Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030663a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383030663a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          urGgGUyxMjDvYAwltu3Z7vcirTXFqgJUjt5AiO9ZBwc=
Subject key identifier:   BD:57:9D:54:6E:86:0B:20:EA:7E:99:DA:33:E5:71:02:BE:BA:13:E8
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       0EEC06FE4426E6F422DDE0E84312D0BE1FB56100
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030663a3a2f34382d3438203d3e203532343638.roa
Signing time:             Mon 10 Mar 2025 23:18:53 +0000
ROA not before:           Mon 10 Mar 2025 23:13:53 +0000
ROA not after:            Mon 09 Mar 2026 23:18:53 +0000
asID:                     52468
IP address blocks:        2804:2b78:800f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 07:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ec:06:fe:44:26:e6:f4:22:dd:e0:e8:43:12:d0:be:1f:b5:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Mar 10 23:13:53 2025 GMT
            Not After : Mar  9 23:18:53 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:50:b1:e7:a8:08:5b:52:e5:a0:b2:1e:ab:8a:
                    8b:a7:8d:06:03:b0:6f:88:61:53:3a:16:44:e2:dc:
                    4c:8d:cb:da:29:95:a5:1d:0c:0c:f7:bc:3b:fd:42:
                    d4:1a:10:66:f3:28:be:c6:c8:0e:37:22:bf:de:7c:
                    20:4a:b0:73:53:c8:8a:ea:fb:2d:d4:55:12:31:aa:
                    11:8d:d4:4b:3b:1e:12:dd:f4:a3:b7:bd:cf:5b:63:
                    f2:f0:64:00:7f:fe:2e:70:83:b2:2d:15:1c:51:d6:
                    eb:44:8f:b7:f7:34:4f:c0:c1:a4:d5:08:58:e5:9b:
                    d3:9b:1f:42:bb:bb:4e:05:bc:8f:d1:ce:3e:86:2b:
                    8f:3f:26:9d:5f:a6:4f:56:44:cc:6d:22:da:3f:b7:
                    8d:5b:12:21:8c:b0:cd:44:5a:14:c8:9c:73:f4:10:
                    70:47:ed:e0:21:1f:6e:db:0a:4e:46:ee:b3:0d:5f:
                    4d:bf:9a:51:9a:3d:42:d6:42:9c:3b:0b:c6:bc:f2:
                    8e:90:12:9d:36:e6:83:47:24:e3:cb:67:7a:66:1e:
                    9e:95:35:f1:18:8b:56:31:25:57:39:8c:0c:0e:82:
                    db:72:1f:b8:92:7b:13:d6:32:3b:d1:75:70:1c:37:
                    07:4d:59:1d:8e:5d:52:b7:d4:02:c3:88:50:fc:ee:
                    a2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:57:9D:54:6E:86:0B:20:EA:7E:99:DA:33:E5:71:02:BE:BA:13:E8
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030663a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:800f::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:e7:38:8d:62:e1:b5:98:da:cf:61:fd:c6:cd:e7:e8:43:e4:
         81:3f:2b:6b:2a:ae:7c:9b:b0:52:5d:c8:20:ee:0a:89:ea:07:
         41:70:11:33:1b:82:62:60:79:4f:3c:10:07:dc:1e:ff:dc:fd:
         54:58:0d:b7:12:f8:48:59:f1:e4:ee:b0:97:e0:07:d2:48:99:
         c6:f3:57:ed:31:fa:1b:b7:6b:04:c7:18:83:03:63:7f:7f:6d:
         2d:0c:46:64:0a:09:2f:7f:3b:39:8e:30:33:70:27:0b:3b:82:
