Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233312e302f32342d3234203d3e203532343638.roa
File:                     3138372e3130382e3233312e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          F7kHCZ1RpLo643n5UyGvJRgYV3aP2VbZWlTNIl+7PGs=
Subject key identifier:   25:E8:87:5F:A1:37:34:14:50:CA:D0:02:9E:28:75:8D:B3:53:56:87
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       408300F4DBFEBBFE9546D92E8321DC9525B1D9D2
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233312e302f32342d3234203d3e203532343638.roa
Signing time:             Thu 06 Jun 2024 19:53:01 +0000
ROA not before:           Thu 06 Jun 2024 19:48:01 +0000
ROA not after:            Thu 05 Jun 2025 19:53:01 +0000
asID:                     52468
IP address blocks:        187.108.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 11:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:83:00:f4:db:fe:bb:fe:95:46:d9:2e:83:21:dc:95:25:b1:d9:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jun  6 19:48:01 2024 GMT
            Not After : Jun  5 19:53:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:47:a4:cb:59:b3:66:1c:5f:f3:b9:09:93:d5:
                    e6:1d:21:e0:f6:66:21:85:e9:6a:2f:8d:f8:d4:f5:
                    3a:a7:6a:68:73:30:77:94:f7:39:6e:19:c9:60:a2:
                    91:fb:e8:ed:3f:25:f7:34:92:6e:3e:d5:8b:c2:2a:
                    16:79:17:d9:63:d0:cb:49:ac:db:cc:3f:4d:31:95:
                    cf:75:33:1f:97:45:75:ff:68:de:4d:a5:5d:3a:3d:
                    08:a3:49:84:3d:68:34:e5:00:25:f8:3d:6e:e3:07:
                    b5:09:ff:11:ff:50:3a:39:a9:a3:25:7a:31:1f:7a:
                    f2:31:3c:fc:c2:11:07:8f:85:fe:cd:40:c7:ce:e7:
                    38:4f:38:4c:69:2e:5f:a1:ec:22:6b:2f:48:d4:f8:
                    1c:ab:89:5c:f1:e5:1f:6d:3a:d1:c4:51:04:30:08:
                    91:2c:8e:24:1d:67:c0:e2:2f:14:a7:f4:23:04:4e:
                    f9:8a:72:c5:26:bb:64:21:82:eb:60:db:e2:94:ad:
                    71:ec:f9:c8:ef:e4:67:6c:9e:c4:50:af:a1:d5:b8:
                    83:1c:56:60:3d:66:36:49:23:84:74:7d:8f:bb:2e:
                    bf:65:6d:13:25:6d:28:2d:5b:e5:31:ff:06:18:33:
                    99:30:66:d0:2c:d3:1b:3b:ae:be:78:29:bf:e4:37:
                    27:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E8:87:5F:A1:37:34:14:50:CA:D0:02:9E:28:75:8D:B3:53:56:87
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233312e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:37:01:f2:c0:be:23:ab:4e:0f:e4:46:e2:a8:12:10:74:18:
         01:15:a5:bc:d8:32:8b:87:ba:52:9a:ae:a9:4a:40:4b:6a:c0:
         45:f3:6f:49:40:71:d8:ed:df:fa:37:11:6a:ae:cc:c6:0e:34:
         43:94:cd:48:59:bf:59:91:d9:93:28:1d:1d:83:68:5c:e7:64:
         f9:a0:a0:1d:93:bd:62:d6:ac:47:40:b9:1f:e4:7c:76:84:90:
         05:77:fb:7c:b4:a6:46:38:64:1e:cb:9e:20:d0:8e:fb:52:c0:
