Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233372e302f32342d3234203d3e203532343638.roa
File:                     3138372e3130382e3233372e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          sJQ/QUA923RfdQzPqPpgUX6Vb/VKxIDNf03dcWP2O2c=
Subject key identifier:   BE:D2:27:C7:25:A3:09:FF:38:B2:A7:B3:30:D5:71:D1:6B:B1:B5:ED
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       22F9175D2C71EB7A8D56EAA4F5B6A10472EFCFE5
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233372e302f32342d3234203d3e203532343638.roa
Signing time:             Fri 18 Oct 2024 20:31:45 +0000
ROA not before:           Fri 18 Oct 2024 20:26:45 +0000
ROA not after:            Fri 17 Oct 2025 20:31:45 +0000
asID:                     52468
IP address blocks:        187.108.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 11:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f9:17:5d:2c:71:eb:7a:8d:56:ea:a4:f5:b6:a1:04:72:ef:cf:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Oct 18 20:26:45 2024 GMT
            Not After : Oct 17 20:31:45 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:88:3e:25:ec:c6:34:b6:6a:58:f1:5e:87:d6:
                    dc:c8:b2:d9:2a:62:42:bc:52:5f:67:5d:fa:d6:4f:
                    cd:28:7c:1f:c6:a6:02:a8:24:34:9e:1e:97:2c:fb:
                    ac:c5:92:6d:f4:ec:0b:b5:0a:7b:fb:75:a4:72:53:
                    30:7b:32:1d:41:14:e3:f5:ed:01:54:e6:46:6c:1a:
                    52:4d:20:36:dd:46:b6:0b:16:7d:16:a4:5c:f9:6b:
                    71:6a:12:9d:b6:80:31:3c:65:a2:6e:1c:d7:8e:46:
                    3d:90:cb:b9:1a:a8:fe:b1:bc:02:0a:bf:8c:c4:af:
                    d5:11:ce:ea:bb:0b:ff:30:37:84:26:9a:25:85:29:
                    20:da:48:eb:07:e5:40:41:2b:aa:b7:91:c8:97:82:
                    3a:a6:94:cb:1d:f0:a7:fd:5f:e5:5a:e6:82:c0:99:
                    57:68:6f:34:fd:d1:0a:69:4b:b6:fb:b6:a1:f8:7c:
                    d6:34:83:4d:d0:2c:c3:4e:b7:96:83:82:46:91:d9:
                    69:b5:09:bf:f9:08:3e:e4:6a:68:6e:18:a3:aa:ac:
                    07:17:01:54:d0:49:80:14:08:44:df:f1:0c:de:05:
                    e3:58:73:5e:13:af:19:a7:30:be:e0:80:ef:b9:e8:
                    f3:fb:59:3f:1a:49:40:58:85:9c:fe:70:7d:b3:62:
                    35:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D2:27:C7:25:A3:09:FF:38:B2:A7:B3:30:D5:71:D1:6B:B1:B5:ED
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233372e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:0d:08:f2:71:6e:d4:31:b9:67:a1:f4:33:2b:62:11:00:2c:
         1a:8e:f3:34:7e:59:f5:df:3d:57:16:cb:e8:dc:77:65:2e:a7:
         5a:36:3e:4d:26:da:07:b3:ca:74:f2:09:39:7d:fc:49:bb:37:
         70:78:3a:4e:e9:22:e4:b3:1d:b8:32:cc:65:ec:4d:6b:aa:9b:
         bb:cc:1d:b1:b3:3e:77:66:4b:da:92:62:d7:3b:7f:9c:b4:59:
         3c:d9:37:98:26:cc:e3:b2:44:0d:3e:32:64:d7:e1:4a:d5:33:
         2c:69:59:ac:59:6b:94:79:28:fa:85:95:30:fa:b9:62:ff:f5:
         60:7c:73:2a:b0:e3:f3:9e:dc:09:0e:3a:cf:ef:f0:28:7e:01:
         35:d1:6f:16:1e:3b:88:fd:d9:d8:b1:6a:33:70:59:49:6a:83:
         7f:48:05:d9:b8:75:ed:fe:e6:15:79:73:16:95:c1:cf:06:54:
         57:21:8d:b8:77:97:ea:78:ba:10:9e:c0:5b:00:01:5e:1e:26:
         15:48:60:5e:67:80:d3:52:91:4d:50:84:c3:63:ad:d5:a7:10:
         b9:31:ac:31:8e:cf:75:c3:53:4a:6e:da:4a:55:b3:f4:bc:42:
         41:41:dc:f6:70:d4:33:62:69:31:80:c2:b7:90:f0:37:4e:1a:
         98:2d:9b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:21 2024 by rpki-client on console-fra.rpki-client.org