Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232342e302f32332d3233203d3e203532343638.roa
File:                     3138372e3130382e3232342e302f32332d3233203d3e203532343638.roa (raw, json)
Hash identifier:          yIrCRN49+z6ZR/a3SrQVipeEslDkuJw9ik6bG6KsO4E=
Subject key identifier:   2F:22:45:87:FE:30:83:0F:01:DB:DD:5E:EE:56:A6:70:D4:C6:58:6C
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       2845E4BBA58C9B680CCBDFFC4EA5E1AB0624710D
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232342e302f32332d3233203d3e203532343638.roa
Signing time:             Sat 19 Oct 2024 15:28:29 +0000
ROA not before:           Sat 19 Oct 2024 15:23:29 +0000
ROA not after:            Sat 18 Oct 2025 15:28:29 +0000
asID:                     52468
IP address blocks:        187.108.224.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Nov 2024 18:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:45:e4:bb:a5:8c:9b:68:0c:cb:df:fc:4e:a5:e1:ab:06:24:71:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Oct 19 15:23:29 2024 GMT
            Not After : Oct 18 15:28:29 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3b:14:0f:af:d0:99:ed:85:c4:f5:e2:67:00:
                    80:65:2e:9c:84:68:54:26:41:49:ce:ce:d2:2a:c5:
                    f0:74:dc:71:3a:08:9e:a7:df:3e:c7:f6:19:b1:81:
                    e0:49:9d:66:3f:bf:32:42:7f:a4:c7:3a:fa:02:c8:
                    f2:1b:af:dd:1a:5e:c6:f5:9b:8d:68:cd:0a:92:d1:
                    46:11:e7:5f:6f:50:67:c3:e8:79:98:f1:d3:88:08:
                    2c:f9:67:09:b6:fc:56:ba:d3:4e:0a:db:98:75:56:
                    11:11:e1:6e:10:02:db:d6:bb:39:16:60:e8:f7:ed:
                    6b:d7:5c:b3:94:2b:06:dd:07:8f:4e:14:d6:89:3a:
                    b3:a9:1f:fd:25:1c:2f:35:a3:e4:eb:7c:3c:00:78:
                    66:99:d7:06:d4:be:b2:39:a2:d0:8b:64:87:ec:69:
                    31:a7:06:21:37:29:1a:5b:c7:aa:d0:f8:cb:c9:4d:
                    b2:65:4b:06:1b:17:b9:1e:23:c7:4f:a8:71:af:f2:
                    49:96:bd:d2:de:b7:da:bf:64:3a:d1:f6:36:af:a8:
                    05:13:71:64:bd:89:f2:94:c2:ac:5d:0a:47:b1:b5:
                    ad:40:30:af:f8:7f:d0:97:d1:6d:f2:6e:26:59:91:
                    54:34:ef:57:16:bc:c2:5e:7e:fb:79:df:f5:2e:f5:
                    d2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:22:45:87:FE:30:83:0F:01:DB:DD:5E:EE:56:A6:70:D4:C6:58:6C
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232342e302f32332d3233203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:d5:72:a6:6e:f2:b5:a7:d9:89:a3:11:eb:ad:5f:b5:49:3b:
         2c:d8:92:d3:1c:a0:a6:94:99:53:64:db:21:d3:77:83:c5:93:
         6c:b0:35:64:83:7e:6a:95:af:6a:5d:70:ce:83:0d:cd:f9:dc:
         57:74:81:7a:69:57:fd:23:f5:5b:8b:4d:77:a4:d7:63:6a:57:
         bc:c9:a0:9a:70:51:81:0f:92:c0:76:b0:03:f5:bc:b8:27:7c:
         d2:51:ce:0f:c2:12:bd:f6:06:2e:90:42:ba:26:48:69:95:bf:
         cb:98:6d:90:98:9e:f2:a8:0d:a7:77:c7:db:a8:e2:46:48:8b:
         13:a9:ce:40:48:9c:72:4f:73:b9:48:d6:d7:fc:0f:a7:df:ed:
         42:38:cb:06:95:ad:8f:9a:9b:2c:f2:a3:f9:6c:74:7f:2b:35:
         65:a2:c3:80:6f:e3:52:a2:3c:00:f1:a6:23:b2:67:49:7b:21:
         0b:75:78:b8:24:c0:8c:17:f9:e2:09:1d:ab:6e:90:67:d5:35:
         32:b2:73:35:80:91:9e:4d:b7:34:b4:fc:99:aa:a6:89:7b:09:
         23:60:b4:5d:8c:a1:45:55:11:fd:bc:c6:fc:45:2d:0f:da:ed:
         32:94:39:34:71:e1:1c:e4:a2:d3:93:36:01:83:8b:9c:cc:1f:
         8c:29:9f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:43:22 2024 by rpki-client on console-ams.rpki-client.org