Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232352e302f32342d3234203d3e203238313234.roa
File:                     3138372e3130382e3232352e302f32342d3234203d3e203238313234.roa (raw, json)
Hash identifier:          6oyTkbHf+myVFNddjS1JXEidha2HRaQ2NzyPhKzqHcM=
Subject key identifier:   89:9A:BE:24:D6:DE:60:95:BB:64:58:25:40:BB:EB:5C:A1:58:A5:95
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       1ECD3D9D9DDC22F5C7491EA2325A7BDBB7DB937B
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232352e302f32342d3234203d3e203238313234.roa
Signing time:             Tue 11 Feb 2025 12:10:41 +0000
ROA not before:           Tue 11 Feb 2025 12:05:41 +0000
ROA not after:            Tue 10 Feb 2026 12:10:41 +0000
asID:                     28124
IP address blocks:        187.108.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 23:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:cd:3d:9d:9d:dc:22:f5:c7:49:1e:a2:32:5a:7b:db:b7:db:93:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Feb 11 12:05:41 2025 GMT
            Not After : Feb 10 12:10:41 2026 GMT
        Subject: CN=3082010A0282010100BA1786AD0EB203DC2E1993B3198983A0671A2FD70B2D5461D9A08ACD045982DE04ECFAE04D78F11D48BC99DDFB8088B5DCB671F6E06A46AA47652D87D7C2F0C5A8437AF60495131D6E43F7187AF487614C03B33AA0B567B0080854D55CD463230DF0B6B9F8EED66BCCB3FC45AC1343558E4FFF206E8BA811264BC569B3A2DF2A144DFFAF7CDB9CEA201A5306D0764A24220579A032A0D7CDFB3D006DBCEE9FDC254D40162187CA66D96E3B4CCBD411355E2AC175B918F3C6DC580A3D0F6972EF810FFD7044B4A8A86065FAB5837463DB0F597D94AC5703070EA8992226D6064E922CE03AB4350AB170724C49AB8D115D9052623880DE4E171C340403B5A3A5610203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:17:86:ad:0e:b2:03:dc:2e:19:93:b3:19:89:
                    83:a0:67:1a:2f:d7:0b:2d:54:61:d9:a0:8a:cd:04:
                    59:82:de:04:ec:fa:e0:4d:78:f1:1d:48:bc:99:dd:
                    fb:80:88:b5:dc:b6:71:f6:e0:6a:46:aa:47:65:2d:
                    87:d7:c2:f0:c5:a8:43:7a:f6:04:95:13:1d:6e:43:
                    f7:18:7a:f4:87:61:4c:03:b3:3a:a0:b5:67:b0:08:
                    08:54:d5:5c:d4:63:23:0d:f0:b6:b9:f8:ee:d6:6b:
                    cc:b3:fc:45:ac:13:43:55:8e:4f:ff:20:6e:8b:a8:
                    11:26:4b:c5:69:b3:a2:df:2a:14:4d:ff:af:7c:db:
                    9c:ea:20:1a:53:06:d0:76:4a:24:22:05:79:a0:32:
                    a0:d7:cd:fb:3d:00:6d:bc:ee:9f:dc:25:4d:40:16:
                    21:87:ca:66:d9:6e:3b:4c:cb:d4:11:35:5e:2a:c1:
                    75:b9:18:f3:c6:dc:58:0a:3d:0f:69:72:ef:81:0f:
                    fd:70:44:b4:a8:a8:60:65:fa:b5:83:74:63:db:0f:
                    59:7d:94:ac:57:03:07:0e:a8:99:22:26:d6:06:4e:
                    92:2c:e0:3a:b4:35:0a:b1:70:72:4c:49:ab:8d:11:
                    5d:90:52:62:38:80:de:4e:17:1c:34:04:03:b5:a3:
                    a5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9A:BE:24:D6:DE:60:95:BB:64:58:25:40:BB:EB:5C:A1:58:A5:95
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232352e302f32342d3234203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:63:ee:53:22:ac:a7:b9:6c:34:90:e3:31:09:3e:71:c4:3b:
         03:dd:12:be:53:16:af:57:16:c8:30:79:37:8f:f9:63:f6:36:
         dd:10:2b:6d:95:09:b9:02:34:be:09:04:5b:67:5d:5d:00:38:
         f7:0f:b5:e3:72:0a:76:67:b2:a8:27:21:7e:ae:aa:8e:4d:07:
         57:9b:8c:36:98:3d:90:ef:68:b5:91:66:5d:4b:55:ee:dd:5c:
         02:e2:67:df:61:29:aa:7a:c8:97:14:76:29:58:8b:12:2a:1f:
         f1:82:6c:ce:70:6e:46:b8:92:97:cb:67:81:15:b8:cf:14:44:
         a3:25:fd:fc:35:26:54:e9:73:a7:d5:c1:52:d7:e8:39:a1:ef:
         5b:30:57:5e:ed:fc:ea:2d:a6:99:ba:09:b0:a4:22:93:41:80:
         35:8f:6d:79:20:c5:4a:7a:01:ab:6d:d2:27:ba:a5:e2:48:04:
         bb:12:d6:cf:d3:c9:04:94:e8:0f:7e:b8:f8:33:7d:9b:fc:29:
         ea:f3:b1:c2:24:e7:3b:14:42:eb:57:fa:ae:c1:cb:21:d5:f9:
         eb:dc:eb:84:4b:06:f3:2e:fc:29:9f:b2:cc:7b:53:29:89:5a:
         f6:ba:e7:5b:9e:09:ab:5f:27:44:78:64:d0:ba:6a:89:e8:53:
         f6:05:59:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:54:38 2025 by rpki-client