         25:dd:78:c8:47:0c:de:6c:7d:1b:9e:6e:16:3d:dc:ba:45:88:
         43:e1:53:1f:6b:06:7a:92:86:6a:bb:b7:a4:6a:10:3d:7f:70:
         70:23:d5:cf:aa:07:39:5a:83:4b:bb:10:2b:18:a8:04:f7:f9:
         a3:1d:b3:b8:8e:27:be:db:bc:64:a2:8b:25:3c:ad:32:71:0f:
         32:3b:1a:0e:7a:ba:c3:9b:77:7c:5e:d6:8d:e8:72:78:f3:c2:
         ab:82:2b:f0:cd:04:b0:83:ad:8f:84:1d:ef:ee:24:7a:ac:a8:
         b3:73:de:8c:56:62:4d:c3:82:2c:e4:ef:56:78:6d:6a:7b:4c:
         63:52:9b:fc:ff:9e:06:4a:92:f8:2c:f5:c4:67:aa:8c:91:7f:
         13:f3:3f:bc
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUQIMA9Nv+u/6VRtkugyHclSWx2dIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyNDhDODBFQTVDNEM1Nzc5QzEyOTcxMjFEMEJEOEQy
REMzNzlGMDAeFw0yNDA2MDYxOTQ4MDFaFw0yNTA2MDUxOTUzMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0U0N0E0Q0I1OUIzNjYxQzVG
RjNCOTA5OTNENUU2MUQyMUUwRjY2NjIxODVFOTZBMkY4REY4RDRGNTNBQTc2QTY4
NzMzMDc3OTRGNzM5NkUxOUM5NjBBMjkxRkJFOEVEM0YyNUY3MzQ5MjZFM0VENThC
QzIyQTE2NzkxN0Q5NjNEMENCNDlBQ0RCQ0MzRjREMzE5NUNGNzUzMzFGOTc0NTc1
RkY2OERFNERBNTVEM0EzRDA4QTM0OTg0M0Q2ODM0RTUwMDI1RjgzRDZFRTMwN0I1
MDlGRjExRkY1MDNBMzlBOUEzMjU3QTMxMUY3QUYyMzEzQ0ZDQzIxMTA3OEY4NUZF
Q0Q0MEM3Q0VFNzM4NEYzODRDNjkyRTVGQTFFQzIyNkIyRjQ4RDRGODFDQUI4OTVD
RjFFNTFGNkQzQUQxQzQ1MTA0MzAwODkxMkM4RTI0MUQ2N0MwRTIyRjE0QTdGNDIz
MDQ0RUY5OEE3MkM1MjZCQjY0MjE4MkVCNjBEQkUyOTRBRDcxRUNGOUM4RUZFNDY3
NkM5RUM0NTBBRkExRDVCODgzMUM1NjYwM0Q2NjM2NDkyMzg0NzQ3RDhGQkIyRUJG
NjU2RDEzMjU2RDI4MkQ1QkU1MzFGRjA2MTgzMzk5MzA2NkQwMkNEMzFCM0JBRUJF
NzgyOUJGRTQzNzI3RUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzkeky1mzZhxf87kJk9XmHSHg9mYhhelqL4341PU6p2poczB3lPc5
bhnJYKKR++jtPyX3NJJuPtWLwioWeRfZY9DLSazbzD9NMZXPdTMfl0V1/2jeTaVd
Oj0Io0mEPWg05QAl+D1u4we1Cf8R/1A6OamjJXoxH3ryMTz8whEHj4X+zUDHzuc4
TzhMaS5foewiay9I1Pgcq4lc8eUfbTrRxFEEMAiRLI4kHWfA4i8Up/QjBE75inLF
JrtkIYLrYNvilK1x7PnI7+RnbJ7EUK+h1biDHFZgPWY2SSOEdH2Puy6/ZW0TJW0o
LVvlMf8GGDOZMGbQLNMbO66+eCm/5Dcn7wIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FCXoh1+hNzQUUMrQAp4odY2zU1aHMB8GA1UdIwQYMBaAFK4kjIDqXExXecEpcSHQ
vY0tw3nwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzEvQUUyNDhDODBFQTVDNEM1
Nzc5QzEyOTcxMjFEMEJEOEQyREMzNzlGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BRTI0OEM4MEVBNUM0QzU3NzlDMTI5NzEyMUQwQkQ4RDJEQzM3
OUYwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8xLzMxMzgzNzJlMzEzMDM4MmUzMjMz
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
u2znMA0GCSqGSIb3DQEBCwUAA4IBAQAFNwHywL4jq04P5EbiqBIQdBgBFaW82DKL
h7pSmq6pSkBLasBF829JQHHY7d/6NxFqrszGDjRDlM1IWb9ZkdmTKB0dg2hc52T5
oKAdk71i1qxHQLkf5Hx2hJAFd/t8tKZGOGQey54g0I77UsAl3XjIRwzebH0bnm4W
Pdy6RYhD4VMfawZ6koZqu7ekahA9f3BwI9XPqgc5WoNLuxArGKgE9/mjHbO4jie+
27xkooslPK0ycQ8yOxoOerrDm3d8XtaN6HJ488KrgivwzQSwg62PhB3v7iR6rKiz
c96MVmJNw4Is5O9WeG1qe0xjUpv8/54GSpL4LPXEZ6qMkX8T8z+8
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:38:05 2024 by rpki-client on console-ams.rpki-client.org