Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232372e302f32342d3234203d3e203533313038.roa
File:                     3138372e3130382e3232372e302f32342d3234203d3e203533313038.roa (raw, json)
Hash identifier:          E69rRDpg9/ru0vnd7lsid1ZTWA5v49U4eBxXnjBBDWc=
Subject key identifier:   32:D2:22:A1:1A:F2:E0:F2:44:82:DC:3D:48:E4:80:3A:F5:63:AD:FB
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       703299B3E1E342E7C96B6E74EEBF743A283B4FF6
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232372e302f32342d3234203d3e203533313038.roa
Signing time:             Thu 06 Jun 2024 19:53:01 +0000
ROA not before:           Thu 06 Jun 2024 19:48:01 +0000
ROA not after:            Thu 05 Jun 2025 19:53:01 +0000
asID:                     53108
IP address blocks:        187.108.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 17:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:32:99:b3:e1:e3:42:e7:c9:6b:6e:74:ee:bf:74:3a:28:3b:4f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jun  6 19:48:01 2024 GMT
            Not After : Jun  5 19:53:01 2025 GMT
        Subject: CN=3082010A0282010100F242426D446D4A6558465874830201EEB8194E9ED4D23F622BE16A9D2E27BD5A1C097669B35E980F9930E544B96B35873F46868FBF1D18E64C2D03A8B65FECFCC0D073F08343CD4689830D766B161CE3795BAB7D6F4AAC1EB7B1AE3508E386BC9645532A1375ED4CDAAE5E30AC6EE8EA243A3380479E7A29558E30A94BAE9AAC018C484F386E4C70E48862C7D0DC8B120600D7DFFAFF4F655BCB0656ACD17331E1BC52EC5BDF29CC5D6C420250EEDAFA170D637C421449E5EB5B7904B4F4A37EE71493925CD60C6AB6C3011E921EC2BA9DF900D0E41BE29E9F2A39A7D0437C4BF70A1C21DB0305FAC444A51A83B0FBA2F567F15FA76577E5002D69D0021B48750203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:42:42:6d:44:6d:4a:65:58:46:58:74:83:02:
                    01:ee:b8:19:4e:9e:d4:d2:3f:62:2b:e1:6a:9d:2e:
                    27:bd:5a:1c:09:76:69:b3:5e:98:0f:99:30:e5:44:
                    b9:6b:35:87:3f:46:86:8f:bf:1d:18:e6:4c:2d:03:
                    a8:b6:5f:ec:fc:c0:d0:73:f0:83:43:cd:46:89:83:
                    0d:76:6b:16:1c:e3:79:5b:ab:7d:6f:4a:ac:1e:b7:
                    b1:ae:35:08:e3:86:bc:96:45:53:2a:13:75:ed:4c:
                    da:ae:5e:30:ac:6e:e8:ea:24:3a:33:80:47:9e:7a:
                    29:55:8e:30:a9:4b:ae:9a:ac:01:8c:48:4f:38:6e:
                    4c:70:e4:88:62:c7:d0:dc:8b:12:06:00:d7:df:fa:
                    ff:4f:65:5b:cb:06:56:ac:d1:73:31:e1:bc:52:ec:
                    5b:df:29:cc:5d:6c:42:02:50:ee:da:fa:17:0d:63:
                    7c:42:14:49:e5:eb:5b:79:04:b4:f4:a3:7e:e7:14:
                    93:92:5c:d6:0c:6a:b6:c3:01:1e:92:1e:c2:ba:9d:
                    f9:00:d0:e4:1b:e2:9e:9f:2a:39:a7:d0:43:7c:4b:
                    f7:0a:1c:21:db:03:05:fa:c4:44:a5:1a:83:b0:fb:
                    a2:f5:67:f1:5f:a7:65:77:e5:00:2d:69:d0:02:1b:
                    48:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D2:22:A1:1A:F2:E0:F2:44:82:DC:3D:48:E4:80:3A:F5:63:AD:FB
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232372e302f32342d3234203d3e203533313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:9a:97:c7:7f:63:e4:55:46:34:47:08:a2:04:27:55:1a:3a:
         40:ec:7f:cd:dc:53:ac:8b:57:7a:76:b7:54:35:f3:f0:46:0a:
         c8:30:a2:3a:b1:57:9e:c6:47:e9:71:1f:97:ce:5c:6c:7f:9e:
         99:ae:db:ad:02:41:87:4f:33:9c:3b:09:26:a6:67:2b:d2:4b:
         78:a1:a5:90:90:ba:5a:2c:41:d2:17:6a:28:3f:b0:b5:d4:ea:
         ef:c9:36:62:1e:82:9c:7f:00:24:c6:2e:7a:e0:c3:4d:9d:79:
         34:b6:60:a1:a9:9c:af:79:5a:da:2f:2f:cb:7c:23:fd:83:8d:
         8c:0c:75:bd:8c:e3:da:6d:10:79:db:76:ec:d3:e0:85:8a:c8:
         e0:9c:4a:31:f2:f4:90:6a:47:1c:c6:a7:e6:cb:de:fd:04:43:
         23:d6:69:50:f9:3e:1c:0d:d4:f0:ec:a1:1f:2a:60:e8:bb:1c:
         f2:69:b7:a6:30:a3:7d:8d:37:41:14:63:9e:f9:89:9a:89:60:
         2e:d2:9b:6d:c8:ac:d0:e2:13:92:45:7b:2b:e2:dc:f1:60:20:
         bb:64:69:0a:83:8f:94:ea:94:26:f4:7d:d6:7e:71:84:75:b9:
         6d:a4:5d:63:5b:df:be:40:46:cc:24:39:e7:03:bd:d9:bb:96:
         34:22:04:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 18:56:44 2024 by rpki-client on console-ams.rpki-client.org