Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232392e302f32342d3234203d3e203532343638.roa
File:                     3138372e3130382e3232392e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          y8JDHkm9zca9LvBg7Qyi1SS3lXuOBFq45jveI7JPNC4=
Subject key identifier:   1B:2E:8B:65:8B:98:88:E7:8F:52:B8:4D:E5:53:D1:41:94:F5:4B:B9
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       22628DD1B29369691F614065FD337156BA05946D
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232392e302f32342d3234203d3e203532343638.roa
Signing time:             Thu 06 Jun 2024 19:53:03 +0000
ROA not before:           Thu 06 Jun 2024 19:48:03 +0000
ROA not after:            Thu 05 Jun 2025 19:53:03 +0000
asID:                     52468
IP address blocks:        187.108.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 12:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:62:8d:d1:b2:93:69:69:1f:61:40:65:fd:33:71:56:ba:05:94:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jun  6 19:48:03 2024 GMT
            Not After : Jun  5 19:53:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:49:0f:2c:f7:be:48:85:72:02:fb:01:4a:1a:
                    fc:93:f7:08:ff:26:56:41:e5:a8:51:4e:6d:19:ad:
                    76:dd:dc:4c:ed:85:70:41:c9:c2:15:8f:e2:26:ff:
                    bc:16:b2:3a:9f:8c:8d:ca:c0:c6:19:53:f3:d0:e1:
                    d3:26:4c:a0:37:f1:71:8b:13:43:3b:67:c6:b3:4f:
                    00:e6:70:7f:13:6b:84:5e:0d:d1:4a:fe:59:51:9c:
                    72:a7:e5:61:1b:44:f3:42:22:c7:85:05:db:f7:b6:
                    57:f5:09:37:cb:2b:c7:44:f2:ad:18:fb:3e:4d:fa:
                    c8:69:6d:dc:f8:6c:87:16:36:26:c3:02:1f:3e:21:
                    04:49:e6:e9:51:0e:ac:05:6d:64:7c:d6:56:03:52:
                    4e:39:26:98:03:5d:80:93:6d:03:c5:8c:62:df:97:
                    8a:33:ec:30:d0:ce:2d:7c:ea:a6:b5:0b:42:d5:d3:
                    5b:37:09:20:bb:90:2f:8d:bc:5d:7c:f8:eb:2b:9d:
                    d2:fc:08:9a:0b:04:33:dd:36:3a:89:59:3e:bc:86:
                    ee:85:d8:2f:a3:01:45:8d:ad:41:f6:7a:25:2e:96:
                    39:3a:dc:4a:8d:41:cf:11:a9:32:82:31:84:58:e2:
                    be:9a:c0:66:fa:45:ab:3c:e9:75:da:bc:bf:10:64:
                    de:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2E:8B:65:8B:98:88:E7:8F:52:B8:4D:E5:53:D1:41:94:F5:4B:B9
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232392e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:28:99:32:a6:fa:ef:7e:ea:16:e2:de:dd:16:7d:a0:5f:db:
         6f:2c:75:6b:71:0e:af:e6:ad:b6:d4:43:bd:ee:95:42:15:90:
         bd:a9:ce:60:f4:e4:e9:30:0a:df:40:9d:2f:b7:b4:a4:9f:1b:
         c4:f0:7c:6d:25:00:f2:f7:5a:eb:88:28:4b:96:13:9f:c6:a8:
         1c:fa:06:a5:25:27:61:e7:39:d3:7c:f5:82:98:34:ff:26:86:
         25:ad:1a:08:3e:ac:75:9c:f2:00:56:be:8c:6f:16:4b:cc:b0:
