Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233342e302f32342d3234203d3e203532343638.roa
File:                     3138372e3130382e3233342e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          1xTW01zCZuHi181UGj4N8WRUSwjLYcrNhoQRRIne1j0=
Subject key identifier:   B9:46:06:D6:47:33:DF:AD:2D:F1:09:F3:03:B5:F4:A1:C3:21:1B:2D
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       1BDD45F9613E6A9E8198700E9CB8BBB6B008E636
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233342e302f32342d3234203d3e203532343638.roa
Signing time:             Thu 06 Jun 2024 19:53:02 +0000
ROA not before:           Thu 06 Jun 2024 19:48:02 +0000
ROA not after:            Thu 05 Jun 2025 19:53:02 +0000
asID:                     52468
IP address blocks:        187.108.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 12:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:dd:45:f9:61:3e:6a:9e:81:98:70:0e:9c:b8:bb:b6:b0:08:e6:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jun  6 19:48:02 2024 GMT
            Not After : Jun  5 19:53:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:80:e8:a5:14:d0:b6:25:bf:ae:00:a6:87:3c:
                    d1:48:d8:3c:80:94:7d:e6:09:80:51:b1:df:82:b5:
                    8a:9a:b7:cd:31:33:af:b8:96:05:ca:7c:14:c5:12:
                    37:e6:c8:42:69:c3:34:6c:6f:48:c8:5a:40:d2:61:
                    63:25:70:6e:2b:cd:13:41:8d:bc:4d:ce:95:76:0c:
                    c9:45:2a:23:2a:4b:02:eb:44:5a:64:76:b8:66:68:
                    18:cd:b7:da:8f:e1:35:32:99:26:8a:b9:0d:58:7f:
                    50:f5:2b:ac:cb:ef:ae:45:5a:c3:84:0e:3b:32:68:
                    a5:e7:c1:3e:0f:56:74:7e:3f:91:26:5e:de:cb:b9:
                    0e:80:38:a9:60:af:03:86:16:81:49:f9:39:b5:bd:
                    68:b9:1b:07:ba:3c:c6:b2:82:1c:2f:31:9a:3b:0a:
                    ef:37:61:6c:56:38:d3:be:6a:05:4c:42:f8:87:10:
                    8f:be:1e:9e:06:b7:2b:64:dc:af:19:38:3a:d4:c2:
                    1c:26:24:3e:96:0c:b0:29:72:f9:6d:31:31:cb:59:
                    cd:7c:4e:e8:9c:0d:ca:e4:7e:8c:47:24:ce:ca:d5:
                    64:c1:08:a1:48:68:d2:32:44:2f:01:3f:b5:c9:72:
                    74:f5:0b:80:6d:b7:03:4a:26:f0:67:95:c3:0f:23:
                    4d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:46:06:D6:47:33:DF:AD:2D:F1:09:F3:03:B5:F4:A1:C3:21:1B:2D
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233342e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:c6:47:e0:ab:c9:ab:d6:42:7c:94:40:56:51:90:b1:fc:04:
         2d:e6:58:99:f1:ab:b1:17:1b:78:76:b8:cf:3e:96:c9:d7:f5:
         30:48:1c:93:8b:2e:87:67:df:f0:ac:2c:bc:c9:1e:71:00:e5:
         07:0f:8d:30:e5:9b:fa:88:9a:5e:cc:0a:11:47:e6:1a:09:20:
         68:7c:06:2d:fc:5b:b8:7e:34:6f:e4:4e:b2:85:9c:86:1f:ac:
         95:3b:00:b3:2b:13:7b:c7:d6:7d:2c:6c:b6:a5:5c:af:2a:d0:
         6c:5d:af:44:0c:33:ac:ff:27:a4:53:51:5b:de:1d:ed:91:15:
         dd:31:89:87:4b:fe:63:88:85:02:d5:f2:fb:04:1f:61:57:8e:
         0f:d9:a9:b8:b7:2a:80:0c:a5:34:64:c3:d6:3a:fd:b1:d5:1e:
         13:43:f8:1c:52:a3:65:21:0f:2f:f9:ce:e6:85:18:23:fc:41:
         fd:86:02:89:e8:a5:33:c8:35:35:86:75:c4:7a:f1:4f:9f:67:
         dd:13:fe:ac:d0:7d:8a:a5:03:79:94:e1:2b:61:0b:5f:f7:02:
         91:e2:e5:51:20:9b:f9:61:70:b6:95:87:34:6a:a3:39:bd:98:
         dc:b6:cd:d3:6c:27:2d:31:c1:e8:3c:87:3a:c2:ce:d1:6f:8a:
         c6:55:ec:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 12:35:55 2024 by rpki-client on console-fra.rpki-client.org