Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030323a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383030323a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          VbAMe88Gts4c5DT4vO/LlKX3C3jWpGNpW/k4TD6sfbM=
Subject key identifier:   51:27:D0:C2:2D:F5:00:8B:EA:90:BB:D7:3D:DE:AC:A0:06:13:27:87
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       2844ED302A85DF243BE2CAE4B15C2105FA025522
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030323a3a2f34382d3438203d3e203532343638.roa
Signing time:             Thu 06 Jun 2024 19:53:00 +0000
ROA not before:           Thu 06 Jun 2024 19:48:00 +0000
ROA not after:            Thu 05 Jun 2025 19:53:00 +0000
asID:                     52468
IP address blocks:        2804:2b78:8002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 12:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:44:ed:30:2a:85:df:24:3b:e2:ca:e4:b1:5c:21:05:fa:02:55:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jun  6 19:48:00 2024 GMT
            Not After : Jun  5 19:53:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:2a:03:84:86:8a:d4:d8:51:c8:2b:cc:ee:78:
                    cd:9e:27:47:bf:e5:c4:a3:41:f0:12:d3:17:46:b0:
                    a2:18:30:fa:36:53:c8:f9:f3:60:92:a6:c6:e7:a1:
                    f8:40:63:84:74:02:8c:b1:47:1e:72:0b:ea:7a:01:
                    47:e6:19:55:8b:94:7b:c2:f2:fc:d1:29:45:81:4d:
                    67:37:d7:db:a4:46:52:19:98:0e:6e:ed:01:03:a0:
                    a4:27:26:1f:9c:cf:87:36:2f:4e:ca:87:e9:35:3a:
                    e2:1f:09:06:ef:26:e7:07:dc:80:ea:aa:1f:0a:8e:
                    c3:40:4b:04:b4:e7:7d:5d:bf:cc:92:e6:1f:e4:73:
                    2b:b1:2f:74:86:52:b0:da:f4:e0:65:e0:a9:f2:02:
                    4f:92:fb:5d:1e:f9:13:23:39:c9:17:f0:8c:99:eb:
                    20:40:b9:c3:b3:ce:1d:d1:cb:e7:38:55:d4:dd:bb:
                    0f:9e:7f:17:83:3b:2d:49:cf:a1:d2:73:66:55:96:
                    46:ba:b9:27:26:23:f8:12:da:13:7b:c6:27:86:b9:
                    27:e2:98:b6:03:24:1d:de:78:74:bb:30:f4:79:74:
                    cc:d1:6f:22:10:17:b1:ce:2c:23:2b:9f:5f:10:7b:
                    47:27:db:c0:bc:25:32:ec:62:eb:2f:26:66:5e:56:
                    97:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:27:D0:C2:2D:F5:00:8B:EA:90:BB:D7:3D:DE:AC:A0:06:13:27:87
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030323a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8002::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:03:85:19:a9:61:dc:24:09:80:3b:92:ee:e7:34:4c:74:e6:
         75:b3:4a:58:3f:e7:f7:c3:60:ce:ce:03:4f:af:c8:b7:04:6f:
         32:12:dd:d6:00:e0:4c:d6:16:93:5b:ba:f1:2c:1f:a8:4f:6c:
         3f:8a:07:b9:63:bb:fe:57:6c:8e:f3:3e:57:ac:7a:0e:a5:aa:
         7c:d0:3a:29:62:b2:dc:5f:76:1e:ee:b0:4c:0b:ae:a3:a1:e3:
         87:5a:25:c9:d0:fa:be:7d:ff:fd:af:1f:6c:ee:43:24:2a:cd:
