Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232382e302f32342d3234203d3e203238313234.roa
File:                     3138372e3130382e3232382e302f32342d3234203d3e203238313234.roa (raw, json)
Hash identifier:          uT3Ge71JKiA/ac8JdGiot7SE9UdW4/q+BKxc2+zVKa8=
Subject key identifier:   FC:E1:3C:4E:EF:0A:A0:E2:90:8B:D7:C5:A1:98:2F:A3:F5:9A:68:50
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       301D8A5D9B41AA810FC24C25C2A0EC2C01228D31
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232382e302f32342d3234203d3e203238313234.roa
Signing time:             Tue 11 Feb 2025 12:11:43 +0000
ROA not before:           Tue 11 Feb 2025 12:06:43 +0000
ROA not after:            Tue 10 Feb 2026 12:11:43 +0000
asID:                     28124
IP address blocks:        187.108.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 23:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:1d:8a:5d:9b:41:aa:81:0f:c2:4c:25:c2:a0:ec:2c:01:22:8d:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Feb 11 12:06:43 2025 GMT
            Not After : Feb 10 12:11:43 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d8:1b:52:28:47:48:57:a7:d7:fd:11:a0:34:
                    a8:53:17:26:a1:7d:84:aa:13:d9:8f:f7:41:d1:0e:
                    ff:cf:8f:15:c7:33:47:f6:73:99:63:b4:fe:f1:82:
                    45:92:bf:d7:84:95:b1:26:41:d0:16:91:21:92:72:
                    65:d9:2a:3c:11:4c:23:dd:1b:04:0e:d3:b1:20:5a:
                    fe:fa:3b:d7:af:44:31:32:87:23:63:73:f4:80:ea:
                    13:1e:b6:bb:61:85:ee:08:d5:36:86:38:80:6f:d2:
                    e1:19:2d:fa:fb:b3:89:2c:81:bd:f0:b0:ba:af:dc:
                    94:d9:36:83:87:47:0b:96:23:f7:6f:e2:da:76:df:
                    ce:d3:03:84:d7:4b:21:7a:cc:fd:63:99:6c:b0:9a:
                    cf:ba:bb:07:e2:ef:62:c5:c4:0f:e2:8e:20:a7:bf:
                    5d:24:6f:50:00:4d:4b:e8:fc:98:ef:0c:aa:48:3b:
                    b4:bc:7e:2e:76:cc:07:da:05:2b:86:1f:26:13:88:
                    6d:a2:a3:0c:c1:74:37:74:3a:e8:b1:4e:d3:26:06:
                    93:fa:a7:b2:95:92:a7:1d:b9:22:c7:6b:69:97:af:
                    3a:ca:72:70:eb:dd:0a:4f:7e:e7:3b:d6:fd:72:fb:
                    6f:b1:0a:5b:36:f9:3f:af:3c:e3:92:4c:f6:23:c7:
                    2a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E1:3C:4E:EF:0A:A0:E2:90:8B:D7:C5:A1:98:2F:A3:F5:9A:68:50
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232382e302f32342d3234203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:aa:75:69:c2:0a:66:ea:f7:a1:f9:15:ea:83:b0:56:73:8d:
         3a:cd:3b:5d:9e:42:2c:84:04:97:72:29:87:e3:89:5e:9f:e1:
         9b:77:39:51:dc:29:82:dc:a9:98:55:bc:21:d1:30:78:2e:46:
         63:2a:8e:8d:ab:43:dc:86:fa:ab:1e:7b:13:63:48:1e:7e:f8:
         05:71:b7:77:81:a7:98:ef:75:82:3a:59:0e:0c:4b:1d:0b:61:
         65:fa:c7:f6:8a:e7:07:37:2c:9a:af:63:61:d6:be:ad:29:47:
         99:55:4b:dd:b4:25:e8:07:ba:ce:41:9b:6c:6a:92:f4:fe:45:
         e0:84:cd:f2:61:55:6d:ad:c2:30:f2:59:f0:fb:42:c2:30:cc:
         83:5e:59:5a:ca:c8:1d:48:90:e8:10:7f:92:b0:ce:b6:3e:c7:
         be:cc:97:9f:fe:7b:7d:ce:72:a3:b8:aa:e9:e4:87:09:b1:20:
         7e:08:16:07:66:6f:04:9a:c6:f1:93:85:07:bc:b7:2a:af:cf:
         83:6b:f0:81:ff:ff:3f:d2:40:de:57:19:05:4d:2c:35:b7:3b:
         10:3f:a8:7b:a3:60:9d:8a:c0:67:93:81:64:6b:d7:f9:1a:00:
         94:6c:96:ee:85:65:21:e4:46:ae:1e:d5:41:60:a8:e3:94:51:
         15:0a:78:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:46:18 2025 by rpki-client