Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030303a3a2f33332d3333203d3e203532343638.roa
File:                     323830343a326237383a383030303a3a2f33332d3333203d3e203532343638.roa (raw, json)
Hash identifier:          vLhJ+mH0ercZG4yCBjwbscEaXiVUU7fJ+BS43mWKztI=
Subject key identifier:   13:A8:30:A4:BE:B7:BF:46:2A:F3:AE:DE:15:13:8A:04:2B:16:55:7A
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       78F1885303031F731D1A16CFD8EECF368C2645D4
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030303a3a2f33332d3333203d3e203532343638.roa
Signing time:             Thu 06 Jun 2024 19:53:02 +0000
ROA not before:           Thu 06 Jun 2024 19:48:02 +0000
ROA not after:            Thu 05 Jun 2025 19:53:02 +0000
asID:                     52468
IP address blocks:        2804:2b78:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 12:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f1:88:53:03:03:1f:73:1d:1a:16:cf:d8:ee:cf:36:8c:26:45:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jun  6 19:48:02 2024 GMT
            Not After : Jun  5 19:53:02 2025 GMT
        Subject: CN=3082010A0282010100A8CEF47C6A39F76BAE7258EC3900A8F6024BFA11D2C76E46B800B396B50D35D4271ACEDF85BCAE485E22E2B7CE2C228CE8454B2A1E27624C80C5875C0EDA2F6D66B1FA9A3D08AB07BB7877BD4108A001635C5781F806F174C59A682EFB315DD5A87541CD9CA6D8ACB0E683CC3BA17D33363770252AC4CB735527CA2AFA170719B9C6159AD95C0C23D35580C122722A3F90CCF90EB896B400440EEB20F24FE7C4C57F364631E64B8BE40420B1B5C697B4402B6B80A7AC9159BC0BEFF458957E6C9E2F05BBBE57CEA1AF3681BBF89C46B8FD0D34BE235425E52832918B0BD61795B932DC5664612B97AF7377E43F9277318571004987A9074217075E7EB5E3045B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ce:f4:7c:6a:39:f7:6b:ae:72:58:ec:39:00:
                    a8:f6:02:4b:fa:11:d2:c7:6e:46:b8:00:b3:96:b5:
                    0d:35:d4:27:1a:ce:df:85:bc:ae:48:5e:22:e2:b7:
                    ce:2c:22:8c:e8:45:4b:2a:1e:27:62:4c:80:c5:87:
                    5c:0e:da:2f:6d:66:b1:fa:9a:3d:08:ab:07:bb:78:
                    77:bd:41:08:a0:01:63:5c:57:81:f8:06:f1:74:c5:
                    9a:68:2e:fb:31:5d:d5:a8:75:41:cd:9c:a6:d8:ac:
                    b0:e6:83:cc:3b:a1:7d:33:36:37:70:25:2a:c4:cb:
                    73:55:27:ca:2a:fa:17:07:19:b9:c6:15:9a:d9:5c:
                    0c:23:d3:55:80:c1:22:72:2a:3f:90:cc:f9:0e:b8:
                    96:b4:00:44:0e:eb:20:f2:4f:e7:c4:c5:7f:36:46:
                    31:e6:4b:8b:e4:04:20:b1:b5:c6:97:b4:40:2b:6b:
                    80:a7:ac:91:59:bc:0b:ef:f4:58:95:7e:6c:9e:2f:
                    05:bb:be:57:ce:a1:af:36:81:bb:f8:9c:46:b8:fd:
                    0d:34:be:23:54:25:e5:28:32:91:8b:0b:d6:17:95:
                    b9:32:dc:56:64:61:2b:97:af:73:77:e4:3f:92:77:
                    31:85:71:00:49:87:a9:07:42:17:07:5e:7e:b5:e3:
                    04:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A8:30:A4:BE:B7:BF:46:2A:F3:AE:DE:15:13:8A:04:2B:16:55:7A
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030303a3a2f33332d3333203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         0f:ca:d6:19:06:d0:d5:6e:9c:ed:26:6a:b2:ac:ce:a3:a4:10:
         9b:00:98:a6:79:70:c1:7a:b7:52:a0:a0:e9:79:6b:3b:ff:5f:
         a3:08:09:4a:f5:7b:f7:24:b4:59:53:c4:81:f5:3a:21:68:51:
         38:7c:39:1c:19:45:ea:8a:d0:fc:4d:ea:86:cf:63:ca:f4:79:
         e1:a9:2d:00:b6:92:f7:1a:3e:69:57:a5:b4:f3:9b:b2:d5:08:
         00:84:ad:dc:bf:78:61:95:82:95:62:ac:23:6b:6b:a4:22:2e:
         58:47:af:db:01:81:19:ea:d7:c0:7d:39:42:38:9d:68:b2:b0:
         3a:be:6b:10:e2:24:99:60:63:0d:f7:fc:83:d4:42:2c:27:f9:
         00:0b:47:c9:2b:2d:c2:01:78:d7:98:7c:2f:20:05:02:7a:d3:
         02:0f:ae:74:1f:96:f5:66:98:a5:53:af:25:50:50:af:57:6c:
         84:34:e7:ad:bf:46:d1:47:01:d0:06:03:5d:e8:be:99:3b:1b:
         58:af:f0:06:44:ba:82:6f:ea:f8:38:80:f0:98:c7:42:00:37:
         84:e8:3f:9e:5d:21:43:e1:97:da:ce:55:fc:d7:17:26:ff:9e:
         3d:3b:8a:d3:d9:e0:43:bf:ec:e2:96:33:fd:a6:c8:b0:ee:3d:
         ee:74:53:e6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jul 1 13:47:59 2024 by rpki-client on console-ams.rpki-client.org