Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233322e302f32342d3234203d3e203532343638.roa
File:                     3138372e3130382e3233322e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          HR2QatzSI6btsz+BLT/szh7erQ5QVxEcTiqO/0/cA9c=
Subject key identifier:   81:2D:A6:02:22:3D:7F:21:4B:53:AD:BC:01:44:42:74:06:FD:15:BD
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       5B7F52EEC43A5555832321C8AF0DDD3139E2383E
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233322e302f32342d3234203d3e203532343638.roa
Signing time:             Thu 06 Jun 2024 19:53:00 +0000
ROA not before:           Thu 06 Jun 2024 19:48:00 +0000
ROA not after:            Thu 05 Jun 2025 19:53:00 +0000
asID:                     52468
IP address blocks:        187.108.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 11:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:7f:52:ee:c4:3a:55:55:83:23:21:c8:af:0d:dd:31:39:e2:38:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jun  6 19:48:00 2024 GMT
            Not After : Jun  5 19:53:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3f:03:e9:0c:fd:1d:53:10:c9:bb:bf:bf:fa:
                    46:a3:d8:df:c5:e4:6c:64:21:b6:f8:32:4d:3d:48:
                    e6:3d:50:8d:5c:00:ab:9d:05:d0:3e:cb:7c:ff:4c:
                    06:bf:c6:76:f0:f5:06:a2:49:78:04:e7:fd:03:cd:
                    fc:46:4a:72:62:3b:16:29:33:4c:23:3a:1f:66:de:
                    28:7d:a1:9d:55:24:92:0f:ad:5c:62:ed:04:ff:6e:
                    1c:b3:77:5a:b6:ae:b1:1e:46:66:65:96:66:95:31:
                    44:40:ef:8f:c1:21:70:e3:75:28:5c:1e:d2:e5:95:
                    0f:34:f1:dc:48:f4:7a:bc:3f:85:3d:f5:38:81:26:
                    ec:d9:cb:00:b7:3f:b9:35:40:8f:69:e5:83:4e:8f:
                    9b:9a:2a:8c:99:a7:4b:75:e8:f9:72:d2:a7:80:ab:
                    18:71:c0:e6:17:9a:a7:8a:34:9f:89:29:cc:7a:85:
                    e0:35:70:64:4c:c8:93:9e:f8:b0:40:d0:e1:6a:2b:
                    ca:d6:fb:eb:00:cf:b7:03:53:5c:be:ee:b3:e5:f1:
                    95:2e:57:ee:fc:9d:0b:b4:68:52:46:32:15:45:e4:
                    b6:61:1c:90:4a:90:f5:2a:01:24:48:72:69:30:38:
                    ca:5d:8a:32:13:1c:ac:3c:15:22:22:1d:98:f5:ac:
                    81:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2D:A6:02:22:3D:7F:21:4B:53:AD:BC:01:44:42:74:06:FD:15:BD
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233322e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:29:07:21:52:43:ca:bc:5d:81:40:5c:9e:57:6a:7b:a4:92:
         8b:35:1f:26:66:36:3d:85:41:3c:57:48:2c:40:14:67:65:4a:
         17:54:f8:81:df:50:60:6a:25:e3:ee:ed:1b:00:2f:2c:b0:8b:
         f6:8e:2f:26:9e:80:46:17:92:fc:1e:bb:63:3d:1a:52:fe:5a:
         f0:bc:ee:13:cb:51:5c:b0:84:1d:f4:21:40:dc:0f:d8:49:30:
         df:d8:4e:bd:e1:de:85:cb:81:a5:b0:83:61:83:5a:8e:25:f8:
         20:45:e6:6c:08:3d:9e:85:a1:f0:54:ad:f8:93:21:cf:5e:9a:
         35:2f:16:91:fc:57:4b:f4:d0:76:b5:da:f9:89:90:b5:46:9b:
         26:67:45:e0:8f:df:7d:c5:7d:c7:28:e7:58:51:1d:b3:ed:d1:
         4e:f4:29:07:d0:17:c9:ae:d1:da:2b:23:a7:44:97:ac:55:9b:
         0b:a7:ce:e6:56:cd:28:75:57:97:11:ee:5f:9b:3a:a6:bb:39:
         d8:93:a8:31:95:4f:b1:bc:71:c1:1c:a9:f7:00:38:f7:1a:4f:
         96:b6:71:da:70:1b:75:b4:9a:04:fc:37:6a:37:d3:ed:8d:ff:
         3a:98:83:ec:39:a9:84:d8:a0:37:de:33:24:81:c9:3b:3c:a9:
         e8:26:84:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:21 2024 by rpki-client on console-fra.rpki-client.org