Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232362e302f32332d3233203d3e203532343638.roa
File:                     3138372e3130382e3232362e302f32332d3233203d3e203532343638.roa (raw, json)
Hash identifier:          rvPSr4AIVUNoo2p4Gf2nE4lpmUTtbNkCHLdQlMxpQvE=
Subject key identifier:   2A:DC:36:EF:C7:57:19:4F:7E:99:56:66:69:09:B3:1E:38:50:93:13
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       32ACDAEA28CB8BBCFDF3253BBD8B0691F5E6613B
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232362e302f32332d3233203d3e203532343638.roa
Signing time:             Sat 19 Oct 2024 15:28:40 +0000
ROA not before:           Sat 19 Oct 2024 15:23:40 +0000
ROA not after:            Sat 18 Oct 2025 15:28:40 +0000
asID:                     52468
IP address blocks:        187.108.226.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 11:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ac:da:ea:28:cb:8b:bc:fd:f3:25:3b:bd:8b:06:91:f5:e6:61:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Oct 19 15:23:40 2024 GMT
            Not After : Oct 18 15:28:40 2025 GMT
        Subject: CN=3082010A0282010100AD4489CA276A60D1D65BF605BEC91C8E6153770ABF3719718C75B3FCB0C2A46D5A5C6838CC45246551670CC7D2D815E84354698A0E96BAE2274B5F3FC8F90ED0D804166CCD072C39592D2F06300AA38FADFA27500E8731038CA0B796F9641DB165551123F1ACC00867CBD75F3869441670F20CAA45DE0FEBD1B85F3B612F0D5826CA799E4396F89F89E33E3768CCFAE412B62FA6949CD5C84A6871A7AD5D29F4F4D9122775A3DD84720C4A10EE422C3511327D4DD73778364AE9338DB98AFB6C9055985E39C2DED51788E207AB953D19106B5D385B11C2159EE1BB0CB676D1AB1C3A0E7AA09180C4B2EDD222E68FDADFA5E1732AF18E54067EA0A74B27FC797D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:44:89:ca:27:6a:60:d1:d6:5b:f6:05:be:c9:
                    1c:8e:61:53:77:0a:bf:37:19:71:8c:75:b3:fc:b0:
                    c2:a4:6d:5a:5c:68:38:cc:45:24:65:51:67:0c:c7:
                    d2:d8:15:e8:43:54:69:8a:0e:96:ba:e2:27:4b:5f:
                    3f:c8:f9:0e:d0:d8:04:16:6c:cd:07:2c:39:59:2d:
                    2f:06:30:0a:a3:8f:ad:fa:27:50:0e:87:31:03:8c:
                    a0:b7:96:f9:64:1d:b1:65:55:11:23:f1:ac:c0:08:
                    67:cb:d7:5f:38:69:44:16:70:f2:0c:aa:45:de:0f:
                    eb:d1:b8:5f:3b:61:2f:0d:58:26:ca:79:9e:43:96:
                    f8:9f:89:e3:3e:37:68:cc:fa:e4:12:b6:2f:a6:94:
                    9c:d5:c8:4a:68:71:a7:ad:5d:29:f4:f4:d9:12:27:
                    75:a3:dd:84:72:0c:4a:10:ee:42:2c:35:11:32:7d:
                    4d:d7:37:78:36:4a:e9:33:8d:b9:8a:fb:6c:90:55:
                    98:5e:39:c2:de:d5:17:88:e2:07:ab:95:3d:19:10:
                    6b:5d:38:5b:11:c2:15:9e:e1:bb:0c:b6:76:d1:ab:
                    1c:3a:0e:7a:a0:91:80:c4:b2:ed:d2:22:e6:8f:da:
                    df:a5:e1:73:2a:f1:8e:54:06:7e:a0:a7:4b:27:fc:
                    79:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DC:36:EF:C7:57:19:4F:7E:99:56:66:69:09:B3:1E:38:50:93:13
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232362e302f32332d3233203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:50:81:73:09:7f:c7:da:47:ee:0b:4c:39:75:7e:0f:fd:08:
         eb:bd:85:c7:fc:be:4d:ff:30:18:ed:2d:8b:60:93:17:35:8a:
