Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030643a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383030643a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          Rvbmm1XSyJH2QiIJbq7wbE3QV5qP6zQH8sGPw5Z+NbA=
Subject key identifier:   7B:D5:4E:D8:6F:16:FA:BA:41:E0:F3:8A:99:CC:99:AB:DE:A0:ED:2D
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       3574D55947BBB53F8CBD790D6E2CFABB07F976EA
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030643a3a2f34382d3438203d3e203532343638.roa
Signing time:             Mon 10 Mar 2025 23:20:27 +0000
ROA not before:           Mon 10 Mar 2025 23:15:27 +0000
ROA not after:            Mon 09 Mar 2026 23:20:27 +0000
asID:                     52468
IP address blocks:        2804:2b78:800d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 07:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:74:d5:59:47:bb:b5:3f:8c:bd:79:0d:6e:2c:fa:bb:07:f9:76:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Mar 10 23:15:27 2025 GMT
            Not After : Mar  9 23:20:27 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f5:5d:ec:9e:d6:f5:36:6b:3a:3f:46:b3:ea:
                    18:a7:07:f5:cb:93:9d:16:f9:29:3f:ca:01:14:64:
                    92:82:52:e9:dd:6a:58:ce:e6:4e:38:73:90:bf:e6:
                    8f:53:5e:e8:7a:49:8a:f6:27:b2:3c:e7:43:00:5b:
                    94:b7:9a:58:91:3c:1c:2f:00:8e:27:94:5b:84:4b:
                    97:0e:db:5f:a8:12:0e:6b:c8:57:38:42:f9:f4:17:
                    c8:73:4f:2b:02:f2:09:0e:71:fc:a4:c4:06:8b:a7:
                    ce:0b:ad:77:c7:bd:2e:55:c6:90:57:9e:12:00:c7:
                    11:91:2a:a6:37:12:2c:0b:99:18:db:73:1c:6c:96:
                    70:0a:c7:1a:8d:1c:c6:5d:d4:1b:db:21:a6:04:70:
                    4f:09:c8:7b:06:72:8b:39:9e:33:73:25:f2:60:63:
                    87:f8:5c:39:67:8f:cc:95:34:99:ab:9e:57:c3:fa:
                    be:eb:1e:91:a0:33:88:50:92:c1:ac:e0:e2:22:78:
                    6c:88:bd:a6:2e:b0:4d:a7:30:15:47:5e:dc:db:ce:
                    e7:7b:45:d5:87:84:25:17:78:dc:21:d5:3c:21:5a:
                    6e:6c:ac:81:20:5b:05:48:63:2d:5a:97:18:de:a4:
                    00:05:a3:9c:f8:07:98:12:50:41:11:88:c0:6c:2c:
                    99:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D5:4E:D8:6F:16:FA:BA:41:E0:F3:8A:99:CC:99:AB:DE:A0:ED:2D
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030643a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:800d::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:10:1a:f4:a0:d0:e3:06:e6:49:1b:5e:60:a2:18:1d:15:2d:
         13:33:df:84:14:e5:c6:fd:69:e9:f2:2f:cf:4a:f1:33:17:d1:
         62:c9:6c:7f:06:35:3c:2e:53:9d:ef:bc:34:a8:23:ca:fe:c5:
         ef:98:b7:ed:e5:96:3a:80:77:e9:e3:6c:cd:ab:4c:ef:af:71:
         be:6f:7d:b7:90:03:2c:ff:2a:b7:b1:ed:da:ad:7f:47:fb:5b:
         bc:f1:3c:cd:15:29:11:43:b8:7f:0d:5f:3a:aa:a9:7d:28:d3:
         b1:20:30:ac:b1:14:b5:d9:3b:25:4c:49:13:e9:fe:8c:06:90:
         ce:65:c7:c1:82:35:ff:08:3a:5b:9b:b2:ff:93:e7:3b:61:e7:
         8e:8d:71:3f:33:74:d3:4a:21:a2:28:2d:fa:1a:67:34:56:82:
         f6:9f:27:ab:c5:7f:c7:d8:f6:f8:9c:41:a3:82:3a:e5:c7:91:
         06:7e:65:90:d8:fd:72:71:95:18:f7:37:64:05:83:17:97:46:
         9f:77:16:70:5f:25:a7:e5:77:ca:1f:d2:92:d6:75:0f:07:13:
         6d:2b:c6:ea:84:c0:c3:da:dc:bd:24:25:a0:34:1d:7c:de:cb:
         e6:2d:2d:79:b1:cc:9f:b0:0b:3f:77:4a:f2:29:2b:d1:f8:89:
         a4:81:54:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:16 2025 by rpki-client