Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383032303a3a2f34342d3434203d3e203532343638.roa
File:                     323830343a326237383a383032303a3a2f34342d3434203d3e203532343638.roa (raw, json)
Hash identifier:          tUo77lyFg/R1AixJuNKFA97tJ3nS7VAjnAS+nM4bkJI=
Subject key identifier:   34:55:7C:93:B7:E6:A9:5C:0A:36:A6:69:B0:E1:6E:8A:2E:AA:37:60
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       359EA95125748F904CA8888204FEC68EE0B075FF
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383032303a3a2f34342d3434203d3e203532343638.roa
Signing time:             Fri 07 Mar 2025 20:40:58 +0000
ROA not before:           Fri 07 Mar 2025 20:35:58 +0000
ROA not after:            Fri 06 Mar 2026 20:40:58 +0000
asID:                     52468
IP address blocks:        2804:2b78:8020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:9e:a9:51:25:74:8f:90:4c:a8:88:82:04:fe:c6:8e:e0:b0:75:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Mar  7 20:35:58 2025 GMT
            Not After : Mar  6 20:40:58 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4c:2e:21:1c:08:a1:80:3d:3d:ae:01:ef:1a:
                    04:9a:00:df:d0:4e:bd:92:55:0a:3c:4f:ef:09:3e:
                    fa:d5:09:51:86:08:34:1e:cc:91:7d:c2:38:f1:1e:
                    64:9b:f7:7f:97:88:c8:d6:66:51:5c:ac:6d:c6:cc:
                    0b:ec:bd:f5:ad:2e:a5:c0:65:bd:02:6b:d4:53:2f:
                    c0:83:ea:c0:7e:9d:da:af:fe:27:8c:19:3f:db:47:
                    ba:5e:a9:2b:8f:75:49:a3:60:c0:c5:fa:4a:50:d4:
                    c5:08:6f:32:ad:0c:bd:15:7b:53:78:9a:13:35:55:
                    cc:cd:74:be:ad:ba:c8:10:e8:74:3e:1c:90:00:21:
                    77:c8:91:78:2e:06:3b:2d:fa:ab:e0:be:c0:44:ad:
                    61:8f:be:05:67:67:e6:f7:dc:47:f7:c7:dd:c3:18:
                    fa:54:55:89:67:46:db:af:6b:ec:d6:ef:96:ba:62:
                    44:d4:9c:96:56:b9:fa:41:bc:eb:45:c6:44:e3:db:
                    77:6a:7c:da:21:b9:00:5c:fb:74:be:3f:88:63:6b:
                    dd:4c:9f:e3:d9:aa:68:b8:a7:7a:ec:bb:7f:33:62:
                    fc:9b:c6:d5:fd:4d:f4:bd:e9:9d:48:62:43:6a:22:
                    e9:87:81:ce:4a:4e:b3:bd:07:4d:14:90:77:9a:07:
                    05:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:55:7C:93:B7:E6:A9:5C:0A:36:A6:69:B0:E1:6E:8A:2E:AA:37:60
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383032303a3a2f34342d3434203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8020::/44

    Signature Algorithm: sha256WithRSAEncryption
         2c:2b:9e:b9:ba:a8:61:5a:b9:38:a9:ea:a0:24:90:25:e6:c4:
         dd:47:74:ac:92:52:5e:da:0d:55:62:c7:d4:16:46:d3:af:8f:
         8a:f5:49:17:3b:80:cc:cd:83:74:f2:9b:b2:8f:59:ee:15:94:
         c0:f9:99:6e:f4:36:15:71:7e:6d:7f:b2:81:1c:33:b2:98:77:
         0b:ca:b3:d8:cc:66:fe:86:6c:bb:7d:73:84:ab:7f:32:e8:b1:
         c5:54:94:9f:20:57:7d:36:07:90:0e:8e:6e:a8:08:b5:5a:13:
         12:a4:78:ea:94:ac:8b:54:8e:10:5d:cb:56:45:51:c5:45:34:
         09:07:9e:ac:66:d4:1e:f1:13:e3:1b:c7:c5:aa:56:dc:0e:dc:
         bc:b8:a4:9d:dc:cf:07:3c:72:8f:fc:8b:00:12:c4:e5:dc:5c:
         05:9e:ae:4e:8b:48:3e:11:a1:24:5f:8a:5a:38:81:99:27:f4:
         21:61:39:e8:9f:33:5d:b6:93:f8:37:58:88:74:ea:0d:40:56:
         ee:ec:ed:84:91:04:ef:9e:ef:74:fe:91:1b:c3:2f:01:e0:ca:
         68:5f:e9:55:61:09:e5:65:41:19:91:d3:ea:eb:3e:a0:e2:22:
         93:94:ca:9e:7c:c5:a8:e8:a7:27:a4:5c:35:02:2c:cf:fa:67:
         f1:a7:12:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:54:42 2025 by rpki-client