Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030333a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383030333a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          xzXrCudj/AnEwtNPlB+p7UUjYOegTYrMG5J1u/MU/is=
Subject key identifier:   78:E7:69:58:E3:62:FB:ED:8C:09:7F:AD:9D:D9:25:C0:9D:CC:B5:64
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       48CFB2D1875D6EBD5940E115E2FA62DE2C08C813
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030333a3a2f34382d3438203d3e203532343638.roa
Signing time:             Thu 06 Jun 2024 19:53:01 +0000
ROA not before:           Thu 06 Jun 2024 19:48:01 +0000
ROA not after:            Thu 05 Jun 2025 19:53:01 +0000
asID:                     52468
IP address blocks:        2804:2b78:8003::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 11:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:cf:b2:d1:87:5d:6e:bd:59:40:e1:15:e2:fa:62:de:2c:08:c8:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jun  6 19:48:01 2024 GMT
            Not After : Jun  5 19:53:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:90:f9:de:70:7a:77:0b:66:3d:fc:db:82:af:
                    18:f3:11:29:55:5e:e9:09:c0:5e:9c:12:b8:13:0f:
                    ab:b3:f6:96:44:bb:13:2b:bd:8b:6f:20:c5:42:66:
                    13:3a:df:34:4d:f0:69:df:3a:a1:64:48:37:ca:32:
                    f6:7e:2a:67:f6:cc:77:db:10:b9:23:ff:d9:05:25:
                    ef:be:19:d2:51:d0:63:11:57:3b:92:4e:b9:65:e2:
                    8e:fd:75:09:f0:25:94:99:4b:7e:24:eb:b0:2b:e7:
                    58:a1:7f:18:2e:df:59:e2:61:8f:6b:8b:e4:ef:49:
                    e2:e7:4d:5a:46:96:6a:d8:0f:3d:eb:13:fc:76:9d:
                    1c:98:04:9a:bf:a9:26:da:5e:59:30:c9:7a:11:d2:
                    f9:cc:87:6f:12:b8:66:60:a7:35:98:b1:44:f0:e7:
                    4a:fb:f1:1f:e9:ba:71:07:a9:9c:33:b6:46:1f:5e:
                    33:f7:9d:cb:fb:12:8a:3a:76:fe:7e:df:63:6a:8a:
                    b8:fa:33:ac:5d:a1:cf:08:d8:6e:5e:1b:68:3a:02:
                    e9:63:f6:28:ac:f6:c8:ca:f7:ba:45:e6:a7:08:68:
                    d4:d8:0a:cf:32:93:77:61:30:80:de:d5:6c:4b:37:
                    d9:70:bf:3e:25:a5:32:b3:70:7c:41:c6:63:51:3f:
                    b8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E7:69:58:E3:62:FB:ED:8C:09:7F:AD:9D:D9:25:C0:9D:CC:B5:64
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030333a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8003::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:22:59:80:e4:36:5f:e6:ce:46:65:77:33:37:94:ec:fe:79:
         b2:89:30:b4:fa:14:09:d3:e9:83:de:ed:af:75:7b:ca:61:1f:
         9b:0b:16:c3:92:ea:d5:ad:60:99:21:fd:86:26:f7:c0:0d:93:
         bc:bd:1d:52:6b:66:19:b3:cf:61:45:85:1b:30:2f:2a:bb:4b:
         bf:b7:04:9a:92:4d:19:0f:60:3f:48:a1:4d:3e:c1:4d:b1:c2:
         28:d6:03:fb:40:d7:52:64:35:56:8f:ee:95:fd:f4:2a:e6:ae:
         6c:b8:1e:41:43:bd:56:b2:b5:6b:e3:ba:66:e2:d8:16:2e:1a:
         6b:d9:42:be:a9:6d:5b:42:e1:3e:b6:75:17:47:85:b3:f8:eb:
         08:60:27:3f:ed:89:22:d7:3a:45:e7:d6:76:d9:8f:06:de:1f:
         ae:8c:f6:e2:b7:28:a2:1a:a1:d7:a4:a0:a2:ed:43:c2:64:31:
         ee:fd:a9:22:f6:37:f8:b1:cb:1e:bd:ad:26:8a:2b:2f:cf:43:
         bf:16:99:87:f8:6a:ba:16:89:27:de:a3:c6:82:28:4c:54:aa:
         ca:53:a3:37:9d:f8:e3:1a:02:0a:63:7c:a0:e3:5e:e3:59:c5:
         2e:5e:e4:18:f4:3c:ae:5f:54:3f:bf:a7:07:ae:c4:21:c0:d5:
         e4:1e:bb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:38:05 2024 by rpki-client on console-ams.rpki-client.org