Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233342e302f32332d3233203d3e203532343638.roa
File:                     3138372e3130382e3233342e302f32332d3233203d3e203532343638.roa (raw, json)
Hash identifier:          0rdwxBG6Rcls0AXNLHc/2pTyljSxtixUQTbUrVtZKmo=
Subject key identifier:   40:E0:6B:35:BD:CA:91:33:A7:36:0E:65:92:A3:FF:E5:39:A5:2B:27
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       665E1BEDEA65652D4AB7BF31EAEAF91D5368632B
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233342e302f32332d3233203d3e203532343638.roa
Signing time:             Sat 19 Oct 2024 15:29:31 +0000
ROA not before:           Sat 19 Oct 2024 15:24:31 +0000
ROA not after:            Sat 18 Oct 2025 15:29:31 +0000
asID:                     52468
IP address blocks:        187.108.234.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 11:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5e:1b:ed:ea:65:65:2d:4a:b7:bf:31:ea:ea:f9:1d:53:68:63:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Oct 19 15:24:31 2024 GMT
            Not After : Oct 18 15:29:31 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cb:e6:9a:3e:89:30:1d:54:ea:07:94:de:dd:
                    25:0e:a4:cf:a6:e1:c7:97:49:d9:23:d5:6b:bc:53:
                    ba:cf:9a:0d:15:f0:27:44:2d:0f:ba:f4:2e:92:7d:
                    a6:9e:3e:3f:b8:46:b8:27:d3:63:43:b5:76:b2:7b:
                    d1:39:66:aa:82:01:51:de:30:86:45:92:8f:4b:0f:
                    3b:f8:65:d4:6c:68:84:ae:74:92:7a:80:72:8d:08:
                    de:30:d2:4e:b8:6c:7e:61:ef:5a:98:fe:01:4d:6e:
                    b1:c3:32:c2:c4:24:85:b6:f1:3d:32:21:b3:46:ae:
                    cb:3b:13:b5:24:55:71:a3:3e:7e:a8:aa:4c:8d:29:
                    ef:02:1c:f4:4a:7e:e8:d4:b3:ed:19:68:dc:7b:7a:
                    0a:50:3b:de:c6:37:53:13:f5:25:fc:2a:a0:6a:b2:
                    b0:78:1b:5b:4f:cd:12:70:e9:32:d3:e0:eb:c7:12:
                    a5:33:26:77:79:8f:d1:0b:45:69:e8:69:77:f3:cc:
                    a1:61:2a:d4:f5:1f:1d:ee:d0:4e:09:51:bd:f8:ba:
                    f3:23:32:62:54:17:c8:31:e8:23:8f:61:39:54:ad:
                    00:14:3d:44:fd:c2:5e:c1:71:19:92:63:cd:d2:3e:
                    13:1b:de:37:3b:bf:55:bf:d6:87:e0:2e:05:1d:16:
                    3a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E0:6B:35:BD:CA:91:33:A7:36:0E:65:92:A3:FF:E5:39:A5:2B:27
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233342e302f32332d3233203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:85:d8:36:ee:0e:9d:d7:42:a7:62:19:fe:df:c3:53:c7:c5:
         39:d5:5a:a9:04:43:ab:88:64:0a:4f:49:ec:dd:17:e7:46:76:
         52:e8:79:59:30:1b:09:db:90:bd:bb:df:5f:8a:3b:24:f6:b2:
         0a:7f:bc:a5:f7:6d:ff:1a:62:6d:34:68:85:0e:88:66:4c:34:
         fa:04:d1:3b:c3:3e:44:7b:2c:2d:cf:ca:12:21:3d:be:9f:7b:
         40:d8:55:60:41:9b:c7:f4:33:f3:79:68:55:e4:88:76:68:6f:
         6f:53:bb:33:b5:78:a7:a5:bc:83:82:11:48:bf:4d:13:d3:23:
         ae:a9:d4:78:38:16:a1:d9:95:16:18:52:60:b3:ae:f7:fe:5e:
         31:a6:18:8c:cc:f6:08:6b:07:26:ad:18:aa:74:d4:a8:91:fd:
         1b:7d:61:af:f2:9a:2b:6c:53:cb:4e:e4:e4:2b:2b:3d:74:1f:
         00:2a:1d:dc:bd:74:fe:f6:f9:41:84:49:e6:d6:cd:91:27:ed:
         66:06:ed:83:ee:59:1f:da:8d:24:c8:86:e5:cc:38:86:c9:1e:
         da:49:2a:3a:12:1c:f9:43:4a:0a:93:8a:37:41:fb:e2:d9:59:
         48:20:da:8c:4f:90:3e:20:1b:a5:6c:c8:f0:bc:bb:0a:47:bf:
         66:f5:98:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:21 2024 by rpki-client on console-fra.rpki-client.org