Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030383a3a2f34362d3436203d3e203532343638.roa
File:                     323830343a326237383a383030383a3a2f34362d3436203d3e203532343638.roa (raw, json)
Hash identifier:          y7o7tHdeL856/yKyC9iJecPdsIRhDBHtqRHg4XQSMAA=
Subject key identifier:   50:7A:4A:DF:F7:42:8F:69:DD:75:BB:98:24:0E:EC:AC:67:30:65:FC
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       4D358F5401201B962D93DF27B71F79EF4DBCCA42
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030383a3a2f34362d3436203d3e203532343638.roa
Signing time:             Thu 13 Feb 2025 15:48:37 +0000
ROA not before:           Thu 13 Feb 2025 15:43:37 +0000
ROA not after:            Thu 12 Feb 2026 15:48:37 +0000
asID:                     52468
IP address blocks:        2804:2b78:8008::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 23:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:35:8f:54:01:20:1b:96:2d:93:df:27:b7:1f:79:ef:4d:bc:ca:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Feb 13 15:43:37 2025 GMT
            Not After : Feb 12 15:48:37 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:82:02:64:32:05:b6:03:1c:57:d9:cf:ae:2d:
                    2f:be:90:63:a5:a3:4a:6f:20:81:31:21:2b:d0:24:
                    e9:dc:0f:34:9e:79:82:0c:a6:86:45:5c:b0:42:8a:
                    4f:c3:31:d7:27:bd:54:06:78:9b:73:19:92:21:d6:
                    76:cc:5a:79:9b:cb:b8:f1:60:2e:0d:58:7c:4e:47:
                    d4:0e:f3:54:6c:ad:f3:b0:1d:a1:a0:35:f7:96:a1:
                    04:2c:a3:2b:bd:7a:f7:8f:be:91:ae:73:61:7f:16:
                    e1:67:28:b4:00:98:60:5a:29:10:e5:4e:94:76:1d:
                    57:cb:94:8b:53:2d:c7:8b:a9:95:10:5d:72:d1:23:
                    ed:df:ba:4f:fe:6e:7f:d4:bd:ad:1f:16:ed:b3:44:
                    44:b4:72:e7:fd:a9:86:91:85:a5:cd:ae:bd:9e:83:
                    83:6d:a4:41:83:52:21:3d:55:93:13:0c:ba:94:89:
                    5a:23:58:f8:51:f2:1c:df:7f:4f:60:3a:1b:e0:11:
                    af:c9:6b:ac:11:12:31:c3:7a:07:ac:c6:51:f0:bf:
                    54:8d:67:96:e0:a5:b6:6c:5e:a8:9e:bf:62:ef:1f:
                    66:f7:1b:f2:f3:30:12:66:c7:af:2a:11:f0:8d:09:
                    b8:9f:39:13:c3:40:92:02:dd:17:41:64:64:3e:b8:
                    c0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7A:4A:DF:F7:42:8F:69:DD:75:BB:98:24:0E:EC:AC:67:30:65:FC
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030383a3a2f34362d3436203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8008::/46

    Signature Algorithm: sha256WithRSAEncryption
         6f:a1:ca:2a:f8:cf:46:a1:5f:25:b1:96:3e:93:28:ea:57:ed:
         be:d2:6f:a9:7a:03:33:0d:be:09:d9:4e:88:71:aa:0b:5e:20:
         63:cb:52:6c:1a:56:35:4e:ef:b1:32:e5:f5:80:f4:bc:b6:db:
         69:ee:7c:4d:9e:ce:21:f6:95:8c:a6:1c:c7:eb:ae:eb:b8:f3:
         4b:59:5b:d2:82:30:41:4d:8c:4f:06:52:49:ec:72:a5:36:70:
         51:67:83:27:ad:8b:24:53:3a:24:58:91:c0:ba:3b:2a:29:64:
         ea:b9:62:a0:d0:c6:d4:ef:db:26:81:3b:83:f8:e7:f3:c1:35:
         32:58:02:7c:f2:1d:7b:04:9a:b7:90:de:88:65:72:ba:96:af:
         a9:fa:d5:3d:d2:20:9a:cb:5f:3c:5c:3f:e0:51:9e:d4:a0:b6:
         72:b4:99:5a:2f:99:1e:36:4b:70:23:47:f6:28:f5:f3:e4:d6:
         79:76:2a:c3:6e:02:61:8f:bb:77:a8:63:ba:e9:66:8f:1e:f8:
         82:8a:b2:9c:2c:82:10:12:55:b5:af:e6:fd:d1:31:10:67:fc:
         88:07:e2:41:bd:50:56:1a:37:7b:e2:77:86:d9:e6:be:63:c6:
         87:4e:35:6d:f5:0f:c8:b6:2b:6d:58:3e:02:74:27:84:c8:33:
         a2:e5:7c:0e
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUTTWPVAEgG5Ytk98ntx957028ykIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyNDhDODBFQTVDNEM1Nzc5QzEyOTcxMjFEMEJEOEQy
REMzNzlGMDAeFw0yNTAyMTMxNTQzMzdaFw0yNjAyMTIxNTQ4MzdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkU4MjAyNjQzMjA1QjYwMzFD
NTdEOUNGQUUyRDJGQkU5MDYzQTVBMzRBNkYyMDgxMzEyMTJCRDAyNEU5REMwRjM0
OUU3OTgyMENBNjg2NDU1Q0IwNDI4QTRGQzMzMUQ3MjdCRDU0MDY3ODlCNzMxOTky
MjFENjc2Q0M1QTc5OUJDQkI4RjE2MDJFMEQ1ODdDNEU0N0Q0MEVGMzU0NkNBREYz
QjAxREExQTAzNUY3OTZBMTA0MkNBMzJCQkQ3QUY3OEZCRTkxQUU3MzYxN0YxNkUx
NjcyOEI0MDA5ODYwNUEyOTEwRTU0RTk0NzYxRDU3Q0I5NDhCNTMyREM3OEJBOTk1
MTA1RDcyRDEyM0VEREZCQTRGRkU2RTdGRDRCREFEMUYxNkVEQjM0NDQ0QjQ3MkU3
RkRBOTg2OTE4NUE1Q0RBRUJEOUU4MzgzNkRBNDQxODM1MjIxM0Q1NTkzMTMwQ0JB
OTQ4OTVBMjM1OEY4NTFGMjFDREY3RjRGNjAzQTFCRTAxMUFGQzk2QkFDMTExMjMx
QzM3QTA3QUNDNjUxRjBCRjU0OEQ2Nzk2RTBBNUI2NkM1RUE4OUVCRjYyRUYxRjY2
RjcxQkYyRjMzMDEyNjZDN0FGMkExMUYwOEQwOUI4OUYzOTEzQzM0MDkyMDJERDE3
NDE2NDY0M0VCOEMwNUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvoICZDIFtgMcV9nPri0vvpBjpaNKbyCBMSEr0CTp3A80nnmCDKaG
RVywQopPwzHXJ71UBnibcxmSIdZ2zFp5m8u48WAuDVh8TkfUDvNUbK3zsB2hoDX3
lqEELKMrvXr3j76RrnNhfxbhZyi0AJhgWikQ5U6Udh1Xy5SLUy3Hi6mVEF1y0SPt
37pP/m5/1L2tHxbts0REtHLn/amGkYWlza69noODbaRBg1IhPVWTEwy6lIlaI1j4
UfIc339PYDob4BGvyWusERIxw3oHrMZR8L9UjWeW4KW2bF6onr9i7x9m9xvy8zAS
ZsevKhHwjQm4nzkTw0CSAt0XQWRkPrjAXQIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FFB6St/3Qo9p3XW7mCQO7KxnMGX8MB8GA1UdIwQYMBaAFK4kjIDqXExXecEpcSHQ
vY0tw3nwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzEvQUUyNDhDODBFQTVDNEM1
Nzc5QzEyOTcxMjFEMEJEOEQyREMzNzlGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BRTI0OEM4MEVBNUM0QzU3NzlDMTI5NzEyMUQwQkQ4RDJEQzM3
OUYwLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8xLzMyMzgzMDM0M2EzMjYyMzczODNh
MzgzMDMwMzgzYTNhMmYzNDM2MmQzNDM2MjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcCKAQreIAIMA0GCSqGSIb3DQEBCwUAA4IBAQBvocoq+M9GoV8lsZY+kyjq
V+2+0m+pegMzDb4J2U6IcaoLXiBjy1JsGlY1Tu+xMuX1gPS8tttp7nxNns4h9pWM
phzH667ruPNLWVvSgjBBTYxPBlJJ7HKlNnBRZ4MnrYskUzokWJHAujsqKWTquWKg
0MbU79smgTuD+OfzwTUyWAJ88h17BJq3kN6IZXK6lq+p+tU90iCay188XD/gUZ7U
oLZytJlaL5keNktwI0f2KPXz5NZ5dirDbgJhj7t3qGO66WaPHviCirKcLIIQElW1
r+b90TEQZ/yIB+JBvVBWGjd74neG2ea+Y8aHTjVt9Q/ItittWD4CdCeEyDOi5XwO
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:18:19 2025 by rpki-client