         cd:5f:4b:03:cb:2f:0f:05:e9:18:8a:90:08:54:42:c2:0d:42:
         f2:6a:0a:b7:67:ab:38:59:8c:be:7d:d4:2b:f2:24:ba:d9:03:
         b7:e4:3e:7a:d9:a4:a2:04:4f:f6:d2:91:90:e1:ab:0a:95:d9:
         99:25:09:20:a4:da:f9:01:06:d3:6e:3f:a4:69:da:98:57:34:
         54:b4:10:19:7e:aa:5f:15:7e:07:4f:25:9b:9a:2d:40:6d:84:
         c7:50:3f:00:8a:ef:b0:ed:ab:17:75:bd:ce:9d:9b:51:7e:75:
         65:e2:44:05:a7:df:5a:78:38:fe:e5:34:f4:a2:3f:96:3f:c3:
         bf:30:28:83:d7:90:1e:71:14:af:72:44:5a:56:7d:9b:eb:36:
         41:98:28:87
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUImKN0bKTaWkfYUBl/TNxVroFlG0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyNDhDODBFQTVDNEM1Nzc5QzEyOTcxMjFEMEJEOEQy
REMzNzlGMDAeFw0yNDA2MDYxOTQ4MDNaFw0yNTA2MDUxOTUzMDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzM0OTBGMkNGN0JFNDg4NTcy
MDJGQjAxNEExQUZDOTNGNzA4RkYyNjU2NDFFNUE4NTE0RTZEMTlBRDc2REREQzRD
RUQ4NTcwNDFDOUMyMTU4RkUyMjZGRkJDMTZCMjNBOUY4QzhEQ0FDMEM2MTk1M0Yz
RDBFMUQzMjY0Q0EwMzdGMTcxOEIxMzQzM0I2N0M2QjM0RjAwRTY3MDdGMTM2Qjg0
NUUwREQxNEFGRTU5NTE5QzcyQTdFNTYxMUI0NEYzNDIyMkM3ODUwNURCRjdCNjU3
RjUwOTM3Q0IyQkM3NDRGMkFEMThGQjNFNERGQUM4Njk2RERDRjg2Qzg3MTYzNjI2
QzMwMjFGM0UyMTA0NDlFNkU5NTEwRUFDMDU2RDY0N0NENjU2MDM1MjRFMzkyNjk4
MDM1RDgwOTM2RDAzQzU4QzYyREY5NzhBMzNFQzMwRDBDRTJEN0NFQUE2QjUwQjQy
RDVEMzVCMzcwOTIwQkI5MDJGOERCQzVEN0NGOEVCMkI5REQyRkMwODlBMEIwNDMz
REQzNjNBODk1OTNFQkM4NkVFODVEODJGQTMwMTQ1OERBRDQxRjY3QTI1MkU5NjM5
M0FEQzRBOEQ0MUNGMTFBOTMyODIzMTg0NThFMkJFOUFDMDY2RkE0NUFCM0NFOTc1
REFCQ0JGMTA2NERFQTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAw0kPLPe+SIVyAvsBShr8k/cI/yZWQeWoUU5tGa123dxM7YVwQcnC
FY/iJv+8FrI6n4yNysDGGVPz0OHTJkygN/FxixNDO2fGs08A5nB/E2uEXg3RSv5Z
UZxyp+VhG0TzQiLHhQXb97ZX9Qk3yyvHRPKtGPs+TfrIaW3c+GyHFjYmwwIfPiEE
SebpUQ6sBW1kfNZWA1JOOSaYA12Ak20DxYxi35eKM+ww0M4tfOqmtQtC1dNbNwkg
u5AvjbxdfPjrK53S/AiaCwQz3TY6iVk+vIbuhdgvowFFja1B9nolLpY5OtxKjUHP
EakygjGEWOK+msBm+kWrPOl12ry/EGTepwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FBsui2WLmIjnj1K4TeVT0UGU9Uu5MB8GA1UdIwQYMBaAFK4kjIDqXExXecEpcSHQ
vY0tw3nwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzEvQUUyNDhDODBFQTVDNEM1
Nzc5QzEyOTcxMjFEMEJEOEQyREMzNzlGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BRTI0OEM4MEVBNUM0QzU3NzlDMTI5NzEyMUQwQkQ4RDJEQzM3
OUYwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8xLzMxMzgzNzJlMzEzMDM4MmUzMjMy
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
u2zlMA0GCSqGSIb3DQEBCwUAA4IBAQBBKJkypvrvfuoW4t7dFn2gX9tvLHVrcQ6v
5q221EO97pVCFZC9qc5g9OTpMArfQJ0vt7SknxvE8HxtJQDy91rriChLlhOfxqgc
+galJSdh5znTfPWCmDT/JoYlrRoIPqx1nPIAVr6MbxZLzLDNX0sDyy8PBekYipAI
VELCDULyagq3Z6s4WYy+fdQr8iS62QO35D562aSiBE/20pGQ4asKldmZJQkgpNr5
AQbTbj+kadqYVzRUtBAZfqpfFX4HTyWbmi1AbYTHUD8Aiu+w7asXdb3OnZtRfnVl
4kQFp99aeDj+5TT0oj+WP8O/MCiD15AecRSvckRaVn2b6zZBmCiH
-----END CERTIFICATE-----
Generated at Mon Jul 1 12:35:55 2024 by rpki-client on console-fra.rpki-client.org