Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233332e302f32342d3234203d3e203532343638.roa
File:                     3138372e3130382e3233332e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          LWaih/ruN4MNwfyxoMq9zgtOEmw40Jc1Q51pa6xYCxM=
Subject key identifier:   CE:BA:D1:AC:9D:03:C9:E6:8A:A2:D3:0B:D3:33:CC:2F:00:60:70:4B
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       562F04DF9B3B07889752348667F7DE2C6E170DE2
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233332e302f32342d3234203d3e203532343638.roa
Signing time:             Thu 06 Jun 2024 19:53:03 +0000
ROA not before:           Thu 06 Jun 2024 19:48:03 +0000
ROA not after:            Thu 05 Jun 2025 19:53:03 +0000
asID:                     52468
IP address blocks:        187.108.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 12:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:2f:04:df:9b:3b:07:88:97:52:34:86:67:f7:de:2c:6e:17:0d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jun  6 19:48:03 2024 GMT
            Not After : Jun  5 19:53:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:70:a2:1c:68:70:c7:73:69:23:d0:38:bf:f4:
                    3d:dd:eb:2e:18:bf:78:5f:72:20:a3:21:29:59:d2:
                    3e:07:fe:e1:e5:a2:92:48:e4:4a:0d:7d:f3:d5:26:
                    9b:ef:c5:42:0d:c6:f7:55:59:3d:17:40:7a:5f:67:
                    90:ef:c0:ab:24:9c:9f:9d:a5:f3:bd:50:82:e1:ab:
                    e1:2e:1c:28:20:b5:4b:4a:a8:83:1d:af:cb:a4:bb:
                    ab:16:3a:37:a8:49:ab:9e:75:7f:f6:d6:9d:fb:99:
                    3e:69:93:dc:4c:ce:bc:64:3f:66:26:3e:4c:45:2a:
                    bb:a2:26:a4:b9:8b:c0:28:2d:2b:34:bc:2b:ac:eb:
                    90:b9:c8:7b:1e:49:13:45:b1:10:18:d5:47:c5:04:
                    f2:37:b2:34:b7:1f:97:81:a6:8c:36:09:ed:8f:77:
                    f8:ea:48:39:2c:a2:21:d3:4b:d4:72:07:62:7d:bf:
                    e1:08:8e:0b:70:29:fa:db:19:5d:ec:14:d2:13:e6:
                    c5:d3:e0:7f:02:b9:8f:13:30:6e:22:2c:6d:93:e1:
                    c6:2b:9f:3a:1f:8c:78:28:7d:72:8e:1c:66:7e:3f:
                    5d:ef:08:ab:22:8c:0a:50:86:e8:3e:27:18:b2:bf:
                    73:16:d7:54:30:9d:48:bd:49:d8:f7:98:d5:c2:ac:
                    9e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:BA:D1:AC:9D:03:C9:E6:8A:A2:D3:0B:D3:33:CC:2F:00:60:70:4B
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233332e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:1f:3a:60:81:85:f8:18:e3:05:6c:a7:38:4f:c8:44:39:03:
         00:15:d9:2c:fb:2b:67:04:de:f1:0e:8d:64:57:ca:d6:4e:5f:
         0f:a2:9c:6c:8f:c3:fe:a4:c3:c8:1e:b3:5b:25:32:22:e8:d7:
         59:68:db:34:d8:97:c4:ec:b0:c0:a0:f2:83:46:5d:7c:a9:23:
         09:93:b6:86:9e:e4:ca:41:a2:c3:9b:63:83:71:26:99:71:c3:
         5d:3d:07:1b:43:b1:72:60:c4:d8:eb:76:db:6e:de:f1:a5:e9:
         0e:c9:b0:31:bb:5b:08:b1:a7:46:cf:ee:b6:dd:70:45:40:dd:
         9f:b2:41:9b:0d:70:3a:b2:d6:fc:a1:e4:b5:9e:37:42:2f:3a:
         b2:4e:49:55:02:20:c5:11:14:1f:29:e7:58:83:96:5d:a0:29:
         72:80:bc:3e:c9:05:93:7e:3f:16:db:86:01:23:b5:65:30:24:
         ea:a9:33:65:71:cb:42:0b:a6:9e:7d:66:bc:01:9f:41:8c:e4:
         f6:a6:be:65:7d:6e:38:6f:da:8e:12:d8:ad:52:4e:4f:31:22:
         2a:8b:c4:37:73:1c:27:b3:1a:8a:88:89:18:9b:b3:9e:00:b2:
         11:9b:b4:fb:74:b2:13:76:14:32:c6:08:57:d4:65:78:75:27:
         c2:66:d0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 12:35:55 2024 by rpki-client on console-fra.rpki-client.org