Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232342e302f32322d3232203d3e203533313038.roa
File:                     3138372e3130382e3232342e302f32322d3232203d3e203533313038.roa (raw, json)
Hash identifier:          resrDn6OWTnqQ357BcxshGJfy83iU40zuP/1cHYjbtk=
Subject key identifier:   CB:C9:68:D6:D0:AB:91:D4:AA:45:21:D3:B9:D6:46:5C:78:91:F8:77
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       21931F04C0E9E7227F21E1AE67C8D14515E62D9B
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232342e302f32322d3232203d3e203533313038.roa
Signing time:             Thu 06 Jun 2024 19:53:02 +0000
ROA not before:           Thu 06 Jun 2024 19:48:02 +0000
ROA not after:            Thu 05 Jun 2025 19:53:02 +0000
asID:                     53108
IP address blocks:        187.108.224.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 04:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:93:1f:04:c0:e9:e7:22:7f:21:e1:ae:67:c8:d1:45:15:e6:2d:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jun  6 19:48:02 2024 GMT
            Not After : Jun  5 19:53:02 2025 GMT
        Subject: CN=3082010A0282010100DA08FF487B4E2DA200C927B0F664064EC3D1977F9798552D16F76D348C49C68F6DDD7B8EB6BA3690ACBEA61490886AD7292A1E43F49C9F8C931E836EE218328BD1EFC38B87601C0F0D4E1C2B715EC7E2820A9A40525B0A4E64A90B449C28920AD56CB20CDA3CF36E79948D628213E80DD3881A357344C203E1A12BFC142B8B3400AE1CD850911DBE4A42D8BEBC67A279E2C9AF6390EBE601DA480ED020A50883B0ADABE28C92894EE978296391511F7BF9FF2A37064E8A7EF70D69046F89A868B92D34BA5A0F7F416E73DA62A3C07CF98575D66D54CA5237CE04F7E91264085F2CAC67F02DBE0A71DC8A221369DED70508650C092235C408D57653682116882F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:08:ff:48:7b:4e:2d:a2:00:c9:27:b0:f6:64:
                    06:4e:c3:d1:97:7f:97:98:55:2d:16:f7:6d:34:8c:
                    49:c6:8f:6d:dd:7b:8e:b6:ba:36:90:ac:be:a6:14:
                    90:88:6a:d7:29:2a:1e:43:f4:9c:9f:8c:93:1e:83:
                    6e:e2:18:32:8b:d1:ef:c3:8b:87:60:1c:0f:0d:4e:
                    1c:2b:71:5e:c7:e2:82:0a:9a:40:52:5b:0a:4e:64:
                    a9:0b:44:9c:28:92:0a:d5:6c:b2:0c:da:3c:f3:6e:
                    79:94:8d:62:82:13:e8:0d:d3:88:1a:35:73:44:c2:
                    03:e1:a1:2b:fc:14:2b:8b:34:00:ae:1c:d8:50:91:
                    1d:be:4a:42:d8:be:bc:67:a2:79:e2:c9:af:63:90:
                    eb:e6:01:da:48:0e:d0:20:a5:08:83:b0:ad:ab:e2:
                    8c:92:89:4e:e9:78:29:63:91:51:1f:7b:f9:ff:2a:
                    37:06:4e:8a:7e:f7:0d:69:04:6f:89:a8:68:b9:2d:
                    34:ba:5a:0f:7f:41:6e:73:da:62:a3:c0:7c:f9:85:
                    75:d6:6d:54:ca:52:37:ce:04:f7:e9:12:64:08:5f:
                    2c:ac:67:f0:2d:be:0a:71:dc:8a:22:13:69:de:d7:
                    05:08:65:0c:09:22:35:c4:08:d5:76:53:68:21:16:
                    88:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C9:68:D6:D0:AB:91:D4:AA:45:21:D3:B9:D6:46:5C:78:91:F8:77
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232342e302f32322d3232203d3e203533313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:b3:ae:2f:41:c0:5f:ec:03:a3:f2:78:cd:b2:ed:c1:db:97:
         a7:82:61:b1:ad:03:b3:f9:b1:88:cf:5d:c4:96:13:31:91:ea:
         61:69:73:f6:27:2c:d1:f1:13:67:41:73:8d:bb:71:a7:b5:1f:
         8a:c3:03:17:ab:5c:bc:44:ad:45:f5:36:46:16:86:39:e4:27:
         01:f3:d5:91:f3:64:0e:9d:db:2b:3d:84:9b:ca:31:fb:9e:93:
         47:51:1b:36:0b:1a:bf:cb:05:96:f5:9c:4b:33:30:a1:3b:6c:
         a7:50:f0:c0:74:67:bf:f3:03:31:ca:fa:56:ee:79:7b:3f:9f:
         c4:53:b3:4f:1e:65:68:21:f3:ff:2c:30:77:8e:ae:3d:00:6f:
         fc:9e:6c:65:59:e4:67:27:ed:2b:89:4b:35:85:e0:fa:e3:82:
         51:ef:52:0a:ee:66:08:4c:ab:e6:a5:00:ac:b7:83:4e:a5:36:
         39:92:b6:27:b1:27:dc:19:04:1a:c6:a9:e9:6e:eb:dd:76:21:
         03:67:21:51:51:8a:ab:34:3f:b0:09:0e:06:81:e4:4b:42:68:
         5d:5b:e8:ab:89:c5:6d:ee:59:2e:03:36:64:5c:d2:0f:f5:3d:
         01:56:06:d5:3a:80:97:9a:06:fc:6a:94:ee:a6:d6:a7:d8:04:
         5b:81:7b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:11:53 2024 by rpki-client on console-ams.rpki-client.org