Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232342e302f32322d3232203d3e203532343638.roa
File:                     3138372e3130382e3232342e302f32322d3232203d3e203532343638.roa (raw, json)
Hash identifier:          PExiWwzmFJNlEppTIRByH9zYUT9q8A7bg7/WURJ9mkc=
Subject key identifier:   A8:86:7C:DE:F8:C0:0E:70:AE:0A:14:7A:CB:C5:BC:2E:FC:EB:F9:55
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       138DD039A9282964610D433822D177B3A58AEE92
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232342e302f32322d3232203d3e203532343638.roa
Signing time:             Sat 19 Oct 2024 15:27:26 +0000
ROA not before:           Sat 19 Oct 2024 15:22:26 +0000
ROA not after:            Sat 18 Oct 2025 15:27:26 +0000
asID:                     52468
IP address blocks:        187.108.224.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 11:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:8d:d0:39:a9:28:29:64:61:0d:43:38:22:d1:77:b3:a5:8a:ee:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Oct 19 15:22:26 2024 GMT
            Not After : Oct 18 15:27:26 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:e0:40:b1:d9:a7:80:02:ab:58:42:92:66:
                    59:8f:0a:58:f4:93:62:4a:bf:65:a3:ea:f0:98:64:
                    c7:c2:18:21:b6:79:a8:b7:c1:ad:68:ae:98:33:72:
                    7f:9e:9e:6e:1f:d4:fb:50:99:0e:18:75:af:59:2b:
                    17:c8:5c:c3:01:d4:bb:dd:68:7c:f7:e0:73:76:c3:
                    de:ee:d9:fc:f7:7f:05:c2:f7:b1:25:c3:6a:b5:3b:
                    0e:81:48:03:3c:29:d1:24:16:19:f4:6a:e5:06:27:
                    bc:5c:4e:58:3f:03:64:a0:17:57:e4:2b:5d:7d:79:
                    d4:ca:ba:55:61:d0:a6:eb:7b:61:d1:3d:d1:a5:70:
                    03:f9:62:72:7c:ff:0c:b3:18:8b:bc:a1:44:ab:da:
                    88:ac:98:51:13:45:6c:5f:7e:4d:7e:d9:cf:0a:42:
                    40:a6:90:9a:a1:f7:6b:c8:6b:60:92:3f:e3:c3:8a:
                    4a:ff:83:38:7f:f4:78:27:8c:89:49:80:60:e3:71:
                    c6:c4:32:91:57:02:91:53:73:fe:e8:4a:8d:3a:ac:
                    09:c6:65:4a:43:fa:59:62:d3:8d:2b:5b:09:e4:41:
                    f9:25:44:ab:7a:7e:f7:da:c0:0c:34:8e:50:26:50:
                    27:2b:28:6b:fd:b0:5c:b1:09:c7:6f:0a:36:cd:2a:
                    5a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:86:7C:DE:F8:C0:0E:70:AE:0A:14:7A:CB:C5:BC:2E:FC:EB:F9:55
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232342e302f32322d3232203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:a3:c8:0f:1d:76:86:d4:e3:12:5d:9e:de:ef:8b:3d:91:71:
         3f:ed:e0:e8:0b:f5:05:ed:37:c4:f9:d7:8b:db:e7:59:b8:26:
         fd:b1:80:cf:ef:37:dc:34:4d:14:1e:0e:c6:ed:2b:57:68:e8:
         df:df:d4:b4:79:2d:eb:ec:18:98:3b:8f:9d:41:3a:4c:bc:b4:
         7b:47:10:08:cd:6c:70:bd:af:ce:ce:d6:90:ac:b2:39:9d:91:
         01:14:40:fe:07:9a:b8:24:ff:2b:39:06:f6:15:9f:bb:26:f0:
         93:b8:18:04:fd:ab:68:b6:f1:06:10:65:07:43:de:3d:34:cb:
         c8:f5:da:46:14:e9:36:7a:d8:80:82:52:e2:e9:f4:60:32:f7:
         15:d3:33:d0:28:ad:ec:0f:5c:19:04:33:ad:f3:7c:c6:4d:20:
         2d:b3:c4:31:6e:84:fc:ef:7e:b2:63:ba:b1:80:6c:da:64:90:
         62:c9:40:a8:c1:b9:f5:f4:08:33:5a:3a:d3:a3:c6:b0:f9:06:
         41:4c:7a:eb:85:73:11:13:5e:ba:9b:06:74:9c:4f:0d:cc:8d:
         a7:55:ca:41:86:bd:4c:4a:20:02:a5:7f:fc:e5:d5:30:d9:bd:
         9b:bd:88:c3:19:77:70:9d:93:2f:2a:d5:5c:9b:c6:2c:3e:22:
         52:04:68:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:21 2024 by rpki-client on console-fra.rpki-client.org