Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232382e302f32322d3232203d3e203532343638.roa
File:                     3138372e3130382e3232382e302f32322d3232203d3e203532343638.roa (raw, json)
Hash identifier:          Cgl26ZumYGS05jTkwSibe/yTlDIXDaXxQBoyKOrnbN4=
Subject key identifier:   56:E2:5A:BB:5F:23:EA:DF:1D:1B:4A:D8:8E:D7:5E:ED:99:4E:E5:26
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       34839C5205FCF6ECA833ED59922832F8F5309AC5
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232382e302f32322d3232203d3e203532343638.roa
Signing time:             Thu 06 Jun 2024 19:53:00 +0000
ROA not before:           Thu 06 Jun 2024 19:48:00 +0000
ROA not after:            Thu 05 Jun 2025 19:53:00 +0000
asID:                     52468
IP address blocks:        187.108.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 12:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:83:9c:52:05:fc:f6:ec:a8:33:ed:59:92:28:32:f8:f5:30:9a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jun  6 19:48:00 2024 GMT
            Not After : Jun  5 19:53:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2f:4e:96:ec:c4:8b:98:4e:bc:83:c5:c4:43:
                    18:7f:db:7f:c3:8d:4c:2d:37:e3:d4:a2:d9:f6:91:
                    8f:94:41:ce:ac:2e:81:e3:a7:39:89:6e:a7:d1:0f:
                    f6:6e:ea:4a:9e:18:98:37:7c:44:4a:04:f3:ca:42:
                    8b:23:77:a6:f5:1f:0f:25:27:72:dd:6f:dc:cf:8b:
                    07:a6:89:be:c5:c6:79:a1:90:48:63:ad:4e:7e:70:
                    79:11:87:9b:f5:96:21:31:d2:95:fe:8c:fb:13:4a:
                    c6:47:86:fa:74:cf:91:3d:64:bf:e6:2d:52:63:5d:
                    e0:3c:0b:2c:f1:c5:52:6c:c6:e4:20:25:ec:ae:26:
                    e3:92:3a:1c:ed:a5:91:ec:18:e0:b2:6c:92:4c:78:
                    2a:dd:ff:48:8a:ec:af:36:2e:93:d3:9b:75:41:a3:
                    08:22:b1:a2:a1:ae:ef:6f:a7:e3:33:ef:5d:9e:2d:
                    a4:21:89:fa:79:1f:c4:3e:18:4f:8c:6d:27:b5:ad:
                    07:d8:1e:17:49:bb:6c:8a:b7:b1:d1:6d:49:88:c6:
                    61:52:bb:73:f9:b8:2b:8a:55:19:d3:4e:39:63:86:
                    39:7e:8c:ae:ba:b7:9a:98:b9:80:e2:e8:33:20:b7:
                    d1:56:76:da:3b:56:55:9a:25:f1:ac:55:85:7a:5a:
                    59:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E2:5A:BB:5F:23:EA:DF:1D:1B:4A:D8:8E:D7:5E:ED:99:4E:E5:26
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232382e302f32322d3232203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:5e:4a:97:1f:f0:0b:5f:7a:ba:49:c9:0e:08:48:47:29:57:
         cf:7f:81:dc:ec:fa:dc:ad:57:56:73:34:0a:40:53:7b:a6:09:
         03:cf:52:9b:c4:f2:4c:96:31:91:dd:75:98:29:f5:eb:59:69:
         5b:18:37:5a:f1:a7:68:83:70:2f:c3:6c:e4:0b:02:85:ce:a0:
         6f:86:1a:a5:61:ef:22:4c:73:db:96:c5:3e:eb:53:73:c5:61:
         41:23:27:f0:42:99:48:c0:b1:32:13:11:fa:26:12:8a:25:93:
         7e:ac:19:c6:28:9b:aa:b7:91:d0:43:65:b9:8e:53:28:d4:c1:
         36:35:f0:ed:a7:24:44:ed:c8:82:b2:6e:8e:57:26:64:20:e1:
         9e:d9:23:9a:a6:81:00:78:c8:8c:cc:9f:e5:59:ed:a4:2a:41:
         3a:9f:aa:e7:2e:79:f1:e1:7f:87:bd:72:8c:ed:08:15:fc:6c:
         99:2d:71:4f:a1:d5:d7:df:55:3f:bb:d3:4d:b1:8a:f0:7e:45:
         24:04:8b:8d:ae:b8:7a:25:f2:69:1f:9a:4c:52:12:26:11:59:
         51:be:5b:af:ff:24:d8:fc:96:56:d9:98:71:e5:b7:f4:ac:2d:
         83:0a:b2:fc:a2:69:3c:1d:6c:a7:2d:c5:83:6e:ec:e6:ed:c0:
         12:25:41:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 12:35:55 2024 by rpki-client on console-fra.rpki-client.org