Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232382e302f32342d3234203d3e203532343638.roa
File:                     3138372e3130382e3232382e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          FSVS9axggcT27ttpJN5PKP8lQ9Zp0+dwRIkEiR8aWgA=
Subject key identifier:   19:86:74:0B:EF:87:D9:44:B4:32:63:C2:B8:BF:85:F1:E5:D4:35:E3
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       3F0EEAB6DF8678D525039F5659704DABBEDB23A6
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232382e302f32342d3234203d3e203532343638.roa
Signing time:             Thu 06 Jun 2024 19:53:00 +0000
ROA not before:           Thu 06 Jun 2024 19:48:00 +0000
ROA not after:            Thu 05 Jun 2025 19:53:00 +0000
asID:                     52468
IP address blocks:        187.108.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 11:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:0e:ea:b6:df:86:78:d5:25:03:9f:56:59:70:4d:ab:be:db:23:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jun  6 19:48:00 2024 GMT
            Not After : Jun  5 19:53:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f8:4b:b6:57:15:76:3f:52:21:20:74:77:9e:
                    01:34:6e:a3:eb:f6:3b:d6:7f:6b:a0:b5:50:f4:bd:
                    bd:d0:ca:21:e3:1b:1a:49:fb:ab:b7:4d:14:ce:36:
                    6b:9c:2e:79:c2:c0:f4:ee:2f:a3:77:43:64:71:9e:
                    03:f2:13:b8:31:c7:6e:ba:8d:e2:f9:14:5f:0f:16:
                    69:7b:0e:b8:18:59:e6:76:99:df:31:e0:fa:49:b1:
                    50:73:ff:1a:01:14:f5:d4:c2:71:79:33:a2:f3:73:
                    77:5b:84:0d:e7:0e:42:1a:35:69:1d:92:0e:41:dd:
                    62:2d:ef:42:33:19:ff:87:c3:9f:19:29:6b:25:46:
                    d9:98:62:9f:23:8b:b6:05:e9:c7:1b:2d:e0:39:17:
                    6d:0f:d8:e4:ef:05:f4:ac:21:81:5b:72:bd:b1:ad:
                    b0:ad:6e:6e:23:1e:e3:93:9a:84:e3:7c:26:2f:77:
                    22:35:45:90:0d:60:55:93:78:9f:68:77:4a:bb:35:
                    45:a3:c2:aa:de:56:e1:33:a6:bd:79:bb:45:d6:00:
                    1b:c9:e6:ab:8e:e1:8f:f3:d8:7b:62:66:8c:4d:3a:
                    9d:11:79:97:5f:4a:a3:bc:7f:b9:85:49:4b:60:98:
                    46:bc:99:33:8e:23:99:76:5d:a5:7b:78:75:a0:5a:
                    08:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:86:74:0B:EF:87:D9:44:B4:32:63:C2:B8:BF:85:F1:E5:D4:35:E3
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232382e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:65:37:e1:93:fe:f8:02:48:e0:f5:59:5b:76:64:7e:82:e8:
         5d:14:77:e1:f8:9c:ec:d5:71:81:02:81:84:99:46:b2:27:1f:
         1b:61:82:d3:a4:b0:69:eb:ad:0f:e5:32:73:1b:97:a2:b6:67:
         95:01:9c:3e:66:97:d5:88:30:92:bc:46:da:a3:17:5a:3a:ff:
         2d:ff:2a:1e:7b:88:86:61:96:ce:07:80:cb:4f:e1:45:27:37:
         aa:54:67:63:5c:8e:23:83:c6:5c:26:86:dd:3d:52:86:a3:29:
         b4:88:f4:d2:ee:cd:55:72:24:ad:cb:c6:40:e6:fb:60:40:46:
         e8:2a:ff:8b:9f:42:df:49:9e:3d:61:03:ae:17:44:12:d6:78:
         15:12:e3:78:f6:1c:c3:3d:2b:0b:f5:e4:03:c9:a2:e3:84:1c:
         98:52:ca:6f:c1:67:3f:ac:ca:3f:8b:42:82:de:bc:a0:80:21:
         ba:93:63:27:5a:a1:c2:ac:0c:98:18:48:f0:d6:a2:ef:ca:4d:
         d7:7b:e6:5f:8a:62:03:2d:cf:b7:cf:b7:dd:a7:d8:22:18:b9:
         ca:47:7a:0b:fc:ba:c9:8b:0e:09:8a:8b:b3:dd:ef:52:a0:11:
         f8:7b:3b:0f:61:8e:4f:8b:e8:64:41:db:94:34:be:56:35:86:
         f0:47:a0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:38:05 2024 by rpki-client on console-ams.rpki-client.org