Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233322e302f32312d3231203d3e203532343638.roa
File:                     3138372e3130382e3233322e302f32312d3231203d3e203532343638.roa (raw, json)
Hash identifier:          TC2bttLKU5yJwSzp8WINJgNW3Ge52epcsxP5RbkU6N0=
Subject key identifier:   C5:D3:CC:2F:07:FB:06:AB:53:0E:C6:E1:9C:CA:84:5A:C8:F6:25:2D
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       32EEC8F74444F2211AEDF4A5AA8B2CBBE5B1983B
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233322e302f32312d3231203d3e203532343638.roa
Signing time:             Sat 19 Oct 2024 15:27:10 +0000
ROA not before:           Sat 19 Oct 2024 15:22:10 +0000
ROA not after:            Sat 18 Oct 2025 15:27:10 +0000
asID:                     52468
IP address blocks:        187.108.232.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 11:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ee:c8:f7:44:44:f2:21:1a:ed:f4:a5:aa:8b:2c:bb:e5:b1:98:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Oct 19 15:22:10 2024 GMT
            Not After : Oct 18 15:27:10 2025 GMT
        Subject: CN=3082010A0282010100C4437220033A0C73CE21A87BBE62F01D65ADD0B23BC0FD930416C2CCBFD1ECC0AD84C3EE1F8A7157CEDED92142FB9669DCE824399AD5DEA8F14715CBE53CD49DE8776DAF6F834025535B1715C09FB51B7B20D0EA13F61D27DFC7479FE997FE3D6FBB95CF7F32230B231E6DCF520FC4B71BFAEE966D9A32F5737C29710A2D9CE94B2F969A93447E54AE41A23115298334A4E5630D7F46AC6D669F1C765D62602BFDD7072AAD7843DCC54C84A2D9D6DD3A2CCF94530E085EE3A54BC7426EB8881AFB9B8479A894AA0A3E670023907A152A3946E3D55C873F9E91496BED84F4570D7F4F8487CCB1E398B343D8470171E4149BB07EFA0936979DC8664D4EFB8C5FBD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:43:72:20:03:3a:0c:73:ce:21:a8:7b:be:62:
                    f0:1d:65:ad:d0:b2:3b:c0:fd:93:04:16:c2:cc:bf:
                    d1:ec:c0:ad:84:c3:ee:1f:8a:71:57:ce:de:d9:21:
                    42:fb:96:69:dc:e8:24:39:9a:d5:de:a8:f1:47:15:
                    cb:e5:3c:d4:9d:e8:77:6d:af:6f:83:40:25:53:5b:
                    17:15:c0:9f:b5:1b:7b:20:d0:ea:13:f6:1d:27:df:
                    c7:47:9f:e9:97:fe:3d:6f:bb:95:cf:7f:32:23:0b:
                    23:1e:6d:cf:52:0f:c4:b7:1b:fa:ee:96:6d:9a:32:
                    f5:73:7c:29:71:0a:2d:9c:e9:4b:2f:96:9a:93:44:
                    7e:54:ae:41:a2:31:15:29:83:34:a4:e5:63:0d:7f:
                    46:ac:6d:66:9f:1c:76:5d:62:60:2b:fd:d7:07:2a:
                    ad:78:43:dc:c5:4c:84:a2:d9:d6:dd:3a:2c:cf:94:
                    53:0e:08:5e:e3:a5:4b:c7:42:6e:b8:88:1a:fb:9b:
                    84:79:a8:94:aa:0a:3e:67:00:23:90:7a:15:2a:39:
                    46:e3:d5:5c:87:3f:9e:91:49:6b:ed:84:f4:57:0d:
                    7f:4f:84:87:cc:b1:e3:98:b3:43:d8:47:01:71:e4:
                    14:9b:b0:7e:fa:09:36:97:9d:c8:66:4d:4e:fb:8c:
                    5f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D3:CC:2F:07:FB:06:AB:53:0E:C6:E1:9C:CA:84:5A:C8:F6:25:2D
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233322e302f32312d3231203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9d:4d:c7:3f:17:a6:85:44:c5:8d:00:18:65:46:6c:3c:19:58:
         4a:9b:0a:e1:b9:54:55:86:8d:07:1c:99:9e:e8:5d:90:39:79:
