Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232342e302f32302d3230203d3e203532343638.roa
File:                     3138372e3130382e3232342e302f32302d3230203d3e203532343638.roa (raw, json)
Hash identifier:          4YYuuzwGcT3cLsTSpY2uLJy/E0osYWKdMwgZ1EwfYgQ=
Subject key identifier:   C6:AF:CB:AB:17:2B:07:5C:E5:ED:3E:1A:A4:C0:26:76:8E:F2:3C:4B
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       680BA42C4D4DE8CDC98F69A0BA55259E470934FF
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232342e302f32302d3230203d3e203532343638.roa
Signing time:             Sat 19 Oct 2024 15:25:57 +0000
ROA not before:           Sat 19 Oct 2024 15:20:57 +0000
ROA not after:            Sat 18 Oct 2025 15:25:57 +0000
asID:                     52468
IP address blocks:        187.108.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 11:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:0b:a4:2c:4d:4d:e8:cd:c9:8f:69:a0:ba:55:25:9e:47:09:34:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Oct 19 15:20:57 2024 GMT
            Not After : Oct 18 15:25:57 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:11:be:a1:88:94:30:70:9d:a2:70:52:a1:8b:
                    55:f8:97:20:bd:e2:70:7d:e0:b6:a8:42:fe:ff:3e:
                    d0:d4:ba:a3:b6:15:37:e8:87:a4:4c:ee:f2:db:a3:
                    ea:59:0e:eb:20:25:68:b1:11:32:de:9a:c2:7c:b2:
                    02:f6:0a:d8:cb:47:9a:38:36:84:02:17:6c:10:de:
                    0b:dc:40:c0:a5:50:9e:4c:3d:93:ee:04:02:ca:d8:
                    d5:f5:c8:cd:08:3c:02:d4:57:ec:b7:f9:8a:b4:75:
                    b5:ef:ba:8e:14:7d:f7:25:88:63:de:a5:5c:e4:73:
                    07:0b:4d:7a:4d:6c:55:e7:da:3a:65:b0:e8:cc:d9:
                    52:9f:1d:a0:2f:2b:7a:4b:6b:35:9f:c1:8a:d0:a9:
                    8a:99:a2:e0:b9:4f:3d:d2:f6:62:e9:27:cb:17:ce:
                    b2:6d:8b:2f:1a:cf:ca:e4:5b:f1:0a:0c:1a:ed:26:
                    51:8a:9c:4a:a7:64:cb:ca:76:e3:ed:5a:64:74:cb:
                    3a:cf:76:f6:68:19:90:98:f9:59:37:19:4e:9f:72:
                    22:c2:0d:cf:52:93:c0:21:37:ca:05:4c:fc:62:c8:
                    71:bb:85:82:b1:9f:af:7f:6a:94:72:6f:e7:1c:8b:
                    c3:70:6b:6c:eb:17:8d:a8:31:34:8a:87:52:e3:ba:
                    85:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AF:CB:AB:17:2B:07:5C:E5:ED:3E:1A:A4:C0:26:76:8E:F2:3C:4B
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232342e302f32302d3230203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         39:77:88:05:b7:d0:37:d3:d4:c3:e2:21:11:d7:6f:f6:13:9d:
         3a:72:a0:15:72:42:d9:34:ea:73:bd:b9:75:76:5b:28:4f:8b:
         78:01:05:14:c4:80:df:4f:a5:45:15:f3:c8:73:84:9b:f3:e9:
         fd:65:ea:7d:45:1e:b1:c3:af:4b:e9:27:ab:6b:e2:16:0f:0c:
         30:75:2e:6e:d1:45:20:07:cc:bb:39:89:23:05:88:5a:27:d3:
         d7:f9:db:39:96:db:dc:f7:3b:01:7d:ec:bc:0e:f0:5c:ab:a9:
         b6:74:81:a9:bd:d9:94:19:00:9d:25:55:49:b4:8a:dc:dc:67:
         a3:94:84:bf:10:10:4d:db:3e:a5:9a:a0:a3:d6:de:b7:8f:4e:
         6c:61:17:c0:df:35:b0:8b:92:e8:48:49:8a:ff:85:c5:97:39:
         48:d6:6f:55:74:f6:e5:4a:08:f4:c0:7c:95:62:48:12:28:96:
         c3:78:0e:36:83:0f:69:17:78:ca:50:66:8a:bd:b1:cc:29:a2:
         30:bd:a6:3c:c1:4b:1d:0d:83:dc:11:69:af:d1:22:fe:4b:0d:
         b4:f8:d3:51:74:23:9d:8b:bf:95:92:7d:1e:b0:09:73:13:d2:
         a9:25:31:54:96:7c:3f:06:c1:29:3e:2e:05:6a:42:ac:c8:62:
         37:69:f5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:21 2024 by rpki-client on console-fra.rpki-client.org