Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232352e302f32342d3234203d3e203533313038.roa
File:                     3138372e3130382e3232352e302f32342d3234203d3e203533313038.roa (raw, json)
Hash identifier:          46RNGwD3IekcRkCyVVFSSyxDkD0paGAXmtQKY+mi4/g=
Subject key identifier:   11:94:84:FE:89:26:DC:AF:14:7B:F8:FF:F5:75:CA:89:98:CF:99:9D
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       21E4C78D33CF0C889D3D2301C4918A951B5F8E55
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232352e302f32342d3234203d3e203533313038.roa
Signing time:             Thu 06 Jun 2024 19:53:03 +0000
ROA not before:           Thu 06 Jun 2024 19:48:03 +0000
ROA not after:            Thu 05 Jun 2025 19:53:03 +0000
asID:                     53108
IP address blocks:        187.108.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 03:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e4:c7:8d:33:cf:0c:88:9d:3d:23:01:c4:91:8a:95:1b:5f:8e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jun  6 19:48:03 2024 GMT
            Not After : Jun  5 19:53:03 2025 GMT
        Subject: CN=3082010A02820101009EB88777DE5AC53BD21DC773EF2EEDFD82B901BC36846FEF03E2D03C206ACE68A64A1F762B98BC9A3EC6E12B048C0D70496032C9E6E8770DE7A94E40F392E3E42F0D3B247AD276FF1E5B636BF5DFCF81ABDCC6FB822AF14611FB0EBDA0D1AC2B17126C40CB075B6E649BFDB477BACD6B34C8EE087C53F7E86D6E9971E7179B867135AD81FC2235BB0BF2C5472C4CC93143818469ADDCE53C483AFF8EC2748907A82A65F3D1B665EF65C491B2F3EB04F4D6D63844DFDAA503586FCE7EAC6443490EB950927884B95FC3EE1D32838B1D0298849739EC62D536C4E953DB9DC683C7C24F81BD6ADF3DDE1C0E4A58B0DD0D646075EC280C18B9DD53B11B686A614EE70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b8:87:77:de:5a:c5:3b:d2:1d:c7:73:ef:2e:
                    ed:fd:82:b9:01:bc:36:84:6f:ef:03:e2:d0:3c:20:
                    6a:ce:68:a6:4a:1f:76:2b:98:bc:9a:3e:c6:e1:2b:
                    04:8c:0d:70:49:60:32:c9:e6:e8:77:0d:e7:a9:4e:
                    40:f3:92:e3:e4:2f:0d:3b:24:7a:d2:76:ff:1e:5b:
                    63:6b:f5:df:cf:81:ab:dc:c6:fb:82:2a:f1:46:11:
                    fb:0e:bd:a0:d1:ac:2b:17:12:6c:40:cb:07:5b:6e:
                    64:9b:fd:b4:77:ba:cd:6b:34:c8:ee:08:7c:53:f7:
                    e8:6d:6e:99:71:e7:17:9b:86:71:35:ad:81:fc:22:
                    35:bb:0b:f2:c5:47:2c:4c:c9:31:43:81:84:69:ad:
                    dc:e5:3c:48:3a:ff:8e:c2:74:89:07:a8:2a:65:f3:
                    d1:b6:65:ef:65:c4:91:b2:f3:eb:04:f4:d6:d6:38:
                    44:df:da:a5:03:58:6f:ce:7e:ac:64:43:49:0e:b9:
                    50:92:78:84:b9:5f:c3:ee:1d:32:83:8b:1d:02:98:
                    84:97:39:ec:62:d5:36:c4:e9:53:db:9d:c6:83:c7:
                    c2:4f:81:bd:6a:df:3d:de:1c:0e:4a:58:b0:dd:0d:
                    64:60:75:ec:28:0c:18:b9:dd:53:b1:1b:68:6a:61:
                    4e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:94:84:FE:89:26:DC:AF:14:7B:F8:FF:F5:75:CA:89:98:CF:99:9D
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232352e302f32342d3234203d3e203533313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:26:2d:9a:4d:47:81:d5:6f:83:c3:ff:79:7c:9d:a3:5c:e0:
         61:b5:ba:c3:ae:86:69:fe:8a:bc:2e:4d:c0:16:e3:21:14:b9:
         fd:98:bd:5d:31:4c:be:10:40:3a:92:72:7f:17:c4:58:72:e3:
         53:b5:b4:79:c7:cd:b1:cd:ce:e7:c6:0a:a7:6a:77:c6:44:a1:
         4a:3b:4e:08:04:55:35:de:0c:a3:83:de:f3:98:25:30:a7:f5:
         23:7e:fa:ce:d1:2b:0d:c6:1f:2d:9b:d3:e4:cf:73:18:76:dd:
         d4:cb:00:f5:83:51:17:8b:3b:b8:aa:9e:35:46:e8:b9:8b:ce:
         c3:4b:28:58:69:cf:4c:5f:d5:96:cd:f8:6d:6b:76:27:7c:ac:
         bb:18:50:79:f6:18:a1:df:38:56:1d:0b:44:fb:bd:37:60:d8:
         48:9a:37:3e:0b:4a:e6:5b:9a:b6:91:04:7c:8f:79:07:ef:d5:
         96:70:27:a6:c0:d6:4f:f0:27:73:ef:79:ff:a9:83:55:6f:26:
         d7:82:11:e7:71:be:24:46:3d:9e:7e:2c:4c:de:46:db:88:25:
         ca:97:4d:ce:46:a4:dc:cd:cf:1d:ce:1b:14:3b:e4:ff:c6:9b:
         79:ad:35:8d:74:d9:4b:40:75:10:b1:eb:35:f9:92:11:a3:e4:
         8c:e0:78:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 06:20:57 2024 by rpki-client on console-fra.rpki-client.org