Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233322e302f32322d3232203d3e203532343638.roa
File:                     3138372e3130382e3233322e302f32322d3232203d3e203532343638.roa (raw, json)
Hash identifier:          2B/K++wbP1r3gtGunV4mR8SYQ7RPB90yGfag/lZ92Gk=
Subject key identifier:   B8:30:CB:B4:71:F9:39:9C:C5:AD:B9:90:A9:ED:24:8C:F4:EF:FE:BA
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       3B29166C24F0F1E80DF0E6E8E40D285A834DC12A
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233322e302f32322d3232203d3e203532343638.roa
Signing time:             Thu 06 Jun 2024 19:53:17 +0000
ROA not before:           Thu 06 Jun 2024 19:48:17 +0000
ROA not after:            Thu 05 Jun 2025 19:53:17 +0000
asID:                     52468
IP address blocks:        187.108.232.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 11:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:29:16:6c:24:f0:f1:e8:0d:f0:e6:e8:e4:0d:28:5a:83:4d:c1:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jun  6 19:48:17 2024 GMT
            Not After : Jun  5 19:53:17 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:15:e0:98:32:25:1c:7d:d1:99:9a:e4:de:75:
                    5f:3e:57:52:fc:61:c5:5b:e4:7c:e1:69:6b:9d:01:
                    6d:a6:8b:c7:59:1e:98:ed:85:1b:60:d3:c8:36:55:
                    7e:6b:7a:85:29:1e:e5:08:24:7c:b6:68:35:e6:76:
                    a4:cd:ab:31:60:cb:59:bd:1f:72:f4:59:95:cf:de:
                    f6:f7:f5:3f:ff:08:09:45:c4:4f:4d:1d:57:e1:b9:
                    b8:e0:d5:ac:38:ee:15:ab:f7:5d:db:1a:99:ba:34:
                    27:28:e5:b3:ac:02:77:7e:91:39:4a:77:39:66:35:
                    1b:16:7f:8d:c8:1a:ca:78:2a:6e:17:2a:43:6a:b2:
                    f2:de:c4:df:ab:8c:ee:c0:94:7e:c7:91:0a:c0:14:
                    65:2b:a9:5c:a5:da:73:41:5e:93:af:09:d6:53:0c:
                    9a:a7:4a:37:57:5c:b4:67:b2:55:18:cb:ab:b4:42:
                    03:c5:51:a7:51:7a:a7:64:9a:f1:81:a5:68:65:80:
                    1f:ef:e6:45:e6:a4:c8:c0:92:76:f7:86:df:bf:ce:
                    48:7d:c1:b0:be:dc:cf:44:5e:30:ae:e6:95:41:2d:
                    65:0b:55:43:48:61:c8:b1:a7:1a:8f:53:38:c2:49:
                    2a:6d:75:03:90:a9:c4:98:75:ff:1c:41:0b:c3:77:
                    a7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:30:CB:B4:71:F9:39:9C:C5:AD:B9:90:A9:ED:24:8C:F4:EF:FE:BA
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233322e302f32322d3232203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:f7:b6:f5:a8:50:07:90:6d:a2:98:76:d1:3b:5d:06:3c:03:
         00:09:e7:99:25:9d:8c:3c:22:c2:19:ee:5a:ae:2a:c1:90:5c:
         1d:e5:cf:73:5d:80:ff:b6:01:0f:a1:5a:b5:24:2f:93:a9:89:
         11:7c:d2:6d:5d:a8:7c:b3:02:fa:e2:a0:d0:3f:7f:07:ea:48:
         30:ae:ae:1a:54:67:b0:c8:b9:10:16:9c:8f:2e:86:59:03:df:
         f1:2a:4b:42:ce:16:e3:16:30:15:44:e5:47:32:3e:e6:a6:d4:
         33:02:bb:30:39:df:b5:bc:c9:e9:83:f5:cf:a9:93:62:42:d5:
         cc:f3:7a:25:8d:35:33:4f:b4:2e:a3:10:cd:6d:ac:aa:b7:68:
         04:c8:0f:a2:ee:3f:24:bd:d6:4b:58:84:b4:09:40:c2:3c:e0:
         bd:90:b4:b9:a7:02:64:3c:bc:e2:e6:83:53:c8:15:ca:a7:8b:
         9e:98:98:d9:44:45:82:a0:38:25:46:8f:47:2a:73:da:14:dc:
         8b:69:00:88:11:c9:eb:d2:69:03:d7:f9:f8:6e:43:b8:e0:4e:
         95:1a:66:08:57:93:3f:7e:e2:bf:82:d7:cf:d7:fb:f1:12:04:
         f8:08:46:90:10:cf:eb:6a:ee:bd:2d:cc:00:5d:b1:51:e0:a2:
         01:5d:c7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:38:05 2024 by rpki-client on console-ams.rpki-client.org