Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233352e302f32342d3234203d3e203532343638.roa
File:                     3138372e3130382e3233352e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          WZvuynAOE0HGfhqd/I9RWwDB1feSkDS8quVGwdgGDw0=
Subject key identifier:   14:EC:31:F5:08:D8:18:97:EE:33:3A:B1:96:CF:BB:91:87:02:5B:B7
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       1C28DC2CD6341AC4D33243C0944A67AF4C38B6F2
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233352e302f32342d3234203d3e203532343638.roa
Signing time:             Thu 06 Jun 2024 19:53:03 +0000
ROA not before:           Thu 06 Jun 2024 19:48:03 +0000
ROA not after:            Thu 05 Jun 2025 19:53:03 +0000
asID:                     52468
IP address blocks:        187.108.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 12:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:28:dc:2c:d6:34:1a:c4:d3:32:43:c0:94:4a:67:af:4c:38:b6:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jun  6 19:48:03 2024 GMT
            Not After : Jun  5 19:53:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1c:71:5b:34:e5:1d:1e:15:a0:99:e2:8d:f2:
                    17:89:de:93:2a:69:ee:e4:b0:b8:56:d0:04:2d:5d:
                    38:5f:d8:6d:45:e3:42:61:6c:4d:45:42:22:8a:69:
                    56:85:76:34:38:a9:ee:e6:96:04:9c:50:3d:10:6a:
                    af:42:4b:85:90:3f:79:b3:ba:9d:48:0d:85:ef:18:
                    96:45:62:f6:20:50:57:6d:44:79:41:bf:18:4c:b2:
                    c1:56:ca:85:c2:c6:18:f0:02:c1:47:90:10:69:e3:
                    55:c1:29:07:26:b7:df:6d:93:de:ea:29:e1:47:ce:
                    16:66:5a:c6:eb:33:4a:72:96:0b:dd:fc:c6:0d:39:
                    eb:c4:9f:a6:46:f7:52:bc:64:ce:a0:0c:dd:61:85:
                    d8:0b:d4:60:0c:6e:fe:83:f2:54:57:ad:67:59:13:
                    1c:9e:58:24:63:88:08:ec:77:29:49:5d:1b:09:07:
                    05:11:8d:bd:0c:4c:32:ee:f0:db:86:54:36:74:e1:
                    a9:8c:08:0c:bb:5a:7f:e2:cc:7e:3f:23:ff:8b:ca:
                    10:01:fe:2d:ca:8e:44:12:1a:4c:8d:1f:6b:f7:5b:
                    67:a6:7d:c5:3e:b9:84:f8:6b:c5:02:b4:95:28:3e:
                    cd:f2:d6:05:95:11:36:9e:24:6e:cc:62:23:58:cb:
                    5d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EC:31:F5:08:D8:18:97:EE:33:3A:B1:96:CF:BB:91:87:02:5B:B7
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233352e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:c4:b3:2c:87:06:79:3d:7b:b3:97:89:74:fe:c6:60:4e:f8:
         5b:0f:ec:de:88:e9:f9:59:b1:b1:81:3e:21:ee:ad:d3:41:5d:
         2d:66:e5:44:59:61:f1:fd:27:1c:93:0c:ff:ed:4f:03:0b:35:
         b2:91:90:14:f4:87:85:37:d5:63:0a:cf:d0:d6:5b:cc:ce:07:
         03:e7:a8:88:f8:69:ab:be:1c:85:04:c8:01:96:3e:0c:fc:d7:
         a1:6d:a2:5c:81:de:9c:35:c9:04:33:d0:94:7a:00:2e:8a:eb:
         16:e2:3c:25:06:83:18:3a:ae:06:8b:2f:c2:6f:6c:7e:ad:8d:
         25:4b:88:f8:6c:b5:f7:c8:10:e8:0a:c0:21:94:94:55:4f:d8:
         af:5f:0f:8e:db:d9:09:6f:89:8e:2c:0a:f0:2d:09:74:74:e4:
         bd:ac:8b:6f:fd:71:17:1f:c7:1c:d4:f1:4a:99:c3:32:44:20:
         fa:35:ba:18:a3:da:4b:99:08:12:e2:04:cf:c1:d9:e1:5e:95:
         34:3f:33:26:d9:c7:9b:77:04:fc:45:93:c3:50:4e:36:91:45:
         a1:59:d7:b4:db:a1:87:12:33:8e:1b:e0:a4:c9:d6:31:4e:40:
         5d:13:2a:1b:d7:f6:5a:76:0c:45:bd:1f:15:6c:c9:1a:0b:6c:
         e2:fb:10:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 13:47:59 2024 by rpki-client on console-ams.rpki-client.org