Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233382e302f32332d3233203d3e203532343638.roa
File:                     3138372e3130382e3233382e302f32332d3233203d3e203532343638.roa (raw, json)
Hash identifier:          NAjQ2lgi+OSJFpFvi6Aw91H2YzYmKxYFhtb2CnHT9Hg=
Subject key identifier:   02:EB:DE:07:21:BD:91:57:DA:11:FF:E3:18:33:20:AA:4C:8C:46:CE
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       404CCC83360908A930D321F8D1459A8F736420E5
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233382e302f32332d3233203d3e203532343638.roa
Signing time:             Sat 19 Oct 2024 15:29:48 +0000
ROA not before:           Sat 19 Oct 2024 15:24:48 +0000
ROA not after:            Sat 18 Oct 2025 15:29:48 +0000
asID:                     52468
IP address blocks:        187.108.238.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 11:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4c:cc:83:36:09:08:a9:30:d3:21:f8:d1:45:9a:8f:73:64:20:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Oct 19 15:24:48 2024 GMT
            Not After : Oct 18 15:29:48 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ba:7b:81:51:65:40:94:9b:40:83:80:a1:30:
                    c6:a8:72:7e:e3:7a:82:41:62:2b:23:be:f1:ce:15:
                    99:37:3a:ca:26:a7:db:94:61:b6:1d:3d:54:3e:71:
                    c9:3a:27:04:a7:9b:65:4c:ce:16:a2:8b:82:f0:40:
                    74:b7:c2:28:7a:70:e7:8a:01:5c:9f:7b:15:ee:16:
                    44:02:7c:c1:1c:29:ab:bc:d9:2b:52:ab:d8:ab:65:
                    1d:d0:63:7f:fb:5e:e5:72:e0:91:0e:e1:c4:bc:82:
                    37:36:f5:41:21:2d:9d:38:c6:cb:5d:75:e1:d5:a6:
                    28:18:98:93:fb:1c:62:62:ba:92:7d:ea:44:c2:2b:
                    fd:b6:d7:8e:81:10:92:e6:25:f0:6e:31:04:06:ea:
                    b4:10:b4:36:a8:b1:ae:83:85:1a:89:ff:dc:68:98:
                    71:5f:1a:fc:cf:6e:74:ee:c9:b6:33:88:55:c1:d8:
                    66:74:3f:42:93:ba:c0:10:b4:14:61:bc:c0:b6:56:
                    f9:a4:2a:e5:d3:a8:02:05:c2:44:c3:73:b3:05:aa:
                    05:77:86:2f:9a:72:5c:d6:92:c6:41:01:db:70:b9:
                    a1:ec:27:c5:d4:f8:6b:96:0a:ed:99:68:c6:69:f4:
                    a6:ac:e1:4c:43:83:2d:52:c7:45:4d:af:44:fd:1e:
                    0b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EB:DE:07:21:BD:91:57:DA:11:FF:E3:18:33:20:AA:4C:8C:46:CE
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233382e302f32332d3233203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:f8:92:eb:ea:38:22:9a:d5:e7:00:0f:19:ae:62:0a:7e:33:
         e2:e3:0d:9e:11:01:99:e6:03:c3:d3:d1:4e:4a:89:53:ea:e8:
         b2:fd:f1:a8:8c:06:7e:34:1f:79:c9:72:89:d6:80:d1:9a:07:
         be:18:3b:54:26:33:76:39:60:6b:2a:85:e1:f5:1e:e6:7d:4d:
         8f:d8:12:5e:8f:23:ea:68:f3:22:89:9b:b8:6c:39:c4:f1:04:
         98:ee:7b:a3:23:91:10:ae:36:c5:e1:b2:30:30:8e:65:24:a9:
         74:f2:33:20:89:48:4b:f2:99:bf:95:c6:83:a0:03:06:e1:4a:
         89:01:f9:09:a7:da:c6:43:7c:ca:0d:93:b6:e1:8d:0c:85:53:
         a8:11:f5:45:c2:9a:b1:cd:a4:46:b7:e8:31:e1:ab:e2:5f:fb:
         27:5b:c1:81:fd:71:6c:59:31:15:00:c3:68:92:c7:53:25:fc:
         64:04:ed:4f:df:05:d7:05:6f:50:55:c2:aa:41:70:82:c8:52:
         5a:55:56:4b:c4:16:42:f1:81:14:cf:23:b8:da:47:3a:23:f1:
         68:41:f5:89:b0:fb:49:9a:15:fb:48:ce:24:4e:d5:81:cc:6d:
         cb:e8:f1:cd:66:73:ee:52:0f:16:a6:fa:41:ee:0d:0b:f5:b1:
         db:c8:33:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:38:05 2024 by rpki-client on console-ams.rpki-client.org