Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232372e302f32342d3234203d3e203532343638.roa
File:                     3138372e3130382e3232372e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          8e+L7EaE3OEj+lD+vnrM7YOw0egWsgV9q0hiJQ3Bvw0=
Subject key identifier:   56:76:5A:52:17:6D:47:64:3E:3E:75:7E:88:A7:0C:21:89:6E:CF:50
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       4E9D0B67F941E2D5286FD6E8B914ACFCBDA8626C
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232372e302f32342d3234203d3e203532343638.roa
Signing time:             Fri 18 Oct 2024 17:43:34 +0000
ROA not before:           Fri 18 Oct 2024 17:38:34 +0000
ROA not after:            Fri 17 Oct 2025 17:43:34 +0000
asID:                     52468
IP address blocks:        187.108.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 11:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:9d:0b:67:f9:41:e2:d5:28:6f:d6:e8:b9:14:ac:fc:bd:a8:62:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Oct 18 17:38:34 2024 GMT
            Not After : Oct 17 17:43:34 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c8:9f:ae:c9:e1:54:b3:8e:0f:c0:94:f0:54:
                    7f:2f:65:88:8c:1b:71:f7:72:48:1d:32:8e:a1:e4:
                    b5:4a:62:08:c4:67:0a:9a:ec:b3:0f:ce:52:e6:5c:
                    63:70:9a:f5:7c:73:39:70:e7:93:c5:28:65:2c:ba:
                    b4:50:18:3f:46:42:6e:a7:98:d3:5d:44:e1:01:78:
                    bf:8f:22:7f:10:21:da:8c:66:a7:22:91:50:d0:b4:
                    23:0f:fa:88:95:21:48:54:14:f6:e6:0d:50:66:00:
                    a2:8e:0d:82:8b:5c:45:48:b9:0f:c2:0c:06:d2:09:
                    d4:28:fd:9e:4b:92:e6:05:72:41:80:ef:ae:16:b2:
                    71:ae:9c:3f:1a:33:f0:e5:be:75:75:85:ef:7f:38:
                    06:67:71:e1:5a:ec:e1:9e:3c:45:11:f2:60:cb:55:
                    a0:83:2c:be:4d:f8:67:62:fb:6c:62:07:6c:ce:ae:
                    5b:1c:ae:a0:82:d1:0a:b9:c1:85:e8:cc:77:c4:60:
                    4f:45:00:bd:56:69:91:1f:fe:1f:62:ff:dc:de:c5:
                    c9:71:44:13:d6:12:0a:d5:96:98:af:65:6f:3f:71:
                    97:c3:f4:05:25:22:ca:4d:6a:5b:89:31:23:c8:69:
                    7c:bd:61:30:df:f0:d7:2b:d3:53:d0:58:bb:27:62:
                    b4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:76:5A:52:17:6D:47:64:3E:3E:75:7E:88:A7:0C:21:89:6E:CF:50
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232372e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:c4:ad:26:2a:d9:b1:1a:4b:1d:5c:67:0b:3e:1c:14:81:55:
         31:bf:5b:18:5e:c9:d6:cb:eb:7c:b3:cf:da:02:e9:85:16:d3:
         05:7d:3e:99:4f:8f:eb:95:0b:7e:f8:da:a6:14:ce:64:b2:9b:
         93:fd:4e:99:da:8f:c1:5d:31:77:d2:0f:e9:34:9b:e6:fc:b7:
         2e:c6:24:ac:c2:f5:de:d2:32:92:7f:f1:14:ee:16:db:13:21:
         47:2e:07:d0:85:d6:c4:72:ab:4e:60:99:cf:85:66:55:4f:31:
         84:3f:c7:ba:80:ae:1d:84:38:09:a7:a1:e2:a0:8a:ab:5f:a5:
         4a:58:d4:aa:67:c1:98:00:90:ca:04:c7:99:da:4f:7e:c5:d9:
         17:e7:50:10:d3:a8:c6:37:dc:c0:a6:34:6d:d4:e1:81:a9:2c:
         2f:6e:01:c8:4f:03:ca:a7:8d:36:e9:e8:59:4e:27:5d:06:f6:
         82:d6:20:3d:77:ba:36:89:3d:41:95:4f:c5:d6:6a:0b:9c:aa:
         8f:04:27:99:8c:86:2c:4a:f8:6f:cb:53:1b:56:29:23:7f:49:
         78:9f:ae:f8:88:83:d7:ae:0f:5e:8c:d5:50:46:88:2d:1f:03:
         1b:b3:ec:54:6a:74:ef:db:9e:ed:ef:2e:e4:9b:a8:69:58:80:
         d8:e1:29:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:21 2024 by rpki-client on console-fra.rpki-client.org