Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233322e302f32332d3233203d3e203532343638.roa
File:                     3138372e3130382e3233322e302f32332d3233203d3e203532343638.roa (raw, json)
Hash identifier:          FVKLmZeuIf08VZbsbBeIWwne608sn+5S+aGNA3kfNvM=
Subject key identifier:   C6:74:4D:37:9E:42:7B:F9:7F:1C:DD:0D:41:24:3C:5C:A6:33:E6:60
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       1376BE988A0CDC00E5A7C47EDE906CA1159D1D56
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233322e302f32332d3233203d3e203532343638.roa
Signing time:             Sat 19 Oct 2024 15:29:19 +0000
ROA not before:           Sat 19 Oct 2024 15:24:19 +0000
ROA not after:            Sat 18 Oct 2025 15:29:19 +0000
asID:                     52468
IP address blocks:        187.108.232.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 11:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:76:be:98:8a:0c:dc:00:e5:a7:c4:7e:de:90:6c:a1:15:9d:1d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Oct 19 15:24:19 2024 GMT
            Not After : Oct 18 15:29:19 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dd:28:48:56:ef:31:10:e5:a9:2c:d1:55:0b:
                    55:4d:21:99:8e:04:7b:f5:71:29:bd:30:3a:bb:c7:
                    38:f7:3a:f0:5c:c9:28:56:65:86:8f:ca:f4:4c:3d:
                    8a:89:21:70:59:a1:9f:16:42:42:f7:70:c9:3c:16:
                    50:10:77:f5:65:89:42:97:3d:cd:c5:d9:fe:7c:8d:
                    da:1b:aa:59:9d:fc:95:02:5b:84:69:c0:dc:43:fa:
                    36:f5:40:ea:58:c7:64:63:68:ab:61:20:0d:c2:69:
                    96:47:a6:92:a5:f2:e2:19:31:0f:04:41:70:4f:70:
                    dc:45:a8:a4:d2:5e:d3:8a:67:bc:ec:31:43:10:f6:
                    41:2e:89:50:b9:cf:6c:98:44:38:38:08:3d:95:3d:
                    41:f0:dc:3b:c0:ea:74:be:2a:20:0f:1b:2e:ba:0f:
                    53:4b:35:98:19:9f:5c:12:bb:40:32:52:cb:37:9e:
                    33:84:62:a4:2e:91:c0:82:07:fe:55:63:7f:fe:dc:
                    a3:30:95:04:d6:12:59:57:d6:be:38:05:6b:f8:a7:
                    4f:93:d2:3e:9e:a7:ac:85:d9:61:14:9a:22:b9:90:
                    f1:53:ac:f8:f5:7b:ae:bc:5e:92:2e:da:ba:42:27:
                    84:b8:2a:d8:65:c0:1f:41:fe:f7:9a:a4:ac:f8:a8:
                    1e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:74:4D:37:9E:42:7B:F9:7F:1C:DD:0D:41:24:3C:5C:A6:33:E6:60
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233322e302f32332d3233203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:1e:36:06:eb:d4:cf:6d:bd:54:7a:44:69:63:6f:c6:f2:c6:
         dd:b5:4a:83:52:a0:0d:9a:93:e7:dc:b8:bd:b1:fe:f2:c8:42:
         62:67:46:a1:15:dd:fe:85:53:93:9f:41:4c:94:b6:3d:0f:07:
         f7:63:34:e9:9d:69:59:73:1d:df:53:4e:a6:5f:a2:f9:7e:5b:
         f8:c8:75:cc:19:79:79:f6:0f:25:8d:9d:bf:f4:62:7b:3f:de:
         b1:87:ef:85:50:02:2c:49:ac:aa:0e:fe:f7:cc:a9:b0:38:92:
         b4:ca:f8:47:70:a5:79:3e:52:86:ca:02:46:07:36:39:c8:df:
         f2:5c:79:df:41:ca:b0:a0:e6:9e:e2:77:9d:c3:41:cf:24:25:
         be:3f:b8:ba:b5:6c:c1:64:a8:df:72:be:a9:19:68:2f:98:2e:
         b1:b2:b5:4e:36:46:10:fd:80:ac:14:d2:04:10:3a:09:8c:ed:
         70:db:81:18:72:2d:f5:42:33:7a:e6:60:2a:67:ee:12:ab:ff:
         80:70:af:32:20:4a:72:28:0f:e1:1b:f9:a9:c4:24:de:f4:f8:
         31:57:84:9d:24:a7:18:d9:6f:95:36:45:a2:72:ed:7a:75:c1:
         bf:03:72:ce:5d:2c:83:6f:ec:39:e2:76:f2:1c:c3:cf:db:7b:
         dd:5b:8c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:21 2024 by rpki-client on console-fra.rpki-client.org