Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233362e302f32342d3234203d3e203238313234.roa
File:                     3138372e3130382e3233362e302f32342d3234203d3e203238313234.roa (raw, json)
Hash identifier:          bUnUs5VlDy2vVA1/JdcJ5XrhsAM6diXZc9XA5NBxvZY=
Subject key identifier:   3B:C4:CC:33:36:2D:0D:6A:C2:CC:CF:3A:49:8E:50:13:CE:02:1B:CF
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       4F877615AEEAB7A408638526EB4D8F4BB4C1B9F7
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233362e302f32342d3234203d3e203238313234.roa
Signing time:             Tue 11 Feb 2025 12:13:38 +0000
ROA not before:           Tue 11 Feb 2025 12:08:38 +0000
ROA not after:            Tue 10 Feb 2026 12:13:38 +0000
asID:                     28124
IP address blocks:        187.108.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:87:76:15:ae:ea:b7:a4:08:63:85:26:eb:4d:8f:4b:b4:c1:b9:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Feb 11 12:08:38 2025 GMT
            Not After : Feb 10 12:13:38 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f3:ac:76:75:13:f1:15:23:0e:6e:13:78:d6:
                    99:b5:62:99:41:b3:8a:94:ec:9e:3c:2c:f3:64:ef:
                    9a:90:35:2c:f9:2f:26:1e:61:8f:fa:dd:cf:8d:33:
                    44:b5:89:72:7e:20:35:3c:05:5a:b0:86:4f:95:41:
                    c3:85:f1:65:c4:2b:42:3d:dd:6a:44:4c:e2:f8:cc:
                    51:8d:6c:8b:e9:6c:e3:d7:e4:02:ab:f4:1c:04:e8:
                    43:ae:9b:8e:1d:58:30:b1:f3:33:f9:d0:b0:55:b2:
                    cb:d9:8c:14:67:9f:c3:88:a1:ea:6d:21:13:a9:53:
                    a4:6d:63:83:1b:5f:1f:b0:7d:2b:c0:b4:02:87:37:
                    02:8e:ce:05:e3:90:46:12:fe:13:c1:ee:ef:39:69:
                    e8:78:85:0a:29:76:27:a4:55:e8:79:2e:00:0a:11:
                    dc:fd:df:ed:39:ac:e6:cb:ee:81:2a:16:93:01:35:
                    00:dd:c1:93:96:96:18:4e:9b:a9:c3:d2:ea:3c:4c:
                    3c:dc:16:f1:13:a2:47:72:a5:9a:5f:c2:52:43:5b:
                    a6:3e:dd:fb:4e:ff:80:0d:95:6e:a6:48:02:f0:5a:
                    fd:ef:1f:a6:34:e5:de:f8:ae:cc:7d:56:8a:c5:ba:
                    2b:99:f3:5e:ca:6d:85:7e:ab:e8:27:d4:59:20:23:
                    39:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C4:CC:33:36:2D:0D:6A:C2:CC:CF:3A:49:8E:50:13:CE:02:1B:CF
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233362e302f32342d3234203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:35:20:b3:c7:e4:56:b1:fb:09:fe:e7:0e:80:a2:42:22:f0:
         5f:46:47:b8:24:0a:5c:2b:21:1c:4d:92:cc:49:7b:3f:5d:59:
         3e:74:29:24:f4:75:db:40:22:90:6a:2b:4e:bb:40:cc:e7:47:
         a5:9e:1e:a4:4d:ea:fa:95:c7:10:77:17:70:d6:d6:45:f2:9e:
         98:74:2a:33:c2:b1:76:fc:ba:ce:04:0b:bc:97:4c:36:5e:68:
         57:8a:b9:41:aa:04:68:98:04:6b:ab:70:65:88:c9:a6:85:12:
         8f:e5:b9:87:90:0d:ac:66:0b:66:84:c7:4a:42:47:3e:74:c4:
