Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233392e302f32342d3234203d3e203532343638.roa
File:                     3138372e3130382e3233392e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          lbJbmfxF9oCyDqosGE31H3q9O1+N6W/BLhvj6G/K7+8=
Subject key identifier:   5D:B7:DF:61:05:E2:A5:0E:52:A3:F7:AF:C4:F4:E1:2B:28:04:57:6E
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       1D8457580D52D5397BE6C237C84AB091A956AEC7
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233392e302f32342d3234203d3e203532343638.roa
Signing time:             Thu 06 Jun 2024 19:53:00 +0000
ROA not before:           Thu 06 Jun 2024 19:48:00 +0000
ROA not after:            Thu 05 Jun 2025 19:53:00 +0000
asID:                     52468
IP address blocks:        187.108.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 11:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:84:57:58:0d:52:d5:39:7b:e6:c2:37:c8:4a:b0:91:a9:56:ae:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jun  6 19:48:00 2024 GMT
            Not After : Jun  5 19:53:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:98:ed:32:82:5f:f0:0f:1a:80:85:43:81:e4:
                    e9:69:8e:c8:9a:4a:07:4c:ad:7c:10:4d:d2:d9:5f:
                    bc:6d:3a:21:6f:80:57:87:f0:c5:90:df:14:20:fe:
                    77:7e:2f:33:b9:ba:db:d8:76:10:17:05:b8:6d:f1:
                    bb:33:ee:42:67:e2:4e:36:af:e9:c1:43:52:4f:da:
                    10:51:06:a4:b6:ff:1c:f4:48:82:a8:66:55:65:cd:
                    a1:43:b1:18:ad:9b:ec:74:c5:24:1f:ca:a8:95:bc:
                    04:4b:ef:36:1e:ed:af:2f:e2:8c:42:b4:ed:c8:e1:
                    6e:c6:15:98:89:9f:51:5d:4e:72:32:2e:a6:3a:5c:
                    70:c8:8d:41:a4:81:a2:98:35:cc:ac:a5:4b:5e:be:
                    a7:b6:a2:70:02:e8:2a:db:1d:ef:f4:c4:ae:91:c9:
                    1b:74:50:15:7c:34:b8:2b:89:77:f0:f8:b6:23:78:
                    53:93:0e:b7:b4:1b:2b:37:84:c1:b5:31:fd:1a:fb:
                    66:5a:c5:55:5e:3b:d0:e6:44:27:8b:d2:cb:3d:4d:
                    62:de:a4:3d:32:41:34:15:14:51:fe:a6:da:22:1f:
                    7f:45:af:61:9a:29:ec:76:dd:53:00:7a:6f:74:a4:
                    58:bd:89:4f:94:1e:15:e7:7a:a5:f9:f9:93:7a:e1:
                    ad:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B7:DF:61:05:E2:A5:0E:52:A3:F7:AF:C4:F4:E1:2B:28:04:57:6E
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233392e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:cc:5e:00:66:aa:ee:a3:f8:75:3a:6e:c2:6f:26:0d:8d:64:
         d2:77:02:a2:c8:72:61:a1:ff:31:6f:f2:30:86:0a:23:56:55:
         57:05:ec:86:51:fc:99:46:92:bb:5c:10:72:fb:dd:a6:7e:01:
         9c:d4:89:bd:2e:3a:4c:76:05:5b:4c:8a:31:72:d4:9b:79:43:
         04:d4:58:4e:53:ca:38:91:43:68:11:b0:2c:a3:ce:d0:e9:30:
         07:04:04:35:7c:58:1c:7b:e3:4c:20:d2:6e:e0:bb:ad:a7:25:
         88:c5:da:bc:6a:d1:f4:e1:9f:05:2a:66:74:97:c3:f2:08:38:
         28:bd:b2:1c:8b:6d:3d:c5:7b:f2:65:00:11:31:e2:72:55:6b:
         f6:04:a2:52:65:34:e9:79:c6:f7:6d:c5:24:f8:b6:32:76:56:
         f4:6c:6d:10:db:55:a5:6f:e3:39:50:2d:84:86:1b:38:31:46:
         20:32:2e:f8:4b:1b:4a:27:59:71:f1:63:44:d3:9d:4b:99:fb:
         8a:47:e8:26:1c:6f:94:17:a2:f6:52:cf:8d:9d:02:18:4e:9c:
         00:41:de:15:05:7e:e0:d2:7e:fd:fe:72:ec:5d:15:2c:bf:a6:
         fc:0b:f8:1f:e1:4e:67:b6:50:d4:9b:46:33:a6:21:5c:af:77:
         b4:d1:6b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:21 2024 by rpki-client on console-fra.rpki-client.org