Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233322e302f32322d3232203d3e203238313234.roa
File:                     3138372e3130382e3233322e302f32322d3232203d3e203238313234.roa (raw, json)
Hash identifier:          4qqgUGWD6QOeQ/TiS/6CcQH2A2Cucm7CQPBjXQ4Hk4c=
Subject key identifier:   41:D7:2E:AA:ED:4E:EC:5B:80:E1:C5:94:78:9F:87:AA:75:3F:ED:9F
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       6431D4A2D5F491C685ECA6F1FF2113584F1EE2A7
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233322e302f32322d3232203d3e203238313234.roa
Signing time:             Thu 13 Feb 2025 13:36:11 +0000
ROA not before:           Thu 13 Feb 2025 13:31:11 +0000
ROA not after:            Thu 12 Feb 2026 13:36:11 +0000
asID:                     28124
IP address blocks:        187.108.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 23:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:31:d4:a2:d5:f4:91:c6:85:ec:a6:f1:ff:21:13:58:4f:1e:e2:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Feb 13 13:31:11 2025 GMT
            Not After : Feb 12 13:36:11 2026 GMT
        Subject: CN=3082010A0282010100B037E7E969BCAC1A41BAA66D0F07FD51C0CD23ACC44EAEA663B64AEADBDD70130B1FC2079F1D37F2882DC96BB84465D6AE69B2F245663BBEAA846B53F9568FDEC1C03CBA4324C504DD57B7EF220D57A932F6B170C7A9D1FCD0F18389A8943055C29E25662A3C5A1921586A6AF65D7A9B6E716B0488DF0A59B29121BF7A0B94941CFAA0C4D61ED1CCBECDC1FC6EE8767EB5C3A5A799D8750395B42E6772C366CDC8EB3B2B13EB0DB736315215D2BE5FA9C1C2917EEE098C7C6678221C90319551D62AA0AF25DFD42FB83DDF3FD974A3B6C91F33B5ADA43970FC32646C44846A767D19348A38FE30777917885E7BE269F4A2440EF8B9FA197386028E7877A0497B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:37:e7:e9:69:bc:ac:1a:41:ba:a6:6d:0f:07:
                    fd:51:c0:cd:23:ac:c4:4e:ae:a6:63:b6:4a:ea:db:
                    dd:70:13:0b:1f:c2:07:9f:1d:37:f2:88:2d:c9:6b:
                    b8:44:65:d6:ae:69:b2:f2:45:66:3b:be:aa:84:6b:
                    53:f9:56:8f:de:c1:c0:3c:ba:43:24:c5:04:dd:57:
                    b7:ef:22:0d:57:a9:32:f6:b1:70:c7:a9:d1:fc:d0:
                    f1:83:89:a8:94:30:55:c2:9e:25:66:2a:3c:5a:19:
                    21:58:6a:6a:f6:5d:7a:9b:6e:71:6b:04:88:df:0a:
                    59:b2:91:21:bf:7a:0b:94:94:1c:fa:a0:c4:d6:1e:
                    d1:cc:be:cd:c1:fc:6e:e8:76:7e:b5:c3:a5:a7:99:
                    d8:75:03:95:b4:2e:67:72:c3:66:cd:c8:eb:3b:2b:
                    13:eb:0d:b7:36:31:52:15:d2:be:5f:a9:c1:c2:91:
                    7e:ee:09:8c:7c:66:78:22:1c:90:31:95:51:d6:2a:
                    a0:af:25:df:d4:2f:b8:3d:df:3f:d9:74:a3:b6:c9:
                    1f:33:b5:ad:a4:39:70:fc:32:64:6c:44:84:6a:76:
                    7d:19:34:8a:38:fe:30:77:79:17:88:5e:7b:e2:69:
                    f4:a2:44:0e:f8:b9:fa:19:73:86:02:8e:78:77:a0:
                    49:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D7:2E:AA:ED:4E:EC:5B:80:E1:C5:94:78:9F:87:AA:75:3F:ED:9F
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233322e302f32322d3232203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:0f:ce:fd:67:0b:40:1a:7b:36:1d:68:ee:f2:50:44:66:e5:
         e5:a2:ae:87:c1:02:e9:6e:7d:fe:5e:3a:b3:3b:d7:e1:9e:39:
         26:dc:26:b7:76:0e:93:c8:cd:1c:aa:ab:af:f6:81:b7:24:d9:
         42:85:94:bd:4b:46:04:96:e4:ee:f9:f0:74:5b:8d:56:06:9e:
         67:53:ee:8a:e7:ca:8c:82:20:5c:46:4f:a6:a5:e3:a1:58:13:
         86:53:22:56:7c:43:c4:60:30:40:60:73:91:40:31:a2:a3:c9:
         68:55:14:9b:73:e4:e2:66:2a:bd:3a:08:5b:0f:5c:6d:88:97:
         4b:82:e5:8b:2e:30:d9:c5:2a:d7:e5:d8:fd:a6:52:35:0c:84:
         59:3a:b0:56:0a:86:41:33:99:04:26:fd:69:9e:b8:f6:06:33:
         3a:dc:91:5a:c1:d6:57:b7:4c:50:bd:2f:b8:56:3b:eb:e6:da:
         9f:db:f7:2e:05:5b:3f:af:02:33:c8:8f:fb:67:e1:e1:b2:5a:
         08:09:c9:aa:a8:0f:6d:c9:79:79:db:c2:e8:ca:c3:31:8a:52:
         87:d8:bc:2c:a3:1e:85:7f:a1:f0:01:40:c2:8e:9e:3c:1a:eb:
         af:aa:4c:ef:39:be:90:9a:8e:a6:89:58:96:40:54:c1:9a:a1:
         42:8b:84:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:40:38 2025 by rpki-client