Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030373a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383030373a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          49ViH8+yyN4ss+02aVO/4Kmr/4zTEycN+ib5glNwvGE=
Subject key identifier:   A5:29:A7:15:25:6D:EB:20:EC:85:D1:B6:13:91:23:23:1E:CD:58:7F
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       2353854F084F85ECE4F43E2DC1C4C541125E1C9E
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030373a3a2f34382d3438203d3e203532343638.roa
Signing time:             Tue 09 Jul 2024 01:18:42 +0000
ROA not before:           Tue 09 Jul 2024 01:13:42 +0000
ROA not after:            Tue 08 Jul 2025 01:18:42 +0000
asID:                     52468
IP address blocks:        2804:2b78:8007::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Sep 2024 17:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:53:85:4f:08:4f:85:ec:e4:f4:3e:2d:c1:c4:c5:41:12:5e:1c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jul  9 01:13:42 2024 GMT
            Not After : Jul  8 01:18:42 2025 GMT
        Subject: CN=3082010A0282010100B3E1D70AE75094B064FBB3EBADE7FD5C4D72D19B0CE680B6B2B50E0A73CFF4AADCDFA9B06EC6CA5980C6AFB484E1ED117468EBB1A7D8F7CDCD56C67B8ECC265A439B7C06D2DCD18D029CCD23E0D86CAECEF4C08C8563C1E16FB0E131834C8D9BCE61EB227F50A40768F15C52759E9B905163F17F0F072BB0D971D35C04640A204AB72D7EF7BAEBEF88BEECB0BE654746E0D1CECE6B1899A4AC64C43BA61DD6AF75AA837EFB05B7A49F2107F55B215DADAC0EF113D3AE87AEA74013AC0268DCE709A134AB1178E8E3790CBDE47A3E9CAD2FDEDD3D9C22B0295049F9D09969DD787162FACE58451141FF54E649AB60E84AD1CF9D30AF53E1819355365E7DA173E50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e1:d7:0a:e7:50:94:b0:64:fb:b3:eb:ad:e7:
                    fd:5c:4d:72:d1:9b:0c:e6:80:b6:b2:b5:0e:0a:73:
                    cf:f4:aa:dc:df:a9:b0:6e:c6:ca:59:80:c6:af:b4:
                    84:e1:ed:11:74:68:eb:b1:a7:d8:f7:cd:cd:56:c6:
                    7b:8e:cc:26:5a:43:9b:7c:06:d2:dc:d1:8d:02:9c:
                    cd:23:e0:d8:6c:ae:ce:f4:c0:8c:85:63:c1:e1:6f:
                    b0:e1:31:83:4c:8d:9b:ce:61:eb:22:7f:50:a4:07:
                    68:f1:5c:52:75:9e:9b:90:51:63:f1:7f:0f:07:2b:
                    b0:d9:71:d3:5c:04:64:0a:20:4a:b7:2d:7e:f7:ba:
                    eb:ef:88:be:ec:b0:be:65:47:46:e0:d1:ce:ce:6b:
                    18:99:a4:ac:64:c4:3b:a6:1d:d6:af:75:aa:83:7e:
                    fb:05:b7:a4:9f:21:07:f5:5b:21:5d:ad:ac:0e:f1:
                    13:d3:ae:87:ae:a7:40:13:ac:02:68:dc:e7:09:a1:
                    34:ab:11:78:e8:e3:79:0c:bd:e4:7a:3e:9c:ad:2f:
                    de:dd:3d:9c:22:b0:29:50:49:f9:d0:99:69:dd:78:
                    71:62:fa:ce:58:45:11:41:ff:54:e6:49:ab:60:e8:
                    4a:d1:cf:9d:30:af:53:e1:81:93:55:36:5e:7d:a1:
                    73:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:29:A7:15:25:6D:EB:20:EC:85:D1:B6:13:91:23:23:1E:CD:58:7F
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030373a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8007::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:dc:45:a3:b3:73:06:18:09:81:a2:6c:ec:92:b9:f8:5a:b2:
         2b:da:1b:fe:e9:46:55:46:69:4f:53:de:a0:02:6e:53:5e:fe:
         41:55:66:fc:ad:e3:e7:a4:e5:0e:3a:ac:b9:23:d8:da:03:d2:
         99:09:c8:21:b2:a5:32:2f:4b:1c:7e:76:13:50:cd:a3:43:f7:
         23:4c:ae:d9:96:8a:65:34:72:f2:88:0a:80:73:e5:17:23:95:
         80:92:19:9e:b3:03:63:2c:94:66:9f:8e:71:10:79:35:d4:09:
         88:3b:ac:06:cb:26:79:11:39:f5:94:bf:29:64:d9:78:74:ed:
         13:a6:df:af:d9:4b:2f:df:c3:ad:de:a9:40:d4:a8:04:e1:96:
         b6:48:d8:25:c2:71:ef:a2:40:86:6d:f6:57:c3:ff:2f:2f:98:
         ab:c6:98:de:40:51:f6:7e:bc:22:b9:78:e8:0c:30:bb:39:63:
         a6:62:ae:79:fa:d9:ff:c2:7d:69:29:27:7c:50:47:dc:a7:4b:
         29:42:a0:04:20:78:d5:d8:60:23:b3:59:85:cc:37:ee:9b:76:
         0c:a5:4d:a5:24:66:12:f1:fd:da:aa:ae:06:14:9b:9f:c9:d6:
         e2:30:11:0c:31:65:24:8b:97:d1:f8:52:00:a9:c8:50:1b:a3:
         db:ef:37:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 18:14:07 2024 by rpki-client on console-fra.rpki-client.org