Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232352e302f32342d3234203d3e203532343638.roa
File:                     3138372e3130382e3232352e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          5kO+nCBdospUmbY1x+WBaSoNVyV+FegrCdBJRk1HPu0=
Subject key identifier:   88:FE:B9:E9:A8:39:C3:D7:29:19:F6:B0:B1:4C:0C:53:A7:E2:4E:1C
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       5A59F7A1D2D875780DB25E92D3D715DDC5A9616E
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232352e302f32342d3234203d3e203532343638.roa
Signing time:             Fri 18 Oct 2024 20:31:16 +0000
ROA not before:           Fri 18 Oct 2024 20:26:16 +0000
ROA not after:            Fri 17 Oct 2025 20:31:16 +0000
asID:                     52468
IP address blocks:        187.108.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 11:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:59:f7:a1:d2:d8:75:78:0d:b2:5e:92:d3:d7:15:dd:c5:a9:61:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Oct 18 20:26:16 2024 GMT
            Not After : Oct 17 20:31:16 2025 GMT
        Subject: CN=3082010A0282010100F56B3626487D7E8E8829A5B04B0D73A0DCAD1364428701472046980ECE4AEEA209B1D8ED064CACD40E923C231F9BAFEBB89BBAE17FA1CAFFDD8DC9929F110CCB9085BB1C5C11FF20B89DA8D6401AE2F2B990C465233E16B263E5903FAAA8F394459B917CC144FC737FAA80FD52C9AB27AEA20B2A6737A876863F223882647B866610E1E85BE3869B8249411B699785920EF05FF4C1D961FB579E7C7D3434AB10930E7097015AEE528F668BD6C337964EE458B68A5841EF4BAD396F8FABED297D58EDB8947A74D79CD4169A7B7F0AB6C4061C941A56EC87B23B167A616930DFE23AB0E0EF2550629997AAD1E4BB7996D1371E798AD1A86D7BB77704AC282864B90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:6b:36:26:48:7d:7e:8e:88:29:a5:b0:4b:0d:
                    73:a0:dc:ad:13:64:42:87:01:47:20:46:98:0e:ce:
                    4a:ee:a2:09:b1:d8:ed:06:4c:ac:d4:0e:92:3c:23:
                    1f:9b:af:eb:b8:9b:ba:e1:7f:a1:ca:ff:dd:8d:c9:
                    92:9f:11:0c:cb:90:85:bb:1c:5c:11:ff:20:b8:9d:
                    a8:d6:40:1a:e2:f2:b9:90:c4:65:23:3e:16:b2:63:
                    e5:90:3f:aa:a8:f3:94:45:9b:91:7c:c1:44:fc:73:
                    7f:aa:80:fd:52:c9:ab:27:ae:a2:0b:2a:67:37:a8:
                    76:86:3f:22:38:82:64:7b:86:66:10:e1:e8:5b:e3:
                    86:9b:82:49:41:1b:69:97:85:92:0e:f0:5f:f4:c1:
                    d9:61:fb:57:9e:7c:7d:34:34:ab:10:93:0e:70:97:
                    01:5a:ee:52:8f:66:8b:d6:c3:37:96:4e:e4:58:b6:
                    8a:58:41:ef:4b:ad:39:6f:8f:ab:ed:29:7d:58:ed:
                    b8:94:7a:74:d7:9c:d4:16:9a:7b:7f:0a:b6:c4:06:
                    1c:94:1a:56:ec:87:b2:3b:16:7a:61:69:30:df:e2:
                    3a:b0:e0:ef:25:50:62:99:97:aa:d1:e4:bb:79:96:
                    d1:37:1e:79:8a:d1:a8:6d:7b:b7:77:04:ac:28:28:
                    64:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FE:B9:E9:A8:39:C3:D7:29:19:F6:B0:B1:4C:0C:53:A7:E2:4E:1C
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232352e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:f0:08:a3:7f:ad:73:46:93:5c:aa:1e:a5:e7:e9:84:df:4f:
         93:60:6c:10:42:04:50:50:b1:75:c4:50:ce:0a:0f:4f:a7:1c:
         e3:81:e8:3b:2f:89:78:9d:88:39:8e:3d:61:02:08:1d:3f:ba:
         46:fd:09:be:5e:ba:06:e7:0b:da:34:99:03:22:30:98:c0:b0:
         f8:6d:4a:ad:25:65:4e:37:c0:a4:97:8f:c9:eb:e7:e3:7a:55:
         98:bc:ca:b3:51:1c:32:49:b0:63:26:bb:4d:f8:6e:41:9c:11:
         cf:4b:87:ad:77:a1:97:d2:30:3c:f4:0c:70:4e:e6:71:4f:d3:
         07:60:62:c5:51:cf:30:62:42:2f:ef:c5:5e:a2:07:18:2b:3f:
         b8:a1:ae:3a:86:63:f8:dd:87:bc:2b:9b:b5:aa:98:6d:eb:de:
         ab:a2:38:46:54:88:e7:ff:d6:88:25:1b:7e:33:8c:57:dc:10:
         0c:3a:c3:b7:31:b9:25:41:4c:72:b0:e2:74:3f:76:3f:ca:dc:
         0f:98:34:92:4d:b2:b2:ca:96:2d:f4:83:37:d2:8b:7f:3a:69:
         a0:a8:bb:63:c5:d8:71:9c:92:a8:a7:e4:50:24:51:e9:96:9e:
         99:86:76:a3:bd:23:1f:42:ad:f8:31:3b:39:57:b9:31:6d:66:
         f5:55:a9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:38:05 2024 by rpki-client on console-ams.rpki-client.org