Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233332e302f32342d3234203d3e203238313234.roa
File:                     3138372e3130382e3233332e302f32342d3234203d3e203238313234.roa (raw, json)
Hash identifier:          FM3bS/r5VPIq45xHWtjhWxNfz+nTmg4chRKGkE2Kqxo=
Subject key identifier:   62:07:7B:5E:C9:BA:56:B5:B8:B9:97:3E:94:0E:61:15:D8:EC:AB:78
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       3C8C8054296C0DB480C6AD37096FE424B1845864
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233332e302f32342d3234203d3e203238313234.roa
Signing time:             Tue 11 Feb 2025 12:13:04 +0000
ROA not before:           Tue 11 Feb 2025 12:08:04 +0000
ROA not after:            Tue 10 Feb 2026 12:13:04 +0000
asID:                     28124
IP address blocks:        187.108.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 15:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:8c:80:54:29:6c:0d:b4:80:c6:ad:37:09:6f:e4:24:b1:84:58:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Feb 11 12:08:04 2025 GMT
            Not After : Feb 10 12:13:04 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:10:01:5a:61:78:31:ee:fd:2e:44:04:63:41:
                    30:0f:7c:9b:b2:b7:47:c2:77:98:32:8d:33:f7:8d:
                    70:27:a4:61:b5:d7:42:ad:27:90:4f:28:39:97:96:
                    3c:f1:94:e2:35:6d:05:d8:4c:e5:f6:68:e3:ae:b8:
                    e2:ff:ee:96:c0:6e:51:df:e3:9c:43:31:02:db:3e:
                    43:51:3b:f3:ce:da:2d:04:8c:7f:9e:cb:57:ef:42:
                    44:51:81:98:ca:55:15:ac:37:3a:a2:cf:62:a0:40:
                    f2:65:7b:f5:fa:be:fb:a3:54:e0:ac:21:76:6c:3f:
                    d0:bd:9c:99:07:82:bd:d2:72:2d:74:17:cb:e0:9d:
                    4c:b3:fb:cf:18:7e:28:5c:e6:26:b0:1e:a5:32:60:
                    d8:9d:57:b3:7f:28:b8:09:9d:66:ea:be:bd:c7:59:
                    37:b8:3d:8d:e6:e5:07:c3:ce:79:fb:ef:75:56:92:
                    1c:1d:56:2d:0f:c5:20:cf:a0:84:a1:37:85:b8:46:
                    64:c3:b4:b5:40:5b:51:0c:9f:e7:4d:00:2d:a5:f8:
                    70:02:1b:c8:48:43:8d:1a:e3:cb:00:39:21:e1:5c:
                    ce:b6:27:65:c1:43:0a:5e:a8:9c:00:9f:13:a9:21:
                    d1:93:0f:a8:e2:97:53:0d:cf:b5:56:52:a9:7f:aa:
                    96:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:07:7B:5E:C9:BA:56:B5:B8:B9:97:3E:94:0E:61:15:D8:EC:AB:78
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233332e302f32342d3234203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:60:ff:cc:32:11:96:7f:56:a5:6e:fb:59:d0:0c:33:ad:c9:
         c4:af:f2:8a:55:04:74:2d:be:0e:44:6c:34:02:73:6b:33:c5:
         1e:de:3f:27:ea:f8:0e:83:11:50:f0:9d:3a:51:c6:17:ca:16:
         00:e2:b6:ed:2b:1b:4f:3f:3d:71:7d:cb:f6:fc:fe:35:44:47:
         e9:19:55:c8:fc:4c:64:85:bc:6b:4a:f2:95:b0:78:25:00:da:
         02:8f:fd:8f:a0:94:33:c0:7b:03:d1:de:c7:3a:23:e6:27:c6:
         e6:69:05:72:dd:26:e9:8f:5c:16:d7:73:a4:1b:36:ca:ba:9a:
         31:96:aa:bc:f4:0a:1c:d9:3e:d6:70:b5:6b:fe:e5:90:8f:a3:
         32:d2:f7:7d:08:95:a5:8d:a2:b6:d1:26:17:d3:8d:25:8f:f4:
         e0:a1:9b:64:04:86:cb:ce:52:22:08:89:fe:dd:4c:66:26:71:
         4c:4e:dd:05:0c:f9:24:e0:46:7d:43:e9:e4:dc:92:07:50:4c:
         ca:70:3e:14:8d:89:52:cc:d2:9f:57:e1:6b:31:d2:f8:96:97:
         e9:2c:64:6a:ec:ff:6e:5c:2c:ff:15:d9:39:8e:6c:c7:a8:5c:
         f7:19:09:ca:c0:4a:49:bb:6b:2c:31:31:71:43:b5:7e:46:4a:
         ba:76:5d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:12:26 2025 by rpki-client