Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233302e302f32342d3234203d3e203532343638.roa
File:                     3138372e3130382e3233302e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          wfkSFUT3+lvIpq3vm/0vPQhUFI6pYfLsYT0w+iuYxVI=
Subject key identifier:   99:C9:62:B8:B7:09:21:EB:74:4C:15:8F:5F:32:F6:04:D9:D4:73:D3
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       7ED565D0EB4AC0F7D4181B6BF62E7291AF30CDD0
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233302e302f32342d3234203d3e203532343638.roa
Signing time:             Thu 06 Jun 2024 19:53:04 +0000
ROA not before:           Thu 06 Jun 2024 19:48:04 +0000
ROA not after:            Thu 05 Jun 2025 19:53:04 +0000
asID:                     52468
IP address blocks:        187.108.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 12:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d5:65:d0:eb:4a:c0:f7:d4:18:1b:6b:f6:2e:72:91:af:30:cd:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jun  6 19:48:04 2024 GMT
            Not After : Jun  5 19:53:04 2025 GMT
        Subject: CN=3082010A0282010100C36EF389B166DF0DE4ACE5550D9F8F909B2D1681C833F75C66F4F7F1E5732B193FF0DD2CD15BCB64AE4496D5C7CE2691AB6F559FFDCE77BF0CAF283052A7EAC0991205298EFE2557BE223F91D0DCCCD27C84EF0A7751AD6E9AC49327AC67BDAD32B02BF42F77C714A781710935324F0693451AA4870BE0A06CF3BB3045067C6F6F3412CE8D439C295789F74ABACAC975FCFA8E6A4DEE7BC63C5470CAE99D39791EA5D725F7FADFF40C122ABFD86715AA1047ADFF7F0509F6457E3A7D8F6BB8EC76B006A2AFA77FD01A2C32D8A5905F149F943AEE298FCBA319E50CC94B8141BFB4037C4F975EDC118AE0F50A99DAA5C96F85C22009BBCD1128052257A70B322D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6e:f3:89:b1:66:df:0d:e4:ac:e5:55:0d:9f:
                    8f:90:9b:2d:16:81:c8:33:f7:5c:66:f4:f7:f1:e5:
                    73:2b:19:3f:f0:dd:2c:d1:5b:cb:64:ae:44:96:d5:
                    c7:ce:26:91:ab:6f:55:9f:fd:ce:77:bf:0c:af:28:
                    30:52:a7:ea:c0:99:12:05:29:8e:fe:25:57:be:22:
                    3f:91:d0:dc:cc:d2:7c:84:ef:0a:77:51:ad:6e:9a:
                    c4:93:27:ac:67:bd:ad:32:b0:2b:f4:2f:77:c7:14:
                    a7:81:71:09:35:32:4f:06:93:45:1a:a4:87:0b:e0:
                    a0:6c:f3:bb:30:45:06:7c:6f:6f:34:12:ce:8d:43:
                    9c:29:57:89:f7:4a:ba:ca:c9:75:fc:fa:8e:6a:4d:
                    ee:7b:c6:3c:54:70:ca:e9:9d:39:79:1e:a5:d7:25:
                    f7:fa:df:f4:0c:12:2a:bf:d8:67:15:aa:10:47:ad:
                    ff:7f:05:09:f6:45:7e:3a:7d:8f:6b:b8:ec:76:b0:
                    06:a2:af:a7:7f:d0:1a:2c:32:d8:a5:90:5f:14:9f:
                    94:3a:ee:29:8f:cb:a3:19:e5:0c:c9:4b:81:41:bf:
                    b4:03:7c:4f:97:5e:dc:11:8a:e0:f5:0a:99:da:a5:
                    c9:6f:85:c2:20:09:bb:cd:11:28:05:22:57:a7:0b:
                    32:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C9:62:B8:B7:09:21:EB:74:4C:15:8F:5F:32:F6:04:D9:D4:73:D3
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233302e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:bb:14:80:00:09:02:bf:2b:e5:dd:89:41:8b:67:c0:62:7f:
         fa:01:e8:c5:78:2a:15:af:41:c3:8c:a4:17:9d:5c:4e:e9:7d:
         e9:17:00:3a:bd:c0:93:94:35:9a:af:c3:8b:c6:e0:de:39:8e:
         c6:c4:48:b2:9c:b9:2d:da:7c:2b:cc:5d:00:39:5e:ff:7f:07:
         ea:8f:c2:c2:80:ae:c3:75:7a:aa:bf:1e:27:76:1b:af:e4:86:
         47:e3:9b:20:09:4f:2f:0d:c2:d5:0f:69:11:0f:f3:82:30:d5:
         f4:2c:fd:8d:89:d8:e4:66:58:84:da:ed:67:39:e2:fa:93:f1:
         a0:15:90:55:50:c4:59:08:33:27:39:3f:bf:79:32:cc:be:78:
         ad:69:c6:74:4e:bb:85:a3:cd:bd:4f:b5:9b:05:c6:ea:6f:f9:
         bc:91:58:0e:da:81:d4:7f:d5:d6:3a:8c:92:d0:54:01:ae:61:
         c0:13:e1:44:69:b0:79:5b:07:15:af:25:e9:a9:3f:9a:cd:c8:
         87:0f:e0:9d:ba:0a:de:5d:2e:35:16:0b:6b:d1:f3:34:9f:17:
         db:04:84:bb:f1:18:56:40:59:52:ed:07:46:45:90:da:b4:25:
         3b:ae:d1:5f:e9:3d:42:8e:80:f6:c3:7d:04:2d:02:17:65:75:
         72:73:b3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 12:35:55 2024 by rpki-client on console-fra.rpki-client.org