Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232392e302f32342d3234203d3e203238313234.roa
File:                     3138372e3130382e3232392e302f32342d3234203d3e203238313234.roa (raw, json)
Hash identifier:          w9sg92euNvUcJEIaowzCGlYHl0dtejIBNxVB5WuXeXw=
Subject key identifier:   3C:C9:FE:2E:8F:DE:50:75:72:62:AA:6F:52:47:78:65:B9:54:94:B8
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       18D7F2AD18B8112B822E45989031918A7EDC871B
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232392e302f32342d3234203d3e203238313234.roa
Signing time:             Tue 11 Feb 2025 12:12:00 +0000
ROA not before:           Tue 11 Feb 2025 12:07:00 +0000
ROA not after:            Tue 10 Feb 2026 12:12:00 +0000
asID:                     28124
IP address blocks:        187.108.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 23:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d7:f2:ad:18:b8:11:2b:82:2e:45:98:90:31:91:8a:7e:dc:87:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Feb 11 12:07:00 2025 GMT
            Not After : Feb 10 12:12:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6a:df:01:5d:63:f5:a8:8e:9a:90:38:fc:21:
                    bb:bf:be:05:bc:a2:62:99:3b:21:31:2b:3f:80:92:
                    24:93:c0:0e:52:10:7e:e1:03:17:9c:41:a3:5b:d3:
                    d4:ee:c6:34:d4:bc:1f:13:06:fe:a9:ac:80:3e:6a:
                    58:29:d7:c4:6c:d9:74:f8:d5:1b:56:46:04:e0:86:
                    52:0b:e7:1b:1a:55:70:64:06:5b:bf:fc:00:75:b3:
                    81:0d:21:9a:bb:8b:f6:b1:17:3e:bd:2d:e4:96:7b:
                    b7:e4:9e:0f:ea:98:2e:c7:ff:a0:8e:eb:3c:21:f3:
                    25:cb:36:3c:e6:91:67:0b:e4:f3:0a:94:4d:b9:85:
                    c5:3b:94:7d:fe:b0:df:b6:81:bf:1a:f0:9b:a0:b5:
                    4d:36:0e:95:85:c1:c8:7b:2c:6e:dd:62:11:0a:a2:
                    fa:6f:bb:b1:e2:8a:3c:49:60:aa:7d:6e:d8:15:ba:
                    bd:49:3b:18:03:87:96:ca:08:36:96:2c:cb:6f:cd:
                    3e:db:b2:c4:6c:c3:35:6d:ae:3e:ff:7a:4c:91:25:
                    da:c4:81:70:d8:b2:d8:15:90:35:ed:1e:e2:1c:43:
                    ff:1b:03:63:32:78:b8:a8:0e:53:02:a3:b5:d6:b9:
                    ba:c4:8c:a8:97:ea:c9:fa:e0:ca:d4:d4:64:59:38:
                    0f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C9:FE:2E:8F:DE:50:75:72:62:AA:6F:52:47:78:65:B9:54:94:B8
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232392e302f32342d3234203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:44:c1:c5:e2:68:db:c4:27:52:93:80:e9:f0:19:2e:dc:6d:
         e1:15:4b:03:e6:5a:5e:ea:64:d3:49:dc:a0:8a:51:ab:8d:0c:
         dd:f2:6e:5c:95:b9:fb:80:d1:58:d4:66:f5:b7:6a:02:a3:70:
         db:2e:42:6e:42:60:88:d1:24:9a:07:95:b4:bf:97:2d:9f:90:
         da:8a:c6:cd:9a:04:da:df:4c:d7:60:bb:04:91:d8:cd:e4:c2:
         f7:02:95:99:dc:4a:41:f7:5b:cb:0c:64:06:8e:75:d0:90:85:
         d4:6a:6f:c1:3d:04:0b:0f:37:6a:ef:2c:fb:ac:a5:7c:ba:2a:
         8a:9c:c5:27:fe:01:45:12:f9:68:d6:af:d1:f8:f3:73:99:1d:
         5b:de:f0:89:ec:76:b0:cc:d4:92:1a:e9:f4:e2:96:4c:75:71:
         8d:0d:ca:13:56:0c:69:fe:8f:33:1e:8d:ce:6f:17:04:2c:32:
         b1:12:b8:d4:50:df:d8:1f:5f:ff:38:ab:94:4e:b6:b1:a6:bf:
         0e:ef:b3:87:fe:19:77:fe:f2:52:0b:d7:45:36:c2:c7:4b:05:
         56:66:86:49:91:99:d7:62:17:60:80:a1:8a:96:d6:89:3f:34:
         df:59:4c:6d:98:d7:4a:be:a9:a7:f2:11:6c:6d:60:75:9b:42:
         da:b5:58:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 08:00:46 2025 by rpki-client