         8b:5a:1d:d2:c5:c7:9f:b5:8e:3d:58:ef:41:fa:03:6a:60:31:
         6d:77:e2:d9:93:b9:88:c8:77:48:ee:03:4d:7c:93:6f:02:87:
         72:4d:af:fa:ae:d7:4b:a5:54:45:2c:1c:42:2e:af:97:5b:e4:
         41:49:ae:10:1b:d1:79:a8:3b:7f:24:1b:c6:f8:fb:ee:aa:7d:
         52:2e:cf:8b:8e:13:2b:de:59:0a:e2:a7:db:cd:e0:91:74:a9:
         6e:08:32:08:49:d6:29:40:54:32:ae:d3:69:d5:31:f4:e3:ab:
         60:56:6f:53:ae:fe:08:a5:20:92:cc:fa:79:a1:d1:95:96:4f:
         41:8f:2f:6f
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUT4d2Fa7qt6QIY4Um602PS7TBufcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyNDhDODBFQTVDNEM1Nzc5QzEyOTcxMjFEMEJEOEQy
REMzNzlGMDAeFw0yNTAyMTExMjA4MzhaFw0yNjAyMTAxMjEzMzhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjBGM0FDNzY3NTEzRjExNTIz
MEU2RTEzNzhENjk5QjU2Mjk5NDFCMzhBOTRFQzlFM0MyQ0YzNjRFRjlBOTAzNTJD
RjkyRjI2MUU2MThGRkFERENGOEQzMzQ0QjU4OTcyN0UyMDM1M0MwNTVBQjA4NjRG
OTU0MUMzODVGMTY1QzQyQjQyM0RERDZBNDQ0Q0UyRjhDQzUxOEQ2QzhCRTk2Q0Uz
RDdFNDAyQUJGNDFDMDRFODQzQUU5QjhFMUQ1ODMwQjFGMzMzRjlEMEIwNTVCMkNC
RDk4QzE0Njc5RkMzODhBMUVBNkQyMTEzQTk1M0E0NkQ2MzgzMUI1RjFGQjA3RDJC
QzBCNDAyODczNzAyOEVDRTA1RTM5MDQ2MTJGRTEzQzFFRUVGMzk2OUU4Nzg4NTBB
Mjk3NjI3QTQ1NUU4NzkyRTAwMEExMURDRkRERkVEMzlBQ0U2Q0JFRTgxMkExNjkz
MDEzNTAwRERDMTkzOTY5NjE4NEU5QkE5QzNEMkVBM0M0QzNDREMxNkYxMTNBMjQ3
NzJBNTlBNUZDMjUyNDM1QkE2M0VEREZCNEVGRjgwMEQ5NTZFQTY0ODAyRjA1QUZE
RUYxRkE2MzRFNURFRjhBRUNDN0Q1NjhBQzVCQTJCOTlGMzVFQ0E2RDg1N0VBQkU4
MjdENDU5MjAyMzM5RUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsPOsdnUT8RUjDm4TeNaZtWKZQbOKlOyePCzzZO+akDUs+S8mHmGP
+t3PjTNEtYlyfiA1PAVasIZPlUHDhfFlxCtCPd1qREzi+MxRjWyL6Wzj1+QCq/Qc
BOhDrpuOHVgwsfMz+dCwVbLL2YwUZ5/DiKHqbSETqVOkbWODG18fsH0rwLQChzcC
js4F45BGEv4Twe7vOWnoeIUKKXYnpFXoeS4AChHc/d/tOazmy+6BKhaTATUA3cGT
lpYYTpupw9LqPEw83BbxE6JHcqWaX8JSQ1umPt37Tv+ADZVupkgC8Fr97x+mNOXe
+K7MfVaKxbormfNeym2FfqvoJ9RZICM57wIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FDvEzDM2LQ1qwszPOkmOUBPOAhvPMB8GA1UdIwQYMBaAFK4kjIDqXExXecEpcSHQ
vY0tw3nwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzEvQUUyNDhDODBFQTVDNEM1
Nzc5QzEyOTcxMjFEMEJEOEQyREMzNzlGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BRTI0OEM4MEVBNUM0QzU3NzlDMTI5NzEyMUQwQkQ4RDJEQzM3
OUYwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8xLzMxMzgzNzJlMzEzMDM4MmUzMjMz
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzEzMjM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
u2zsMA0GCSqGSIb3DQEBCwUAA4IBAQCONSCzx+RWsfsJ/ucOgKJCIvBfRke4JApc
KyEcTZLMSXs/XVk+dCkk9HXbQCKQaitOu0DM50elnh6kTer6lccQdxdw1tZF8p6Y
dCozwrF2/LrOBAu8l0w2XmhXirlBqgRomARrq3BliMmmhRKP5bmHkA2sZgtmhMdK
Qkc+dMSLWh3SxceftY49WO9B+gNqYDFtd+LZk7mIyHdI7gNNfJNvAodyTa/6rtdL
pVRFLBxCLq+XW+RBSa4QG9F5qDt/JBvG+Pvuqn1SLs+LjhMr3lkK4qfbzeCRdKlu
CDIISdYpQFQyrtNp1TH046tgVm9Trv4IpSCSzPp5odGVlk9Bjy9v
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:05:23 2025 by rpki-client