Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232382e302f32332d3233203d3e203532343638.roa
File:                     3138372e3130382e3232382e302f32332d3233203d3e203532343638.roa (raw, json)
Hash identifier:          EZ+nmquMzQgSJSOf1bd57ncZ/W17l8SUc2P4+llzWzE=
Subject key identifier:   0B:38:AE:01:FF:7C:AD:10:F6:29:88:2C:DD:81:EA:F5:D0:4D:16:B6
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       4D3210804A3A87F1863B030B8791A880580B5D04
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232382e302f32332d3233203d3e203532343638.roa
Signing time:             Sat 19 Oct 2024 15:28:50 +0000
ROA not before:           Sat 19 Oct 2024 15:23:50 +0000
ROA not after:            Sat 18 Oct 2025 15:28:50 +0000
asID:                     52468
IP address blocks:        187.108.228.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Nov 2024 18:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:32:10:80:4a:3a:87:f1:86:3b:03:0b:87:91:a8:80:58:0b:5d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Oct 19 15:23:50 2024 GMT
            Not After : Oct 18 15:28:50 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8c:85:69:e2:79:10:19:73:ba:02:af:94:c3:
                    b9:0d:3d:47:47:ee:0d:2b:bf:62:dd:9d:45:b1:96:
                    1b:e9:15:aa:9c:d7:ad:7c:19:db:a0:8a:c6:80:98:
                    74:83:ac:64:29:ab:a7:0b:77:50:18:ec:e3:6b:61:
                    6b:7d:0f:46:ef:20:4b:b6:85:18:3a:5b:1d:f0:81:
                    d9:38:c0:27:80:6f:3a:45:f1:53:e6:fe:02:5d:67:
                    cd:c9:4c:af:46:d8:9b:45:6f:ec:ab:4c:99:60:c6:
                    e7:12:43:c1:cf:40:16:03:4d:ba:aa:e9:9a:77:c2:
                    8e:5a:1a:58:ff:49:66:e1:ae:6d:51:ed:8e:9b:46:
                    9a:fc:b3:65:4d:31:f8:6e:96:fe:4d:21:9c:3f:64:
                    24:06:5d:8f:e7:0d:61:59:3b:a2:6c:28:aa:3d:b6:
                    fd:31:c3:47:ef:57:89:86:77:95:2a:b2:c8:4e:15:
                    9f:88:f1:f5:5e:33:72:57:98:91:47:a0:90:30:27:
                    2e:f8:53:1c:89:57:4d:2f:42:e0:55:3b:27:6a:83:
                    e5:55:ea:94:ab:dc:74:2c:9e:fb:a2:fd:93:e5:c9:
                    f8:13:9b:c6:8d:21:93:f8:a4:09:c2:9e:aa:1c:f9:
                    e4:c2:4f:33:b8:d2:42:cd:63:da:12:81:c6:ea:8b:
                    31:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:38:AE:01:FF:7C:AD:10:F6:29:88:2C:DD:81:EA:F5:D0:4D:16:B6
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232382e302f32332d3233203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:9a:7e:bc:05:d7:36:8f:ab:31:9d:b5:cf:3f:37:44:51:c0:
         2f:96:e7:78:e0:a0:58:40:3b:9c:3c:ca:cc:9b:9a:56:c8:b6:
         f7:c0:26:69:b2:d8:3d:7f:d2:12:6c:4e:a3:bb:a9:ba:97:5b:
         97:78:ee:fd:31:4e:e9:1f:52:32:10:85:87:ea:7e:17:a7:1b:
         24:59:9f:fb:f6:68:43:6c:23:b9:e6:f1:9a:4e:9c:f8:28:f0:
         65:fd:02:0e:d9:f5:41:10:c3:04:7a:95:01:33:21:0c:07:1d:
         c2:1b:ef:52:dc:f4:2f:68:e3:79:89:2c:fd:67:79:7c:ae:b8:
         23:43:39:4a:a3:a2:a0:56:4f:a9:9f:41:74:66:7b:58:c5:f0:
         e8:13:31:39:1e:ee:37:f8:38:ab:2c:0b:6f:11:23:61:e2:a5:
         51:d6:63:62:57:4c:9c:c3:12:2f:8f:4a:0f:99:1e:7c:4f:f3:
         33:0f:dc:6d:41:b0:bb:d9:45:26:4d:dd:d8:58:84:18:35:7c:
         b5:d7:b2:9d:42:53:e7:be:89:ec:e0:e3:2c:e1:c4:c5:87:d5:
         b3:97:08:a0:36:a5:ea:b2:8f:6e:f5:33:d7:e3:55:a1:7c:c4:
         f4:25:90:3f:b5:9a:56:9c:99:37:98:a4:81:58:bd:44:78:22:
         44:93:1b:57
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUTTIQgEo6h/GGOwMLh5GogFgLXQQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyNDhDODBFQTVDNEM1Nzc5QzEyOTcxMjFEMEJEOEQy
REMzNzlGMDAeFw0yNDEwMTkxNTIzNTBaFw0yNTEwMTgxNTI4NTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzk4Qzg1NjlFMjc5MTAxOTcz
QkEwMkFGOTRDM0I5MEQzRDQ3NDdFRTBEMkJCRjYyREQ5RDQ1QjE5NjFCRTkxNUFB
OUNEN0FEN0MxOURCQTA4QUM2ODA5ODc0ODNBQzY0MjlBQkE3MEI3NzUwMThFQ0Uz
NkI2MTZCN0QwRjQ2RUYyMDRCQjY4NTE4M0E1QjFERjA4MUQ5MzhDMDI3ODA2RjNB
NDVGMTUzRTZGRTAyNUQ2N0NEQzk0Q0FGNDZEODlCNDU2RkVDQUI0Qzk5NjBDNkU3
MTI0M0MxQ0Y0MDE2MDM0REJBQUFFOTlBNzdDMjhFNUExQTU4RkY0OTY2RTFBRTZE
NTFFRDhFOUI0NjlBRkNCMzY1NEQzMUY4NkU5NkZFNEQyMTlDM0Y2NDI0MDY1RDhG
RTcwRDYxNTkzQkEyNkMyOEFBM0RCNkZEMzFDMzQ3RUY1Nzg5ODY3Nzk1MkFCMkM4
NEUxNTlGODhGMUY1NUUzMzcyNTc5ODkxNDdBMDkwMzAyNzJFRjg1MzFDODk1NzRE
MkY0MkUwNTUzQjI3NkE4M0U1NTVFQTk0QUJEQzc0MkM5RUZCQTJGRDkzRTVDOUY4
MTM5QkM2OEQyMTkzRjhBNDA5QzI5RUFBMUNGOUU0QzI0RjMzQjhEMjQyQ0Q2M0RB
MTI4MUM2RUE4QjMxRDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyYyFaeJ5EBlzugKvlMO5DT1HR+4NK79i3Z1FsZYb6RWqnNetfBnb
oIrGgJh0g6xkKaunC3dQGOzja2FrfQ9G7yBLtoUYOlsd8IHZOMAngG86RfFT5v4C
XWfNyUyvRtibRW/sq0yZYMbnEkPBz0AWA026qumad8KOWhpY/0lm4a5tUe2Om0aa
/LNlTTH4bpb+TSGcP2QkBl2P5w1hWTuibCiqPbb9McNH71eJhneVKrLIThWfiPH1
XjNyV5iRR6CQMCcu+FMciVdNL0LgVTsnaoPlVeqUq9x0LJ77ov2T5cn4E5vGjSGT
+KQJwp6qHPnkwk8zuNJCzWPaEoHG6osx0wIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FAs4rgH/fK0Q9imILN2B6vXQTRa2MB8GA1UdIwQYMBaAFK4kjIDqXExXecEpcSHQ
vY0tw3nwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzEvQUUyNDhDODBFQTVDNEM1
Nzc5QzEyOTcxMjFEMEJEOEQyREMzNzlGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BRTI0OEM4MEVBNUM0QzU3NzlDMTI5NzEyMUQwQkQ4RDJEQzM3
OUYwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8xLzMxMzgzNzJlMzEzMDM4MmUzMjMy
MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
u2zkMA0GCSqGSIb3DQEBCwUAA4IBAQA6mn68Bdc2j6sxnbXPPzdEUcAvlud44KBY
QDucPMrMm5pWyLb3wCZpstg9f9ISbE6ju6m6l1uXeO79MU7pH1IyEIWH6n4Xpxsk
WZ/79mhDbCO55vGaTpz4KPBl/QIO2fVBEMMEepUBMyEMBx3CG+9S3PQvaON5iSz9
Z3l8rrgjQzlKo6KgVk+pn0F0ZntYxfDoEzE5Hu43+DirLAtvESNh4qVR1mNiV0yc
wxIvj0oPmR58T/MzD9xtQbC72UUmTd3YWIQYNXy117KdQlPnvons4OMs4cTFh9Wz
lwigNqXqso9u9TPX41WhfMT0JZA/tZpWnJk3mKSBWL1EeCJEkxtX
-----END CERTIFICATE-----
Generated at Sun Nov 24 20:58:00 2024 by rpki-client on console-fra.rpki-client.org