Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232382e302f32322d3232203d3e203238313234.roa
File:                     3138372e3130382e3232382e302f32322d3232203d3e203238313234.roa (raw, json)
Hash identifier:          wnTNTJCl+dTcU3FLOtlPsOXMhMBbSZcfdHMttsa9ct0=
Subject key identifier:   6B:49:76:9F:F6:85:03:F3:0B:37:3F:4A:D7:BD:E0:66:08:FF:B5:C8
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       14817D32C22D1361CDA8BAF58E08DFA259342D10
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232382e302f32322d3232203d3e203238313234.roa
Signing time:             Wed 12 Feb 2025 00:54:12 +0000
ROA not before:           Wed 12 Feb 2025 00:49:12 +0000
ROA not after:            Wed 11 Feb 2026 00:54:12 +0000
asID:                     28124
IP address blocks:        187.108.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 23:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:81:7d:32:c2:2d:13:61:cd:a8:ba:f5:8e:08:df:a2:59:34:2d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Feb 12 00:49:12 2025 GMT
            Not After : Feb 11 00:54:12 2026 GMT
        Subject: CN=3082010A0282010100D28A4F0E9FD42CF8EEE7DE5572E2D8819E7CC1C2A7D1104D6254C32E554E3E6CF51A70D575E7251A6DD4D65F408339E65E4BE779DE84DB61E8F850F900CE664FB3452EA9F38DF6BF4267AC2E36422876FE001F7040DE89C6271488F499605C30F4390AADC5915B1A7A7A6C703E17FBC78C460CD145C99AE57AE982F510FF7C6ED63006C8C006C90959745F69D1A68253B976B4F515159C1E5C208A3EFE9F17F408C633C86446EE563EE402E694610385CAF7D67CD4F74CD8A34E08BC77B57647E4928C080E9B07471D33BD20216099EB399B1949C464B88FA1DEFAC0BB51EE2B00F7FC659A9896C9B9E67A6B9200E0C432B24F78DCDFFEF713ADE159A1D182CD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8a:4f:0e:9f:d4:2c:f8:ee:e7:de:55:72:e2:
                    d8:81:9e:7c:c1:c2:a7:d1:10:4d:62:54:c3:2e:55:
                    4e:3e:6c:f5:1a:70:d5:75:e7:25:1a:6d:d4:d6:5f:
                    40:83:39:e6:5e:4b:e7:79:de:84:db:61:e8:f8:50:
                    f9:00:ce:66:4f:b3:45:2e:a9:f3:8d:f6:bf:42:67:
                    ac:2e:36:42:28:76:fe:00:1f:70:40:de:89:c6:27:
                    14:88:f4:99:60:5c:30:f4:39:0a:ad:c5:91:5b:1a:
                    7a:7a:6c:70:3e:17:fb:c7:8c:46:0c:d1:45:c9:9a:
                    e5:7a:e9:82:f5:10:ff:7c:6e:d6:30:06:c8:c0:06:
                    c9:09:59:74:5f:69:d1:a6:82:53:b9:76:b4:f5:15:
                    15:9c:1e:5c:20:8a:3e:fe:9f:17:f4:08:c6:33:c8:
                    64:46:ee:56:3e:e4:02:e6:94:61:03:85:ca:f7:d6:
                    7c:d4:f7:4c:d8:a3:4e:08:bc:77:b5:76:47:e4:92:
                    8c:08:0e:9b:07:47:1d:33:bd:20:21:60:99:eb:39:
                    9b:19:49:c4:64:b8:8f:a1:de:fa:c0:bb:51:ee:2b:
                    00:f7:fc:65:9a:98:96:c9:b9:e6:7a:6b:92:00:e0:
                    c4:32:b2:4f:78:dc:df:fe:f7:13:ad:e1:59:a1:d1:
                    82:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:49:76:9F:F6:85:03:F3:0B:37:3F:4A:D7:BD:E0:66:08:FF:B5:C8
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232382e302f32322d3232203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:37:fa:3c:fe:a7:8a:81:ce:e8:fd:43:93:c1:c6:d5:d0:ca:
         88:32:dc:82:78:29:ea:0f:bf:a4:ce:7e:d7:ee:11:53:91:06:
         1f:1e:ad:38:c1:e9:ec:c0:ae:97:16:09:94:40:f2:a3:b7:7b:
         89:e3:e5:f2:7b:40:8f:a1:cb:6b:b3:99:e5:c6:05:19:19:af:
         39:dd:b3:44:24:55:7b:33:13:e0:5c:bf:3d:eb:74:c9:99:76:
         3c:2f:b8:93:d8:a5:a0:f8:cf:ff:d9:6e:21:17:fd:67:33:29:
         3c:41:eb:50:e8:77:d8:82:c3:4c:0a:40:de:96:a9:1b:74:0e:
         7b:83:37:c2:f7:ca:d4:2f:eb:92:9a:57:a1:c2:a8:5b:36:ef:
         2f:2a:59:fc:08:b2:e1:20:29:b6:8b:42:eb:e3:e4:7e:0f:52:
         fa:56:71:3c:4d:61:11:70:ed:84:e9:da:af:bf:1b:16:7c:9e:
         04:dd:4b:1f:b7:78:3f:20:08:cb:ed:30:eb:a0:2d:7f:9e:30:
         64:28:7d:37:34:b6:d4:29:0f:b5:bc:a9:cd:bd:2f:2f:27:2e:
         ba:06:f6:65:4b:04:3a:d7:4a:24:a4:79:49:b8:37:f0:9f:0f:
         37:6a:1f:04:cf:c5:97:48:47:8a:54:f5:5b:0c:6b:fb:bc:9e:
         a8:3d:ed:19
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUFIF9MsItE2HNqLr1jgjfolk0LRAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyNDhDODBFQTVDNEM1Nzc5QzEyOTcxMjFEMEJEOEQy
REMzNzlGMDAeFw0yNTAyMTIwMDQ5MTJaFw0yNjAyMTEwMDU0MTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDI4QTRGMEU5RkQ0MkNGOEVF
RTdERTU1NzJFMkQ4ODE5RTdDQzFDMkE3RDExMDRENjI1NEMzMkU1NTRFM0U2Q0Y1
MUE3MEQ1NzVFNzI1MUE2REQ0RDY1RjQwODMzOUU2NUU0QkU3NzlERTg0REI2MUU4
Rjg1MEY5MDBDRTY2NEZCMzQ1MkVBOUYzOERGNkJGNDI2N0FDMkUzNjQyMjg3NkZF
MDAxRjcwNDBERTg5QzYyNzE0ODhGNDk5NjA1QzMwRjQzOTBBQURDNTkxNUIxQTdB
N0E2QzcwM0UxN0ZCQzc4QzQ2MENEMTQ1Qzk5QUU1N0FFOTgyRjUxMEZGN0M2RUQ2
MzAwNkM4QzAwNkM5MDk1OTc0NUY2OUQxQTY4MjUzQjk3NkI0RjUxNTE1OUMxRTVD
MjA4QTNFRkU5RjE3RjQwOEM2MzNDODY0NDZFRTU2M0VFNDAyRTY5NDYxMDM4NUNB
RjdENjdDRDRGNzRDRDhBMzRFMDhCQzc3QjU3NjQ3RTQ5MjhDMDgwRTlCMDc0NzFE
MzNCRDIwMjE2MDk5RUIzOTlCMTk0OUM0NjRCODhGQTFERUZBQzBCQjUxRUUyQjAw
RjdGQzY1OUE5ODk2QzlCOUU2N0E2QjkyMDBFMEM0MzJCMjRGNzhEQ0RGRkVGNzEz
QURFMTU5QTFEMTgyQ0QwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0opPDp/ULPju595VcuLYgZ58wcKn0RBNYlTDLlVOPmz1GnDVdecl
Gm3U1l9AgznmXkvned6E22Ho+FD5AM5mT7NFLqnzjfa/QmesLjZCKHb+AB9wQN6J
xicUiPSZYFww9DkKrcWRWxp6emxwPhf7x4xGDNFFyZrleumC9RD/fG7WMAbIwAbJ
CVl0X2nRpoJTuXa09RUVnB5cIIo+/p8X9AjGM8hkRu5WPuQC5pRhA4XK99Z81PdM
2KNOCLx3tXZH5JKMCA6bB0cdM70gIWCZ6zmbGUnEZLiPod76wLtR7isA9/xlmpiW
ybnmemuSAODEMrJPeNzf/vcTreFZodGCzQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FGtJdp/2hQPzCzc/Ste94GYI/7XIMB8GA1UdIwQYMBaAFK4kjIDqXExXecEpcSHQ
vY0tw3nwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzEvQUUyNDhDODBFQTVDNEM1
Nzc5QzEyOTcxMjFEMEJEOEQyREMzNzlGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BRTI0OEM4MEVBNUM0QzU3NzlDMTI5NzEyMUQwQkQ4RDJEQzM3
OUYwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8xLzMxMzgzNzJlMzEzMDM4MmUzMjMy
MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4MzEzMjM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
u2zkMA0GCSqGSIb3DQEBCwUAA4IBAQAON/o8/qeKgc7o/UOTwcbV0MqIMtyCeCnq
D7+kzn7X7hFTkQYfHq04wenswK6XFgmUQPKjt3uJ4+Xye0CPoctrs5nlxgUZGa85
3bNEJFV7MxPgXL8963TJmXY8L7iT2KWg+M//2W4hF/1nMyk8QetQ6HfYgsNMCkDe
lqkbdA57gzfC98rUL+uSmlehwqhbNu8vKln8CLLhICm2i0Lr4+R+D1L6VnE8TWER
cO2E6dqvvxsWfJ4E3Usft3g/IAjL7TDroC1/njBkKH03NLbUKQ+1vKnNvS8vJy66
BvZlSwQ610okpHlJuDfwnw83ah8Ez8WXSEeKVPVbDGv7vJ6oPe0Z
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:40:20 2025 by rpki-client