         8c:fe:51:d7:3a:fe:e4:8f:4d:c6:66:83:79:6f:59:e0:a3:5e:
         a5:8d:38:dc:04:d9:44:22:28:b5:8a:6e:fa:7e:41:4a:0f:64:
         4b:87:2e:87:5c:4a:aa:2d:3c:1b:0d:5c:82:63:18:38:5e:57:
         1b:23:eb:88:f4:14:6a:13:23:4e:9a:4a:7d:a2:a4:ab:a6:d4:
         6b:5a:33:23:c6:0d:de:54:d5:fe:ad:b6:41:d7:d1:e4:cf:c9:
         3c:68:da:cc:00:2d:8d:d0:04:37:6d:c4:f4:3d:04:fe:85:5f:
         fb:83:dc:a7:88:3d:17:0f:cf:fd:1f:60:53:e2:bd:84:4b:20:
         1b:02:50:6f:74:df:18:39:67:7c:24:08:c1:81:ed:b0:29:2a:
         e9:20:aa:ae
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUKETtMCqF3yQ74srksVwhBfoCVSIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyNDhDODBFQTVDNEM1Nzc5QzEyOTcxMjFEMEJEOEQy
REMzNzlGMDAeFw0yNDA2MDYxOTQ4MDBaFw0yNTA2MDUxOTUzMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRjUyQTAzODQ4NjhBRDREODUx
QzgyQkNDRUU3OENEOUUyNzQ3QkZFNUM0QTM0MUYwMTJEMzE3NDZCMEEyMTgzMEZB
MzY1M0M4RjlGMzYwOTJBNkM2RTdBMUY4NDA2Mzg0NzQwMjhDQjE0NzFFNzIwQkVB
N0EwMTQ3RTYxOTU1OEI5NDdCQzJGMkZDRDEyOTQ1ODE0RDY3MzdEN0RCQTQ0NjUy
MTk5ODBFNkVFRDAxMDNBMEE0MjcyNjFGOUNDRjg3MzYyRjRFQ0E4N0U5MzUzQUUy
MUYwOTA2RUYyNkU3MDdEQzgwRUFBQTFGMEE4RUMzNDA0QjA0QjRFNzdENURCRkND
OTJFNjFGRTQ3MzJCQjEyRjc0ODY1MkIwREFGNEUwNjVFMEE5RjIwMjRGOTJGQjVE
MUVGOTEzMjMzOUM5MTdGMDhDOTlFQjIwNDBCOUMzQjNDRTFERDFDQkU3Mzg1NUQ0
RERCQjBGOUU3RjE3ODMzQjJENDlDRkExRDI3MzY2NTU5NjQ2QkFCOTI3MjYyM0Y4
MTJEQTEzN0JDNjI3ODZCOTI3RTI5OEI2MDMyNDFEREU3ODc0QkIzMEY0Nzk3NEND
RDE2RjIyMTAxN0IxQ0UyQzIzMkI5RjVGMTA3QjQ3MjdEQkMwQkMyNTMyRUM2MkVC
MkYyNjY2NUU1Njk3NjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA9SoDhIaK1NhRyCvM7njNnidHv+XEo0HwEtMXRrCiGDD6NlPI+fNg
kqbG56H4QGOEdAKMsUcecgvqegFH5hlVi5R7wvL80SlFgU1nN9fbpEZSGZgObu0B
A6CkJyYfnM+HNi9OyofpNTriHwkG7ybnB9yA6qofCo7DQEsEtOd9Xb/MkuYf5HMr
sS90hlKw2vTgZeCp8gJPkvtdHvkTIznJF/CMmesgQLnDs84d0cvnOFXU3bsPnn8X
gzstSc+h0nNmVZZGurknJiP4EtoTe8Ynhrkn4pi2AyQd3nh0uzD0eXTM0W8iEBex
ziwjK59fEHtHJ9vAvCUy7GLrLyZmXlaXZQIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FFEn0MIt9QCL6pC71z3erKAGEyeHMB8GA1UdIwQYMBaAFK4kjIDqXExXecEpcSHQ
vY0tw3nwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzEvQUUyNDhDODBFQTVDNEM1
Nzc5QzEyOTcxMjFEMEJEOEQyREMzNzlGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BRTI0OEM4MEVBNUM0QzU3NzlDMTI5NzEyMUQwQkQ4RDJEQzM3
OUYwLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8xLzMyMzgzMDM0M2EzMjYyMzczODNh
MzgzMDMwMzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKAQreIACMA0GCSqGSIb3DQEBCwUAA4IBAQBUA4UZqWHcJAmAO5Lu5zRM
dOZ1s0pYP+f3w2DOzgNPr8i3BG8yEt3WAOBM1haTW7rxLB+oT2w/ige5Y7v+V2yO
8z5XrHoOpap80DopYrLcX3Ye7rBMC66joeOHWiXJ0Pq+ff/9rx9s7kMkKs2M/lHX
Ov7kj03GZoN5b1ngo16ljTjcBNlEIii1im76fkFKD2RLhy6HXEqqLTwbDVyCYxg4
XlcbI+uI9BRqEyNOmkp9oqSrptRrWjMjxg3eVNX+rbZB19Hkz8k8aNrMAC2N0AQ3
bcT0PQT+hV/7g9yniD0XD8/9H2BT4r2ESyAbAlBvdN8YOWd8JAjBge2wKSrpIKqu
-----END CERTIFICATE-----
Generated at Mon Jul 1 12:35:56 2024 by rpki-client on console-fra.rpki-client.org