Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232342e302f32342d3234203d3e203533313038.roa
File:                     3138372e3130382e3232342e302f32342d3234203d3e203533313038.roa (raw, json)
Hash identifier:          bWJZvqQcacPZPSp0hUTBwmxA5McylsQbnZd6/X71npg=
Subject key identifier:   38:6C:0B:15:77:C3:36:3E:5B:AC:94:BB:C8:8C:BE:BF:02:5F:D7:09
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       6932E941ECA8BE49FA638BEC013683CE4D1ED271
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232342e302f32342d3234203d3e203533313038.roa
Signing time:             Thu 06 Jun 2024 19:53:06 +0000
ROA not before:           Thu 06 Jun 2024 19:48:06 +0000
ROA not after:            Thu 05 Jun 2025 19:53:06 +0000
asID:                     53108
IP address blocks:        187.108.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 04:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:32:e9:41:ec:a8:be:49:fa:63:8b:ec:01:36:83:ce:4d:1e:d2:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jun  6 19:48:06 2024 GMT
            Not After : Jun  5 19:53:06 2025 GMT
        Subject: CN=3082010A0282010100C6D733970F85BBA5D4D3F7907B3EDB5D8ED8630E3B80CAC34590F1235B35A8501F96DA7997F0A704C2CF85B2C38AB21DC2529140BED15DC15BEAAF6BCE89E35A1B66F5C296EDEE2D0843051439A56E54244BA9BAEE72901A1438A6A306C7C84BA2478A87FA8C50C22360515C3F45E2147160E6450694A264E545A248B0D2F45DCD78ED1FE5EF009F65D03FF3B20CD3BDC11CFE074BCD41E1E50422BB676BB2F32BE0CDD3CBB8DFBE80611E43F6F96DBEB80D0B6030DCEFE4D8BEF38E1439B61EC24D10D1E0A784BA6956DA3B62A21FD96FC9F53B4F8FF1A1A2031247D2D2741E06D6A4DCFD57E3E6133D4E4E25BA2E4DAA600F6559B7A8E0F61591A0471296430203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d7:33:97:0f:85:bb:a5:d4:d3:f7:90:7b:3e:
                    db:5d:8e:d8:63:0e:3b:80:ca:c3:45:90:f1:23:5b:
                    35:a8:50:1f:96:da:79:97:f0:a7:04:c2:cf:85:b2:
                    c3:8a:b2:1d:c2:52:91:40:be:d1:5d:c1:5b:ea:af:
                    6b:ce:89:e3:5a:1b:66:f5:c2:96:ed:ee:2d:08:43:
                    05:14:39:a5:6e:54:24:4b:a9:ba:ee:72:90:1a:14:
                    38:a6:a3:06:c7:c8:4b:a2:47:8a:87:fa:8c:50:c2:
                    23:60:51:5c:3f:45:e2:14:71:60:e6:45:06:94:a2:
                    64:e5:45:a2:48:b0:d2:f4:5d:cd:78:ed:1f:e5:ef:
                    00:9f:65:d0:3f:f3:b2:0c:d3:bd:c1:1c:fe:07:4b:
                    cd:41:e1:e5:04:22:bb:67:6b:b2:f3:2b:e0:cd:d3:
                    cb:b8:df:be:80:61:1e:43:f6:f9:6d:be:b8:0d:0b:
                    60:30:dc:ef:e4:d8:be:f3:8e:14:39:b6:1e:c2:4d:
                    10:d1:e0:a7:84:ba:69:56:da:3b:62:a2:1f:d9:6f:
                    c9:f5:3b:4f:8f:f1:a1:a2:03:12:47:d2:d2:74:1e:
                    06:d6:a4:dc:fd:57:e3:e6:13:3d:4e:4e:25:ba:2e:
                    4d:aa:60:0f:65:59:b7:a8:e0:f6:15:91:a0:47:12:
                    96:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6C:0B:15:77:C3:36:3E:5B:AC:94:BB:C8:8C:BE:BF:02:5F:D7:09
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232342e302f32342d3234203d3e203533313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:d9:9a:64:b7:a3:0f:45:e8:2d:64:cf:06:89:15:1f:15:c2:
         87:f6:b1:a7:d0:37:43:3c:73:ca:92:5a:9a:58:e8:1d:23:0d:
         c8:f6:1c:d9:9d:f9:42:83:e8:8d:a7:5b:30:cd:84:4d:19:36:
         f8:d0:53:ef:0a:16:e2:9e:72:50:fa:c2:b9:62:0d:ed:c3:64:
         17:88:00:10:c8:6d:35:25:44:6d:6a:ac:a1:c7:34:2e:32:77:
         ea:17:94:2e:46:93:ed:68:09:93:72:25:80:28:cf:d3:4c:d9:
         08:57:fe:6e:a2:10:b4:37:f4:ea:37:bd:db:d6:a1:9f:9d:95:
         5e:05:a3:06:6b:27:6a:d5:4a:db:e1:5f:a8:4b:42:80:bb:46:
         4a:c2:79:c5:00:78:16:c0:3d:d0:be:c1:f1:a6:2b:32:03:de:
         57:41:b9:8b:4b:5f:ea:6a:d2:e0:7d:dd:dc:a6:7d:3e:59:01:
         47:0d:52:59:45:03:5c:d9:eb:40:fe:0e:74:8e:99:21:60:5e:
         f1:d4:eb:85:8a:52:e7:b6:c0:19:05:32:89:28:81:7f:7e:a1:
         85:2b:11:4f:ab:61:4f:71:d5:04:d8:23:29:0a:50:e5:75:ee:
         c9:c4:ae:39:c4:e8:05:db:a3:9e:d4:af:0e:d2:8f:67:e8:e8:
         29:43:99:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:11:53 2024 by rpki-client on console-ams.rpki-client.org