Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232342e302f32342d3234203d3e203532343638.roa
File:                     3138372e3130382e3232342e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          Dmjzty7wYB4jwoXnTN8NUD2/Gf+YHc9EK19OWfoA8VY=
Subject key identifier:   99:8B:C7:93:9A:09:35:6D:67:74:9A:57:CC:EF:5D:AA:A3:64:EF:C7
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       5EE563D6053DEEE2F0B4C49F8E7807BED3CA7D25
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232342e302f32342d3234203d3e203532343638.roa
Signing time:             Fri 18 Oct 2024 20:31:05 +0000
ROA not before:           Fri 18 Oct 2024 20:26:05 +0000
ROA not after:            Fri 17 Oct 2025 20:31:05 +0000
asID:                     52468
IP address blocks:        187.108.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 11:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e5:63:d6:05:3d:ee:e2:f0:b4:c4:9f:8e:78:07:be:d3:ca:7d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Oct 18 20:26:05 2024 GMT
            Not After : Oct 17 20:31:05 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:20:f9:db:e6:ba:eb:c5:46:06:84:f3:60:9e:
                    48:d7:4d:53:ef:33:db:68:bd:00:41:2e:b1:48:07:
                    78:e4:8c:91:9a:f5:08:fb:f6:f4:4b:e0:c8:aa:4b:
                    bd:2b:ad:2a:9d:2c:c4:c8:b0:ab:00:8c:c6:ac:13:
                    9f:a5:65:41:56:ab:05:cd:a4:e4:2b:db:aa:7b:2d:
                    f6:e2:70:fb:35:37:07:02:ce:b2:27:20:e8:93:b0:
                    d7:28:e4:54:dc:67:39:20:4d:30:a4:53:85:94:54:
                    9e:fc:d5:a6:25:41:40:4d:49:69:79:2a:d1:fd:85:
                    1b:43:25:20:e3:fb:68:36:46:39:52:e4:4e:a1:45:
                    9f:86:9e:75:3d:5a:c0:dc:b0:17:47:1a:0f:55:8a:
                    66:6d:34:57:2f:7c:04:e6:45:fb:d4:ad:b8:60:28:
                    bd:4f:ae:b6:8d:ad:97:52:8a:8e:50:78:5d:97:84:
                    f4:95:bd:15:0c:13:1e:ec:fe:4d:7b:b1:3b:95:dc:
                    ae:73:a0:a6:da:1d:1a:a3:5d:a3:e9:27:7b:39:61:
                    05:42:a9:8a:39:ac:34:7a:e8:c0:cb:41:d9:e9:c8:
                    02:c2:6b:d0:e6:b6:78:5f:92:a7:ac:e7:4b:4d:45:
                    c0:26:05:f1:3a:e5:aa:5d:33:b6:04:0c:82:6c:d3:
                    90:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8B:C7:93:9A:09:35:6D:67:74:9A:57:CC:EF:5D:AA:A3:64:EF:C7
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232342e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:38:8e:55:ee:19:51:99:cf:a5:d5:74:ca:2d:0a:ca:8d:f0:
         9e:09:55:54:bf:0b:c0:21:07:38:bd:b0:9d:dd:1c:10:e6:53:
         27:c0:90:7d:13:77:4d:83:7d:cf:df:34:d4:96:6d:fc:4b:d4:
         48:c9:a9:6a:92:77:91:f5:45:6b:f2:dd:f0:26:eb:7d:d3:0a:
         a9:62:bb:86:21:56:17:91:65:71:b6:4c:c3:30:8f:19:1b:5d:
         15:80:80:d9:b4:41:45:e9:eb:20:00:79:59:21:43:8c:4d:77:
         e6:fb:0a:6f:c7:29:d2:f1:4e:ed:f3:24:67:63:17:17:d0:19:
         d9:a4:84:ec:05:07:fa:db:1f:87:5e:2d:7e:92:9e:58:e2:66:
         4d:bb:15:c0:48:76:42:7e:2a:b0:f1:d9:d6:6f:ac:91:dd:3d:
         62:66:ec:6b:1f:f6:f4:a0:33:ca:69:25:2e:b9:6d:b8:3e:b2:
         a0:66:b6:51:1f:c3:7e:d3:1d:51:76:1c:e5:69:74:e0:fe:b7:
         9e:bd:f3:fb:c6:82:f5:c3:4d:eb:22:67:72:29:12:07:e9:36:
         2a:3e:83:55:b8:55:3f:1d:09:75:1e:46:b8:fc:c4:b4:8f:14:
         23:58:a2:f0:12:41:04:c2:db:95:a5:cd:39:e8:63:2a:81:c6:
         ca:af:4b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:38:05 2024 by rpki-client on console-ams.rpki-client.org