Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232362e302f32342d3234203d3e203532343638.roa
File:                     3138372e3130382e3232362e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          assKXDcrKccspg9OvduFpfnYSsVM4/vNJjogHPdCOhU=
Subject key identifier:   53:EC:B3:24:B2:F7:FD:FC:8B:AE:63:79:F8:09:14:94:D8:32:D3:20
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       7C84BAD9D2BC55F2E6A76BC780DBF6F88408701D
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232362e302f32342d3234203d3e203532343638.roa
Signing time:             Fri 18 Oct 2024 20:31:29 +0000
ROA not before:           Fri 18 Oct 2024 20:26:29 +0000
ROA not after:            Fri 17 Oct 2025 20:31:29 +0000
asID:                     52468
IP address blocks:        187.108.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 11:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:84:ba:d9:d2:bc:55:f2:e6:a7:6b:c7:80:db:f6:f8:84:08:70:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Oct 18 20:26:29 2024 GMT
            Not After : Oct 17 20:31:29 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:52:29:84:db:dd:bf:4d:0c:39:e3:ac:79:90:
                    b3:f0:1b:ce:3a:a3:10:ff:9f:91:81:57:2e:51:5f:
                    81:35:7e:14:de:cc:51:f1:c4:d0:fc:87:f3:c1:ac:
                    b3:0a:48:85:14:c3:b7:e6:fc:3b:9c:e4:88:ca:37:
                    ac:08:6a:3d:cc:4b:67:65:b2:15:f5:a5:68:d7:e3:
                    68:48:41:73:a4:86:32:b8:aa:19:db:5a:b2:8d:ef:
                    8a:06:cd:35:5e:f1:fe:4b:8e:3e:27:32:16:76:e7:
                    03:6b:01:5b:df:68:3d:bd:5d:6e:82:5d:ed:8d:64:
                    51:d4:5b:3b:a7:6b:fa:3d:47:a1:67:71:c9:8b:dc:
                    7f:1b:a8:1b:8f:d0:9a:84:16:71:83:ef:bf:bd:78:
                    aa:32:7c:cd:82:07:7c:63:0a:cf:a8:70:78:4e:cc:
                    06:1d:00:37:f5:6f:c8:bb:80:01:ed:6d:e6:89:26:
                    4d:ab:1d:0a:50:63:79:be:b0:2e:d9:e9:9f:f4:8e:
                    95:4d:9b:81:aa:bd:47:89:dc:e2:52:fa:cc:43:24:
                    68:30:3a:2c:1f:8e:7c:18:6a:3c:b4:d2:dd:b9:f4:
                    eb:71:21:15:82:ca:b9:d2:2d:ad:0a:4c:60:97:18:
                    1c:0a:98:db:8d:2a:3e:86:61:fc:a6:8f:47:f3:ed:
                    54:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EC:B3:24:B2:F7:FD:FC:8B:AE:63:79:F8:09:14:94:D8:32:D3:20
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232362e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:4c:18:28:fa:02:c1:ff:c9:60:58:67:c2:0d:fb:39:fc:05:
         97:ed:be:bb:06:60:9f:1e:4a:99:dd:bb:ee:d9:c2:2e:b5:0d:
         f1:8e:af:cc:fe:5a:da:52:05:50:b8:b2:4e:c5:63:41:85:fd:
         67:23:59:fc:d8:eb:ac:6b:11:73:b7:15:52:c5:19:f4:81:0d:
         e1:98:42:9d:5a:c1:b0:04:3f:07:21:33:ec:5c:df:0c:26:d4:
         7d:b6:cf:48:a8:c0:79:56:88:9c:6f:fc:4b:e7:04:4c:fd:83:
         6a:c5:ff:5a:f3:f7:13:ed:be:ac:94:ca:7a:3f:99:d1:71:65:
         eb:4c:fa:8b:e5:75:94:30:a0:93:f9:e6:75:0e:2d:da:15:e2:
         19:4e:f2:e3:66:9b:f4:fd:3f:1e:e2:91:c7:24:80:79:8a:1f:
         06:93:f5:70:12:fc:56:8b:2e:c2:fe:17:26:bf:63:07:36:09:
         3a:a1:0b:84:d1:ad:bf:af:bc:23:05:3a:37:f4:73:ed:93:8d:
         b5:87:d4:4a:9f:da:bb:e1:12:c6:8f:ad:c4:78:0b:0f:e0:cb:
         8d:2a:a9:76:6e:b5:45:00:26:c0:2c:fd:5b:7b:e7:64:b2:49:
         6f:28:bf:7b:51:ec:41:86:6a:ba:cf:49:b6:36:a8:b9:7b:8d:
         09:ff:31:83
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUfIS62dK8VfLmp2vHgNv2+IQIcB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyNDhDODBFQTVDNEM1Nzc5QzEyOTcxMjFEMEJEOEQy
REMzNzlGMDAeFw0yNDEwMTgyMDI2MjlaFw0yNTEwMTcyMDMxMjlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTQ1MjI5ODREQkREQkY0RDBD
MzlFM0FDNzk5MEIzRjAxQkNFM0FBMzEwRkY5RjkxODE1NzJFNTE1RjgxMzU3RTE0
REVDQzUxRjFDNEQwRkM4N0YzQzFBQ0IzMEE0ODg1MTRDM0I3RTZGQzNCOUNFNDg4
Q0EzN0FDMDg2QTNEQ0M0QjY3NjVCMjE1RjVBNTY4RDdFMzY4NDg0MTczQTQ4NjMy
QjhBQTE5REI1QUIyOERFRjhBMDZDRDM1NUVGMUZFNEI4RTNFMjczMjE2NzZFNzAz
NkIwMTVCREY2ODNEQkQ1RDZFODI1REVEOEQ2NDUxRDQ1QjNCQTc2QkZBM0Q0N0Ex
Njc3MUM5OEJEQzdGMUJBODFCOEZEMDlBODQxNjcxODNFRkJGQkQ3OEFBMzI3Q0NE
ODIwNzdDNjMwQUNGQTg3MDc4NEVDQzA2MUQwMDM3RjU2RkM4QkI4MDAxRUQ2REU2
ODkyNjREQUIxRDBBNTA2Mzc5QkVCMDJFRDlFOTlGRjQ4RTk1NEQ5QjgxQUFCRDQ3
ODlEQ0UyNTJGQUNDNDMyNDY4MzAzQTJDMUY4RTdDMTg2QTNDQjREMkREQjlGNEVC
NzEyMTE1ODJDQUI5RDIyREFEMEE0QzYwOTcxODFDMEE5OERCOEQyQTNFODY2MUZD
QTY4RjQ3RjNFRDU0NDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApFIphNvdv00MOeOseZCz8BvOOqMQ/5+RgVcuUV+BNX4U3sxR8cTQ
/IfzwayzCkiFFMO35vw7nOSIyjesCGo9zEtnZbIV9aVo1+NoSEFzpIYyuKoZ21qy
je+KBs01XvH+S44+JzIWducDawFb32g9vV1ugl3tjWRR1Fs7p2v6PUehZ3HJi9x/
G6gbj9CahBZxg++/vXiqMnzNggd8YwrPqHB4TswGHQA39W/Iu4AB7W3miSZNqx0K
UGN5vrAu2emf9I6VTZuBqr1HidziUvrMQyRoMDosH458GGo8tNLdufTrcSEVgsq5
0i2tCkxglxgcCpjbjSo+hmH8po9H8+1UQwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FFPssySy9/38i65jefgJFJTYMtMgMB8GA1UdIwQYMBaAFK4kjIDqXExXecEpcSHQ
vY0tw3nwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzEvQUUyNDhDODBFQTVDNEM1
Nzc5QzEyOTcxMjFEMEJEOEQyREMzNzlGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BRTI0OEM4MEVBNUM0QzU3NzlDMTI5NzEyMUQwQkQ4RDJEQzM3
OUYwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8xLzMxMzgzNzJlMzEzMDM4MmUzMjMy
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
u2ziMA0GCSqGSIb3DQEBCwUAA4IBAQAOTBgo+gLB/8lgWGfCDfs5/AWX7b67BmCf
HkqZ3bvu2cIutQ3xjq/M/lraUgVQuLJOxWNBhf1nI1n82OusaxFztxVSxRn0gQ3h
mEKdWsGwBD8HITPsXN8MJtR9ts9IqMB5Voicb/xL5wRM/YNqxf9a8/cT7b6slMp6
P5nRcWXrTPqL5XWUMKCT+eZ1Di3aFeIZTvLjZpv0/T8e4pHHJIB5ih8Gk/VwEvxW
iy7C/hcmv2MHNgk6oQuE0a2/r7wjBTo39HPtk421h9RKn9q74RLGj63EeAsP4MuN
Kql2brVFACbALP1be+dksklvKL97UexBhmq6z0m2Nqi5e40J/zGD
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:38:05 2024 by rpki-client on console-ams.rpki-client.org