db:c4:0f:3f:b8:4f:93:e0:38:28:51:
                    76:85:c7:fa:1b:72:5c:55:a3:38:b4:d7:d0:f1:9f:
                    dd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:26:21:4C:E3:7F:D3:DF:91:5A:37:6C:C7:2E:7C:12:16:6A:7E:8A
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232342e302f32302d3230203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:04:ab:7e:37:c5:d5:31:5d:56:a3:bb:fd:73:69:f2:73:0e:
         8b:16:6b:46:bd:4d:86:fb:43:2f:bd:a8:e2:a9:c5:2f:b5:68:
         71:43:72:dd:8b:9d:05:17:a1:81:d0:d6:eb:50:0c:c6:9f:28:
         2b:69:90:1a:88:46:e1:4e:0a:15:76:9a:02:08:97:89:2c:f4:
         47:5a:b0:35:6c:0d:7e:05:7d:9e:f4:24:89:5a:25:a2:27:14:
         18:0d:a3:63:45:d8:d6:cc:1d:8d:bd:1e:04:65:76:16:23:73:
         e8:e7:2e:d9:96:1d:07:f7:06:f5:85:a4:99:57:23:b7:f8:5d:
         62:f3:bb:33:ab:de:c5:81:53:7f:2a:11:96:62:b4:81:8b:e1:
         d6:f7:38:aa:a3:d6:1e:61:f4:ef:c1:c2:4d:4b:ac:04:6b:cf:
         05:89:f1:7e:5e:35:c2:1a:01:61:ca:61:f9:fc:a4:8c:20:28:
         a3:50:3a:26:a7:5e:c8:48:16:b1:64:28:8d:2f:53:c6:2d:b9:
         1d:df:bf:89:a1:ee:49:df:61:ac:f7:34:42:e8:91:7d:ec:cd:
         e4:1f:03:d0:ac:c5:19:3d:26:46:f6:a2:60:c0:d1:ba:0b:bb:
         d2:9e:69:7e:b0:ce:2f:95:62:72:80:a5:62:c6:76:2c:de:e0:
         64:6e:23:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:41:38 2025 by rpki-client