Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383031643a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383031643a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          V7FSQRFehMEnM/hi6ZiSSyvtd8QhhguBBG6Bac+0ss4=
Subject key identifier:   62:2D:C9:1D:8A:DF:3D:EA:B8:EF:55:B5:32:21:8D:AF:B6:B3:A2:0D
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       3D159A184B7FCFF5439B168BD066AB0A708E3ED8
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383031643a3a2f34382d3438203d3e203532343638.roa
Signing time:             Fri 07 Mar 2025 20:41:12 +0000
ROA not before:           Fri 07 Mar 2025 20:36:12 +0000
ROA not after:            Fri 06 Mar 2026 20:41:12 +0000
asID:                     52468
IP address blocks:        2804:2b78:801d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:15:9a:18:4b:7f:cf:f5:43:9b:16:8b:d0:66:ab:0a:70:8e:3e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Mar  7 20:36:12 2025 GMT
            Not After : Mar  6 20:41:12 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8d:cf:d5:2a:02:b7:6e:4c:bc:fc:1b:5a:73:
                    e3:e4:36:98:96:61:c2:d4:d1:cc:95:87:48:d6:ef:
                    1a:78:0d:cf:6e:2f:65:35:35:ee:a4:78:d9:9a:e1:
                    4e:89:f0:d2:52:13:12:db:6e:94:17:8f:7c:a0:35:
                    fb:e6:cc:b0:f4:2c:89:eb:28:f1:1e:07:ba:84:ee:
                    7e:2c:fc:29:b3:26:ac:58:51:81:a1:2f:12:0b:bd:
                    5e:90:27:43:ce:5f:b7:a4:3d:83:b1:45:2c:d6:20:
                    5f:4f:70:39:dd:59:88:f2:d4:94:bd:c2:84:e2:28:
                    a6:31:9d:fd:01:d7:33:6d:47:33:5c:0a:9e:85:35:
                    73:79:c5:69:7b:4f:65:4d:4a:c1:ba:ce:29:c7:da:
                    ef:ad:db:ea:3d:c1:3b:f3:bd:58:33:0e:b0:84:83:
                    d1:b3:b9:c7:cb:6b:f9:ae:19:be:90:c4:66:71:73:
                    83:03:6f:48:05:a6:b0:f2:e4:6f:bf:4f:fa:f3:0c:
                    68:89:dc:80:4d:4e:72:55:1e:99:75:1f:0a:28:59:
                    f9:52:a8:56:14:ca:79:6c:16:53:f1:12:b6:c7:2b:
                    ec:f1:79:df:f6:7d:69:52:46:e8:47:4f:7a:ee:c1:
                    4e:81:2e:7d:54:0e:1f:85:fb:2e:cc:02:78:e7:4c:
                    4d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2D:C9:1D:8A:DF:3D:EA:B8:EF:55:B5:32:21:8D:AF:B6:B3:A2:0D
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383031643a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:801d::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:1f:16:d2:1d:ad:63:54:28:80:be:c7:00:a9:07:29:f6:8e:
         d1:6d:c8:d2:4c:e9:81:c6:01:2a:3e:a0:33:39:b2:6b:04:d4:
         69:6e:d9:b1:b8:31:bc:28:cc:1d:9f:42:70:f7:37:35:13:af:
         dc:2c:88:89:ee:20:07:87:82:8c:df:66:5e:d6:aa:4d:bf:7a:
         4d:3f:34:37:a1:35:ed:b9:30:53:5b:d2:2f:0c:99:e6:cd:0e:
         2d:89:f8:1d:3c:47:01:af:67:6f:95:0f:c0:75:b2:2e:5d:1d:
