Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383031663a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383031663a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          shYGb6Fsze8i2/xnsSBpCXdVIj67Qc+ABb2AmLShSc8=
Subject key identifier:   90:DC:54:6E:06:43:50:F0:AB:31:AB:64:DE:62:F0:7C:24:02:13:B8
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       61A7B9F28621E403B727EFDAC6F2D562CA9D5157
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383031663a3a2f34382d3438203d3e203532343638.roa
Signing time:             Fri 07 Mar 2025 20:41:08 +0000
ROA not before:           Fri 07 Mar 2025 20:36:08 +0000
ROA not after:            Fri 06 Mar 2026 20:41:08 +0000
asID:                     52468
IP address blocks:        2804:2b78:801f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 07:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a7:b9:f2:86:21:e4:03:b7:27:ef:da:c6:f2:d5:62:ca:9d:51:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Mar  7 20:36:08 2025 GMT
            Not After : Mar  6 20:41:08 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9c:04:6e:3a:08:d5:28:db:ee:23:bc:31:8d:
                    0f:92:60:cc:78:93:a5:eb:12:79:7e:5b:04:f6:64:
                    22:51:00:dc:a0:e8:ba:19:67:2b:87:65:5c:30:16:
                    ca:1d:3e:a4:16:85:d9:4a:b4:27:6f:3c:c5:f0:d5:
                    70:29:d1:2c:49:4a:a4:3c:b5:fa:78:b4:e6:c4:0f:
                    dc:67:71:f5:b9:0e:13:be:ca:37:8c:2b:65:8a:f0:
                    29:e9:fd:ae:e9:f2:4a:ea:ce:61:00:f7:84:ca:bc:
                    7c:08:8d:3e:39:4d:b8:c7:40:5e:78:1e:64:1a:b0:
                    cf:40:89:fc:a5:35:2f:ec:14:85:66:c1:3a:42:cc:
                    27:dd:41:69:82:62:fb:2a:b1:04:6c:c3:c1:d9:7f:
                    0b:b0:6d:56:50:94:43:60:f9:7d:84:fd:b2:6e:4f:
                    06:39:a1:f9:5a:7e:b7:63:8f:e9:49:5a:8f:63:e8:
                    cc:c8:e1:49:4b:75:34:92:fa:0a:3f:18:ac:e0:0b:
                    38:f4:11:fb:cb:ea:a9:0c:b2:22:ed:e6:2e:d3:93:
                    fe:5a:47:51:9d:c1:f7:60:80:8b:7e:5f:8e:25:00:
                    cf:50:d6:61:4a:12:2d:9f:c2:59:a5:c6:a5:bc:77:
                    00:fe:e6:9e:cf:b6:84:3a:07:1a:f8:34:41:8a:89:
                    67:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DC:54:6E:06:43:50:F0:AB:31:AB:64:DE:62:F0:7C:24:02:13:B8
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383031663a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:801f::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:29:d9:f7:c8:5c:2c:5f:c1:47:0d:cb:fa:90:ac:5f:a9:79:
         fe:c5:04:c0:f8:83:dd:bc:1f:31:04:9e:70:93:79:08:15:6d:
         72:dd:89:91:9d:7b:98:8a:5a:43:d9:2c:db:55:7d:a7:42:18:
         3f:29:14:14:a4:41:26:3a:fe:83:35:8a:42:c4:cb:e8:74:31:
         85:41:eb:99:30:19:c1:23:a9:a2:ea:bd:db:28:3f:08:c9:cf:
         52:e0:13:22:e0:03:07:6f:a3:a3:05:77:3a:5e:3f:50:8d:51:
         3a:b6:09:66:7b:7a:ef:68:fd:d0:29:9d:00:fa:1f:88:69:e2:
         db:c1:97:ea:08:04:9f:06:88:66:57:11:5b:d5:76:b6:b7:fc:
         a6:43:c2:7b:df:69:de:86:a3:21:34:9c:2f:59:aa:db:5b:48:
         58:86:25:fb:de:28:a0:08:f3:cd:ad:44:f2:a6:7a:ad:ee:a1:
         eb:37:4b:29:4a:7e:4a:5e:79:46:33:6c:f3:de:45:1d:2c:d0:
         01:0b:6e:20:b0:32:19:b6:56:64:6b:73:b8:66:0d:50:05:b6:
         1d:85:39:22:e1:06:ed:49:2a:1b:dc:6a:d3:72:f8:1c:af:d3:
         30:b5:58:7e:50:5c:e5:db:38:51:08:36:10:85:5b:04:a2:2c:
         e9:aa:db:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:50:59 2025 by rpki-client