         31:9e:17:86:29:96:af:dc:83:00:ea:7d:21:a7:31:b7:a7:fb:
         e7:3c:c2:fc:c7:14:c1:2b:b2:16:a0:20:65:03:20:d1:09:08:
         10:b2:c0:f0:ab:b5:1a:17:cc:cc:3a:06:88:2f:6c:a8:d0:58:
         a2:b9:7b:26:e7:11:9d:b8:ac:d6:8c:4e:41:3c:e8:96:48:0e:
         55:2e:f2:6b:28:bf:a9:0d:43:d6:0f:24:0a:41:df:1a:72:14:
         6e:d1:84:f5:8d:30:67:3e:48:ca:0c:dc:09:82:45:b7:0e:23:
         93:4e:be:73:5d:85:02:8a:44:3a:c0:4c:a3:af:ea:33:7a:7e:
         97:54:e9:22:56:e8:f0:88:53:be:20:f0:9d:89:25:74:d8:1b:
         1c:50:32:94
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUDuwG/kQm5vQi3eDoQxLQvh+1YQAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyNDhDODBFQTVDNEM1Nzc5QzEyOTcxMjFEMEJEOEQy
REMzNzlGMDAeFw0yNTAzMTAyMzEzNTNaFw0yNjAzMDkyMzE4NTNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0Y1MEIxRTdBODA4NUI1MkU1
QTBCMjFFQUI4QThCQTc4RDA2MDNCMDZGODg2MTUzM0ExNjQ0RTJEQzRDOERDQkRB
Mjk5NUE1MUQwQzBDRjdCQzNCRkQ0MkQ0MUExMDY2RjMyOEJFQzZDODBFMzcyMkJG
REU3QzIwNEFCMDczNTNDODhBRUFGQjJERDQ1NTEyMzFBQTExOERENDRCM0IxRTEy
RERGNEEzQjdCRENGNUI2M0YyRjA2NDAwN0ZGRTJFNzA4M0IyMkQxNTFDNTFENkVC
NDQ4RkI3RjczNDRGQzBDMUE0RDUwODU4RTU5QkQzOUIxRjQyQkJCQjRFMDVCQzhG
RDFDRTNFODYyQjhGM0YyNjlENUZBNjRGNTY0NENDNkQyMkRBM0ZCNzhENUIxMjIx
OENCMENENDQ1QTE0Qzg5QzczRjQxMDcwNDdFREUwMjExRjZFREIwQTRFNDZFRUIz
MEQ1RjREQkY5QTUxOUEzRDQyRDY0MjlDM0IwQkM2QkNGMjhFOTAxMjlEMzZFNjgz
NDcyNEUzQ0I2NzdBNjYxRTlFOTUzNUYxMTg4QjU2MzEyNTU3Mzk4QzBDMEU4MkRC
NzIxRkI4OTI3QjEzRDYzMjNCRDE3NTcwMUMzNzA3NEQ1OTFEOEU1RDUyQjdENDAy
QzM4ODUwRkNFRUEyQUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAz1Cx56gIW1LloLIeq4qLp40GA7BviGFTOhZE4txMjcvaKZWlHQwM
97w7/ULUGhBm8yi+xsgONyK/3nwgSrBzU8iK6vst1FUSMaoRjdRLOx4S3fSjt73P
W2Py8GQAf/4ucIOyLRUcUdbrRI+39zRPwMGk1QhY5ZvTmx9Cu7tOBbyP0c4+hiuP
PyadX6ZPVkTMbSLaP7eNWxIhjLDNRFoUyJxz9BBwR+3gIR9u2wpORu6zDV9Nv5pR
mj1C1kKcOwvGvPKOkBKdNuaDRyTjy2d6Zh6elTXxGItWMSVXOYwMDoLbch+4knsT
1jI70XVwHDcHTVkdjl1St9QCw4hQ/O6irQIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FL1XnVRuhgsg6n6Z2jPlcQK+uhPoMB8GA1UdIwQYMBaAFK4kjIDqXExXecEpcSHQ
vY0tw3nwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzEvQUUyNDhDODBFQTVDNEM1
Nzc5QzEyOTcxMjFEMEJEOEQyREMzNzlGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BRTI0OEM4MEVBNUM0QzU3NzlDMTI5NzEyMUQwQkQ4RDJEQzM3
OUYwLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8xLzMyMzgzMDM0M2EzMjYyMzczODNh
MzgzMDMwNjYzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKAQreIAPMA0GCSqGSIb3DQEBCwUAA4IBAQCW5ziNYuG1mNrPYf3Gzefo
Q+SBPytrKq58m7BSXcgg7gqJ6gdBcBEzG4JiYHlPPBAH3B7/3P1UWA23EvhIWfHk
7rCX4AfSSJnG81ftMfobt2sExxiDA2N/f20tDEZkCgkvfzs5jjAzcCcLO4IxnheG
KZav3IMA6n0hpzG3p/vnPML8xxTBK7IWoCBlAyDRCQgQssDwq7UaF8zMOgaIL2yo
0FiiuXsm5xGduKzWjE5BPOiWSA5VLvJrKL+pDUPWDyQKQd8achRu0YT1jTBnPkjK
DNwJgkW3DiOTTr5zXYUCikQ6wEyjr+ozen6XVOkiVujwiFO+IPCdiSV02BscUDKU
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:58:36 2025 by rpki-client