         43:63:d1:ed:70:04:22:cc:ea:f1:8e:95:36:ed:9a:a7:3c:7b:
         74:30:d4:14:1d:42:94:96:9f:c9:a1:87:e7:ac:be:7d:8e:0f:
         e8:b9:93:7f:b4:29:33:42:b9:01:bb:3d:92:22:ba:21:9a:fc:
         08:a9:63:d8:1b:75:f7:72:00:74:a0:82:00:ef:d6:ac:50:b9:
         ee:0f:bd:cf:ce:69:d5:62:d0:59:c0:e8:c9:00:1b:4b:9a:28:
         ba:75:ed:74:5a:a8:f9:8d:ba:57:c4:d4:e9:99:83:f1:3b:11:
         28:56:30:98:97:38:ba:e9:30:a4:16:48:ed:d9:ac:f8:d1:97:
         c8:69:54:df:ee:66:12:63:76:69:8d:45:ca:d8:8a:ad:34:48:
         03:0b:cf:07
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUPRWaGEt/z/VDmxaL0GarCnCOPtgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyNDhDODBFQTVDNEM1Nzc5QzEyOTcxMjFEMEJEOEQy
REMzNzlGMDAeFw0yNTAzMDcyMDM2MTJaFw0yNjAzMDYyMDQxMTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjQ4RENGRDUyQTAyQjc2RTRD
QkNGQzFCNUE3M0UzRTQzNjk4OTY2MUMyRDREMUNDOTU4NzQ4RDZFRjFBNzgwRENG
NkUyRjY1MzUzNUVFQTQ3OEQ5OUFFMTRFODlGMEQyNTIxMzEyREI2RTk0MTc4RjdD
QTAzNUZCRTZDQ0IwRjQyQzg5RUIyOEYxMUUwN0JBODRFRTdFMkNGQzI5QjMyNkFD
NTg1MTgxQTEyRjEyMEJCRDVFOTAyNzQzQ0U1RkI3QTQzRDgzQjE0NTJDRDYyMDVG
NEY3MDM5REQ1OTg4RjJENDk0QkRDMjg0RTIyOEE2MzE5REZEMDFENzMzNkQ0NzMz
NUMwQTlFODUzNTczNzlDNTY5N0I0RjY1NEQ0QUMxQkFDRTI5QzdEQUVGQUREQkVB
M0RDMTNCRjNCRDU4MzMwRUIwODQ4M0QxQjNCOUM3Q0I2QkY5QUUxOUJFOTBDNDY2
NzE3MzgzMDM2RjQ4MDVBNkIwRjJFNDZGQkY0RkZBRjMwQzY4ODlEQzgwNEQ0RTcy
NTUxRTk5NzUxRjBBMjg1OUY5NTJBODU2MTRDQTc5NkMxNjUzRjExMkI2QzcyQkVD
RjE3OURGRjY3RDY5NTI0NkU4NDc0RjdBRUVDMTRFODEyRTdENTQwRTFGODVGQjJF
Q0MwMjc4RTc0QzRENUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtI3P1SoCt25MvPwbWnPj5DaYlmHC1NHMlYdI1u8aeA3Pbi9lNTXu
pHjZmuFOifDSUhMS226UF498oDX75syw9CyJ6yjxHge6hO5+LPwpsyasWFGBoS8S
C71ekCdDzl+3pD2DsUUs1iBfT3A53VmI8tSUvcKE4iimMZ39AdczbUczXAqehTVz
ecVpe09lTUrBus4px9rvrdvqPcE7871YMw6whIPRs7nHy2v5rhm+kMRmcXODA29I
Baaw8uRvv0/68wxoidyATU5yVR6ZdR8KKFn5UqhWFMp5bBZT8RK2xyvs8Xnf9n1p
UkboR0967sFOgS59VA4fhfsuzAJ450xNWwIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FGItyR2K3z3quO9VtTIhja+2s6INMB8GA1UdIwQYMBaAFK4kjIDqXExXecEpcSHQ
vY0tw3nwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzEvQUUyNDhDODBFQTVDNEM1
Nzc5QzEyOTcxMjFEMEJEOEQyREMzNzlGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BRTI0OEM4MEVBNUM0QzU3NzlDMTI5NzEyMUQwQkQ4RDJEQzM3
OUYwLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8xLzMyMzgzMDM0M2EzMjYyMzczODNh
MzgzMDMxNjQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKAQreIAdMA0GCSqGSIb3DQEBCwUAA4IBAQCkHxbSHa1jVCiAvscAqQcp
9o7RbcjSTOmBxgEqPqAzObJrBNRpbtmxuDG8KMwdn0Jw9zc1E6/cLIiJ7iAHh4KM
32Ze1qpNv3pNPzQ3oTXtuTBTW9IvDJnmzQ4tifgdPEcBr2dvlQ/AdbIuXR1DY9Ht
cAQizOrxjpU27ZqnPHt0MNQUHUKUlp/JoYfnrL59jg/ouZN/tCkzQrkBuz2SIroh
mvwIqWPYG3X3cgB0oIIA79asULnuD73PzmnVYtBZwOjJABtLmii6de10Wqj5jbpX
xNTpmYPxOxEoVjCYlzi66TCkFkjt2az40ZfIaVTf7mYSY3ZpjUXK2IqtNEgDC88H
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:52:08 2025 by rpki-client