Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030353a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383030353a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          lO5Oj4xjUxfmts/X+hV3DpXx24Yk30Bf8O8RM/S9DgQ=
Subject key identifier:   E2:85:02:B5:49:FF:42:B5:0A:2A:E9:97:17:9B:55:B4:12:DB:ED:D0
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       246AA58E06AC16059ADF88AE7E6F8150E314669D
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030353a3a2f34382d3438203d3e203532343638.roa
Signing time:             Thu 06 Jun 2024 19:53:00 +0000
ROA not before:           Thu 06 Jun 2024 19:48:00 +0000
ROA not after:            Thu 05 Jun 2025 19:53:00 +0000
asID:                     52468
IP address blocks:        2804:2b78:8005::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 11:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:6a:a5:8e:06:ac:16:05:9a:df:88:ae:7e:6f:81:50:e3:14:66:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jun  6 19:48:00 2024 GMT
            Not After : Jun  5 19:53:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c2:02:cc:75:13:92:5c:0e:7e:21:4d:c0:62:
                    67:15:c3:37:d8:81:dc:71:dc:de:6a:de:1e:97:c4:
                    cc:eb:d2:de:17:ce:47:4a:03:41:b2:9a:92:c3:74:
                    60:a9:03:7d:b8:46:86:6b:88:3b:f4:37:c2:c9:fd:
                    7b:eb:7d:6e:67:4b:32:dc:cf:85:c9:17:3e:7f:69:
                    c4:38:40:f9:5b:86:af:f3:f8:e3:43:3d:ed:a4:5a:
                    12:46:10:d1:6f:5c:41:67:74:03:a0:a8:f9:0a:cf:
                    82:f3:ff:ef:dd:68:b4:af:d3:5d:18:2f:c4:8b:91:
                    08:ac:51:0f:13:a8:dc:f5:9b:e3:60:85:5d:d8:e4:
                    f7:c5:28:1d:39:cd:11:21:03:f3:e5:35:75:b8:33:
                    15:f7:11:37:d7:71:7d:34:38:c0:6e:ee:c1:0c:3e:
                    4a:bd:f8:db:94:6f:73:23:1e:da:7d:e2:c2:4e:c8:
                    b3:b5:cb:96:b7:f4:08:0e:ba:21:ef:9e:12:18:fd:
                    4e:b4:c2:79:c2:bd:93:1e:b0:bf:a3:62:00:3a:7a:
                    0d:dc:41:53:cf:ca:72:d4:2d:31:88:42:89:39:9f:
                    1f:41:1a:19:82:d4:0c:34:7f:fe:23:a1:ec:b7:dc:
                    81:38:3c:f6:d1:c2:e3:55:0f:fc:08:dd:63:3a:ce:
                    d6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:85:02:B5:49:FF:42:B5:0A:2A:E9:97:17:9B:55:B4:12:DB:ED:D0
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030353a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8005::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:ec:f4:f9:89:b9:14:a0:e3:2a:b4:84:6a:32:53:35:da:ed:
         50:b6:a6:d3:e9:ac:8b:ae:52:10:95:c0:86:9a:e1:dd:3e:66:
         ee:f1:1e:56:81:0c:51:a1:f0:22:ea:06:45:78:c5:19:7e:ca:
         51:17:f2:07:29:75:c9:fd:58:32:3b:d4:a1:e4:f4:82:45:ec:
         b2:06:fc:a1:cd:64:b7:73:67:83:36:e9:71:72:0d:90:04:d8:
         cb:d1:34:48:a8:60:87:de:4b:77:0d:ea:94:cc:b9:22:e1:5e:
         1a:41:b5:a1:0f:15:b8:b0:24:f1:43:8e:50:94:76:a7:13:c1:
         d0:66:cc:e4:9b:cd:f3:2c:40:e7:e3:28:49:7c:84:5d:8a:9e:
         bf:7e:bf:4a:b9:1f:43:ea:21:c1:5e:19:43:29:bc:1b:98:91:
         af:a7:e7:55:75:59:d7:dc:9d:0c:41:ef:c8:3a:85:bf:08:3a:
         b3:6b:77:eb:41:cd:a9:6b:eb:33:00:1f:60:a0:c2:66:76:eb:
         37:88:34:03:ae:dd:46:20:e7:3d:5d:1d:95:ae:d3:af:9d:3c:
         b5:b0:25:ea:d7:4a:1d:b0:e9:3e:69:22:4b:60:db:81:1f:59:
         97:cc:5e:58:19:b0:78:28:d6:c8:c8:57:6b:15:8c:04:ed:a8:
         f0:5a:21:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:21 2024 by rpki-client on console-fra.rpki-client.org