         83:5b:a8:ac:b8:48:8b:28:d2:e2:e0:71:83:2a:4d:cd:b5:8f:
         da:a9:70:2a:66:57:63:9e:45:89:92:fa:9a:cb:fb:56:86:d8:
         10:12:db:7f:a3:97:d9:08:ea:ed:2b:ba:24:2f:90:74:bd:7d:
         63:ce:b8:41:44:bb:36:b4:3e:1d:b2:f7:06:f7:c3:aa:a2:41:
         45:19:bc:10:d0:82:5b:3c:2e:c0:6d:84:47:5a:89:6a:91:bd:
         73:93:4f:10:77:0d:a8:c7:d2:36:47:11:64:b6:cf:65:70:c2:
         fe:eb:31:57:cf:ac:1f:41:4e:fa:0c:ce:67:42:4d:71:2d:13:
         fa:35:97:54:17:5f:de:5e:7d:83:e4:bf:d4:6a:23:df:84:f7:
         45:eb:76:03:5b:d9:ef:92:d1:c6:73:e1:a0:0b:0f:1e:d3:ac:
         93:e1:31:52:5d:bb:b5:69:a4:09:82:21:fe:ad:f3:13:ee:f0:
         65:ac:55:d5:37:09:21:8b:0d:d9:01:53:03:af:74:ad:37:3f:
         3c:9a:78:39:0a:e8:42:bb:bb:54:31:4e:11:7a:bd:8b:f2:3b:
         a2:d6:02:25
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUMu7I90RE8iEa7fSlqossu+WxmDswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyNDhDODBFQTVDNEM1Nzc5QzEyOTcxMjFEMEJEOEQy
REMzNzlGMDAeFw0yNDEwMTkxNTIyMTBaFw0yNTEwMTgxNTI3MTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzQ0MzcyMjAwMzNBMEM3M0NF
MjFBODdCQkU2MkYwMUQ2NUFERDBCMjNCQzBGRDkzMDQxNkMyQ0NCRkQxRUNDMEFE
ODRDM0VFMUY4QTcxNTdDRURFRDkyMTQyRkI5NjY5RENFODI0Mzk5QUQ1REVBOEYx
NDcxNUNCRTUzQ0Q0OURFODc3NkRBRjZGODM0MDI1NTM1QjE3MTVDMDlGQjUxQjdC
MjBEMEVBMTNGNjFEMjdERkM3NDc5RkU5OTdGRTNENkZCQjk1Q0Y3RjMyMjMwQjIz
MUU2RENGNTIwRkM0QjcxQkZBRUU5NjZEOUEzMkY1NzM3QzI5NzEwQTJEOUNFOTRC
MkY5NjlBOTM0NDdFNTRBRTQxQTIzMTE1Mjk4MzM0QTRFNTYzMEQ3RjQ2QUM2RDY2
OUYxQzc2NUQ2MjYwMkJGREQ3MDcyQUFENzg0M0RDQzU0Qzg0QTJEOUQ2REQzQTJD
Q0Y5NDUzMEUwODVFRTNBNTRCQzc0MjZFQjg4ODFBRkI5Qjg0NzlBODk0QUEwQTNF
NjcwMDIzOTA3QTE1MkEzOTQ2RTNENTVDODczRjlFOTE0OTZCRUQ4NEY0NTcwRDdG
NEY4NDg3Q0NCMUUzOThCMzQzRDg0NzAxNzFFNDE0OUJCMDdFRkEwOTM2OTc5REM4
NjY0RDRFRkI4QzVGQkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxENyIAM6DHPOIah7vmLwHWWt0LI7wP2TBBbCzL/R7MCthMPuH4px
V87e2SFC+5Zp3OgkOZrV3qjxRxXL5TzUneh3ba9vg0AlU1sXFcCftRt7INDqE/Yd
J9/HR5/pl/49b7uVz38yIwsjHm3PUg/Etxv67pZtmjL1c3wpcQotnOlLL5aak0R+
VK5BojEVKYM0pOVjDX9GrG1mnxx2XWJgK/3XByqteEPcxUyEotnW3Tosz5RTDghe
46VLx0JuuIga+5uEeaiUqgo+ZwAjkHoVKjlG49Vchz+ekUlr7YT0Vw1/T4SHzLHj
mLND2EcBceQUm7B++gk2l53IZk1O+4xfvQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FMXTzC8H+warUw7G4ZzKhFrI9iUtMB8GA1UdIwQYMBaAFK4kjIDqXExXecEpcSHQ
vY0tw3nwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzEvQUUyNDhDODBFQTVDNEM1
Nzc5QzEyOTcxMjFEMEJEOEQyREMzNzlGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BRTI0OEM4MEVBNUM0QzU3NzlDMTI5NzEyMUQwQkQ4RDJEQzM3
OUYwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8xLzMxMzgzNzJlMzEzMDM4MmUzMjMz
MzIyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD
u2zoMA0GCSqGSIb3DQEBCwUAA4IBAQCdTcc/F6aFRMWNABhlRmw8GVhKmwrhuVRV
ho0HHJme6F2QOXmDW6isuEiLKNLi4HGDKk3NtY/aqXAqZldjnkWJkvqay/tWhtgQ
Ett/o5fZCOrtK7okL5B0vX1jzrhBRLs2tD4dsvcG98OqokFFGbwQ0IJbPC7AbYRH
Wolqkb1zk08Qdw2ox9I2RxFkts9lcML+6zFXz6wfQU76DM5nQk1xLRP6NZdUF1/e
Xn2D5L/UaiPfhPdF63YDW9nvktHGc+GgCw8e06yT4TFSXbu1aaQJgiH+rfMT7vBl
rFXVNwkhiw3ZAVMDr3StNz88mng5CuhCu7tUMU4Rer2L8jui1gIl
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:21 2024 by rpki-client on console-fra.rpki-client.org