         a9:80:ae:a4:8d:ec:d4:86:ad:ea:a1:34:6f:49:c0:71:ea:86:
         73:86:38:34:cd:a4:8a:e9:f3:34:06:54:3c:55:b1:d1:d0:8d:
         99:7e:51:c9:83:98:43:66:47:5c:b1:09:83:c0:33:e3:48:d5:
         ee:35:90:36:d4:5b:10:26:a7:7f:90:64:3a:51:a7:c9:21:cf:
         b6:cc:6a:47:8f:13:27:f7:69:d7:a3:d4:40:06:7d:5d:b9:d1:
         3b:e9:7d:d0:0a:da:4e:83:88:05:be:44:74:26:65:64:51:13:
         95:00:52:b4:10:d8:30:f9:8a:ef:a0:4a:f1:20:60:73:bf:a3:
         d2:f2:75:e7:0a:6b:48:01:5b:ca:ec:13:ed:40:ea:88:d6:b4:
         b3:12:df:e4:2f:ea:78:69:59:01:9b:2b:be:40:e4:b2:49:4e:
         cc:ce:15:8b:7e:9f:dd:34:d1:be:1f:e8:1b:ee:90:35:f6:db:
         a9:2a:2e:1c:17:26:6a:4d:06:d5:a0:5a:ce:ee:bc:9a:ad:de:
         92:8f:a2:ab:35:71:45:70:25:a2:77:eb:74:5b:29:82:a9:4a:
         20:d4:17:a3
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUMqza6ijLi7z98yU7vYsGkfXmYTswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyNDhDODBFQTVDNEM1Nzc5QzEyOTcxMjFEMEJEOEQy
REMzNzlGMDAeFw0yNDEwMTkxNTIzNDBaFw0yNTEwMTgxNTI4NDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUQ0NDg5Q0EyNzZBNjBEMUQ2
NUJGNjA1QkVDOTFDOEU2MTUzNzcwQUJGMzcxOTcxOEM3NUIzRkNCMEMyQTQ2RDVB
NUM2ODM4Q0M0NTI0NjU1MTY3MENDN0QyRDgxNUU4NDM1NDY5OEEwRTk2QkFFMjI3
NEI1RjNGQzhGOTBFRDBEODA0MTY2Q0NEMDcyQzM5NTkyRDJGMDYzMDBBQTM4RkFE
RkEyNzUwMEU4NzMxMDM4Q0EwQjc5NkY5NjQxREIxNjU1NTExMjNGMUFDQzAwODY3
Q0JENzVGMzg2OTQ0MTY3MEYyMENBQTQ1REUwRkVCRDFCODVGM0I2MTJGMEQ1ODI2
Q0E3OTlFNDM5NkY4OUY4OUUzM0UzNzY4Q0NGQUU0MTJCNjJGQTY5NDlDRDVDODRB
Njg3MUE3QUQ1RDI5RjRGNEQ5MTIyNzc1QTNERDg0NzIwQzRBMTBFRTQyMkMzNTEx
MzI3RDRERDczNzc4MzY0QUU5MzM4REI5OEFGQjZDOTA1NTk4NUUzOUMyREVENTE3
ODhFMjA3QUI5NTNEMTkxMDZCNUQzODVCMTFDMjE1OUVFMUJCMENCNjc2RDFBQjFD
M0EwRTdBQTA5MTgwQzRCMkVERDIyMkU2OEZEQURGQTVFMTczMkFGMThFNTQwNjdF
QTBBNzRCMjdGQzc5N0QwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArUSJyidqYNHWW/YFvskcjmFTdwq/NxlxjHWz/LDCpG1aXGg4zEUk
ZVFnDMfS2BXoQ1Rpig6WuuInS18/yPkO0NgEFmzNByw5WS0vBjAKo4+t+idQDocx
A4ygt5b5ZB2xZVURI/GswAhny9dfOGlEFnDyDKpF3g/r0bhfO2EvDVgmynmeQ5b4
n4njPjdozPrkErYvppSc1chKaHGnrV0p9PTZEid1o92EcgxKEO5CLDURMn1N1zd4
NkrpM425ivtskFWYXjnC3tUXiOIHq5U9GRBrXThbEcIVnuG7DLZ20ascOg56oJGA
xLLt0iLmj9rfpeFzKvGOVAZ+oKdLJ/x5fQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FCrcNu/HVxlPfplWZmkJsx44UJMTMB8GA1UdIwQYMBaAFK4kjIDqXExXecEpcSHQ
vY0tw3nwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzEvQUUyNDhDODBFQTVDNEM1
Nzc5QzEyOTcxMjFEMEJEOEQyREMzNzlGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BRTI0OEM4MEVBNUM0QzU3NzlDMTI5NzEyMUQwQkQ4RDJEQzM3
OUYwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8xLzMxMzgzNzJlMzEzMDM4MmUzMjMy
MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
u2ziMA0GCSqGSIb3DQEBCwUAA4IBAQCLUIFzCX/H2kfuC0w5dX4P/QjrvYXH/L5N
/zAY7S2LYJMXNYqpgK6kjezUhq3qoTRvScBx6oZzhjg0zaSK6fM0BlQ8VbHR0I2Z
flHJg5hDZkdcsQmDwDPjSNXuNZA21FsQJqd/kGQ6UafJIc+2zGpHjxMn92nXo9RA
Bn1dudE76X3QCtpOg4gFvkR0JmVkUROVAFK0ENgw+YrvoErxIGBzv6PS8nXnCmtI
AVvK7BPtQOqI1rSzEt/kL+p4aVkBmyu+QOSySU7MzhWLfp/dNNG+H+gb7pA19tup
Ki4cFyZqTQbVoFrO7ryard6Sj6KrNXFFcCWid+t0WymCqUog1Bej
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:38:05 2024 by rpki-client on console-ams.rpki-client.org