Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383031303a3a2f34372d3437203d3e203532343638.roa
File:                     323830343a326237383a383031303a3a2f34372d3437203d3e203532343638.roa (raw, json)
Hash identifier:          73JcfsxrsEjC9krBzZjM34puWXJiiDeSsTW5RoUwaIU=
Subject key identifier:   E3:BB:6C:B5:A9:7E:B2:BB:B9:AB:49:0E:AF:AC:E6:A9:97:CC:FA:D5
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       039FD276EAC89199618FC9B82B9898697B2ADF18
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383031303a3a2f34372d3437203d3e203532343638.roa
Signing time:             Thu 13 Feb 2025 15:49:13 +0000
ROA not before:           Thu 13 Feb 2025 15:44:13 +0000
ROA not after:            Thu 12 Feb 2026 15:49:13 +0000
asID:                     52468
IP address blocks:        2804:2b78:8010::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 07:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:9f:d2:76:ea:c8:91:99:61:8f:c9:b8:2b:98:98:69:7b:2a:df:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Feb 13 15:44:13 2025 GMT
            Not After : Feb 12 15:49:13 2026 GMT
        Subject: CN=3082010A0282010100D713E2F4C35925B8AE7C4D5D48CAA5EC7D045FEE9B4077FFE6A3EA547784766FE460D3579FB5FC7B8A758360AC483700144529CA0DB384DD2B9A34A134B893600A86B181E5260A377BA3C58D3B65BBC9B7BA2CED6DA090CF0A9FEE23BD76EC90DD976C0C4E98C5A60008E42FCD92C82F204256E9716BD974813817D20C9E3CBF83B2E592EB36612F0C7FF2AFF4C86822125BBFE11F525718F8D8D1E2720690E4F31FBB3FE6289EBB62E990C869129EA4266FDE6F2EFB93FAAC90700EFA68CB69BDFBB4A4514BC128DD0DF3558FED05F62346F9980E08FE8E525DBDDC993DA1D72712CAD76F8D07DC1E65D88800CD92DA7E5581CAC9B96634A0A2DD54977FB6070203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:13:e2:f4:c3:59:25:b8:ae:7c:4d:5d:48:ca:
                    a5:ec:7d:04:5f:ee:9b:40:77:ff:e6:a3:ea:54:77:
                    84:76:6f:e4:60:d3:57:9f:b5:fc:7b:8a:75:83:60:
                    ac:48:37:00:14:45:29:ca:0d:b3:84:dd:2b:9a:34:
                    a1:34:b8:93:60:0a:86:b1:81:e5:26:0a:37:7b:a3:
                    c5:8d:3b:65:bb:c9:b7:ba:2c:ed:6d:a0:90:cf:0a:
                    9f:ee:23:bd:76:ec:90:dd:97:6c:0c:4e:98:c5:a6:
                    00:08:e4:2f:cd:92:c8:2f:20:42:56:e9:71:6b:d9:
                    74:81:38:17:d2:0c:9e:3c:bf:83:b2:e5:92:eb:36:
                    61:2f:0c:7f:f2:af:f4:c8:68:22:12:5b:bf:e1:1f:
                    52:57:18:f8:d8:d1:e2:72:06:90:e4:f3:1f:bb:3f:
                    e6:28:9e:bb:62:e9:90:c8:69:12:9e:a4:26:6f:de:
                    6f:2e:fb:93:fa:ac:90:70:0e:fa:68:cb:69:bd:fb:
                    b4:a4:51:4b:c1:28:dd:0d:f3:55:8f:ed:05:f6:23:
                    46:f9:98:0e:08:fe:8e:52:5d:bd:dc:99:3d:a1:d7:
                    27:12:ca:d7:6f:8d:07:dc:1e:65:d8:88:00:cd:92:
                    da:7e:55:81:ca:c9:b9:66:34:a0:a2:dd:54:97:7f:
                    b6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BB:6C:B5:A9:7E:B2:BB:B9:AB:49:0E:AF:AC:E6:A9:97:CC:FA:D5
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383031303a3a2f34372d3437203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8010::/47

    Signature Algorithm: sha256WithRSAEncryption
         8f:a3:32:7e:c4:d5:aa:30:2b:ae:fd:d0:c5:b9:87:45:b3:f6:
         67:82:d5:a3:50:a6:cb:4f:6f:ef:2c:5d:a4:95:12:19:0e:e1:
         39:9b:c8:f3:9b:9e:7a:a6:2e:e3:c8:c6:29:8b:43:74:e9:a8:
         af:5a:c2:78:ac:13:fd:c8:8b:e7:05:36:f2:8c:7f:5b:4b:ae:
         ca:b1:b1:4a:19:ab:47:82:e7:00:e4:5a:d3:46:c3:2c:4c:05:
         94:77:60:52:03:41:d9:c4:03:76:01:16:bd:bc:17:56:86:c4:
         a2:d0:44:12:bd:a3:3b:e1:39:49:02:e9:79:bc:d7:bb:ba:12:
         0c:07:76:b6:e7:b3:07:a7:e1:47:f7:63:46:05:9f:0f:e0:93:
         f7:ae:ef:ca:30:2d:56:6f:c2:95:35:a8:37:58:77:c3:6c:85:
         88:a0:1c:f8:e2:ce:d1:a9:23:c0:5d:f1:08:ed:83:d2:81:bc:
         19:18:70:8d:d9:06:5f:87:22:67:db:57:b8:82:8c:d0:fe:3b:
         19:3b:7d:47:0a:0d:07:47:dc:45:2d:01:2d:a8:99:c9:25:b8:
         79:97:98:3c:7b:1c:ba:d0:9c:d1:d2:81:b7:b7:ec:58:2e:f4:
         89:99:3f:d9:f0:4b:df:62:d6:73:de:7b:69:03:00:9d:08:a8:
         02:96:29:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:09 2025 by rpki-client