Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383033323a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383033323a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          c4bCAniuMvo86LXZacaBk6bKkATJknZnJC4AtSfkpfM=
Subject key identifier:   B9:19:DF:DF:AF:F9:33:B7:A1:93:E9:36:48:ED:E0:FF:85:D6:E3:8B
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       5420CF019D1161B89EA1FDD6EBF3155FA10DC868
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383033323a3a2f34382d3438203d3e203532343638.roa
Signing time:             Fri 07 Mar 2025 20:42:17 +0000
ROA not before:           Fri 07 Mar 2025 20:37:17 +0000
ROA not after:            Fri 06 Mar 2026 20:42:17 +0000
asID:                     52468
IP address blocks:        2804:2b78:8032::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 07:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:20:cf:01:9d:11:61:b8:9e:a1:fd:d6:eb:f3:15:5f:a1:0d:c8:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Mar  7 20:37:17 2025 GMT
            Not After : Mar  6 20:42:17 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:13:3c:43:1e:76:78:7e:73:3b:a0:1c:5e:59:
                    7e:22:4e:6e:f6:ae:9b:fe:ab:06:0a:40:a7:ab:23:
                    ac:19:11:cd:5a:d8:79:7b:e0:29:76:64:66:dd:e7:
                    04:27:f6:68:d8:31:6a:f7:bc:9f:ed:ea:9d:69:13:
                    ae:da:29:31:97:7d:4c:71:c7:a9:66:aa:3c:de:37:
                    ee:c2:5e:c5:6b:ff:55:a4:df:18:b4:94:09:c7:6d:
                    dd:27:86:f6:d4:ad:b4:af:95:b3:6c:ce:b1:20:24:
                    06:87:ff:af:53:1b:3d:e2:01:bd:d9:e4:c4:ed:e1:
                    9f:88:f4:61:e5:dd:b7:10:ba:58:46:4d:59:8e:bb:
                    ad:a3:30:cb:44:56:03:f1:ce:d7:bd:56:e6:f2:42:
                    0a:0d:58:68:f0:89:63:a1:fc:7e:49:23:66:51:7e:
                    df:74:4e:e2:32:93:00:89:d2:17:a2:49:46:22:85:
                    3b:26:f6:cf:6f:37:6f:0d:05:54:88:80:0e:93:7a:
                    3d:e2:64:6c:5f:e0:27:43:68:4f:30:12:88:b9:95:
                    d6:2a:0a:10:b4:15:f7:88:9e:f5:e2:cd:ff:0e:de:
                    68:79:be:08:bd:c0:66:03:ab:3d:2c:4e:69:32:5e:
                    2b:69:31:72:b7:78:29:6d:24:3d:94:06:92:1e:93:
                    62:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:19:DF:DF:AF:F9:33:B7:A1:93:E9:36:48:ED:E0:FF:85:D6:E3:8B
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383033323a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8032::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:4a:0d:e1:94:07:3b:bb:ee:ef:5b:55:cb:dd:c7:c7:b0:ee:
         63:c2:1d:eb:95:6a:6e:41:33:4d:24:a8:61:bc:90:bc:f0:a5:
         ca:38:bb:bd:98:eb:ac:56:8e:1e:73:6a:88:f6:c0:fd:7f:fb:
         ff:c0:7f:f9:51:ae:e9:fd:ac:ce:be:17:63:31:fe:ff:09:37:
         67:10:5c:59:25:07:3d:d8:03:f5:05:36:b7:3b:f4:af:1b:30:
         21:d9:e6:5c:e1:34:d6:63:fc:fa:16:9d:4a:a2:fe:14:83:0f:
         78:ac:f1:3c:b4:1b:03:fd:12:1d:5e:f0:fc:f0:b1:a0:3a:e9:
         c7:f5:80:75:3b:9d:e2:f6:15:bc:a5:49:8c:34:ed:0c:b2:d4:
         42:09:55:ad:ab:a3:5d:34:95:3b:4d:25:a7:c0:d7:d3:04:50:
         52:0b:be:98:70:b8:b9:b8:2e:d9:2b:7d:39:fc:6a:c8:55:18:
         e2:1d:9f:e6:7c:74:03:8b:47:e6:ac:d0:00:15:71:1b:a5:5c:
         80:40:55:b3:0d:e2:c5:ef:54:a8:df:7f:4b:b3:ff:70:f8:54:
         67:82:a0:4e:5b:32:c4:51:06:41:2a:76:31:15:46:66:57:25:
         31:ba:86:b7:e6:7f:34:79:59:98:2c:8c:e1:e4:f3:34:94:2b:
         67:da:c1:6e
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUVCDPAZ0RYbieof3W6/MVX6ENyGgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyNDhDODBFQTVDNEM1Nzc5QzEyOTcxMjFEMEJEOEQy
REMzNzlGMDAeFw0yNTAzMDcyMDM3MTdaFw0yNjAzMDYyMDQyMTdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkUxMzNDNDMxRTc2Nzg3RTcz
M0JBMDFDNUU1OTdFMjI0RTZFRjZBRTlCRkVBQjA2MEE0MEE3QUIyM0FDMTkxMUNE
NUFEODc5N0JFMDI5NzY2NDY2RERFNzA0MjdGNjY4RDgzMTZBRjdCQzlGRURFQTlE
NjkxM0FFREEyOTMxOTc3RDRDNzFDN0E5NjZBQTNDREUzN0VFQzI1RUM1NkJGRjU1
QTRERjE4QjQ5NDA5Qzc2REREMjc4NkY2RDRBREI0QUY5NUIzNkNDRUIxMjAyNDA2
ODdGRkFGNTMxQjNERTIwMUJERDlFNEM0RURFMTlGODhGNDYxRTVEREI3MTBCQTU4
NDY0RDU5OEVCQkFEQTMzMENCNDQ1NjAzRjFDRUQ3QkQ1NkU2RjI0MjBBMEQ1ODY4
RjA4OTYzQTFGQzdFNDkyMzY2NTE3RURGNzQ0RUUyMzI5MzAwODlEMjE3QTI0OTQ2
MjI4NTNCMjZGNkNGNkYzNzZGMEQwNTU0ODg4MDBFOTM3QTNERTI2NDZDNUZFMDI3
NDM2ODRGMzAxMjg4Qjk5NUQ2MkEwQTEwQjQxNUY3ODg5RUY1RTJDREZGMEVERTY4
NzlCRTA4QkRDMDY2MDNBQjNEMkM0RTY5MzI1RTJCNjkzMTcyQjc3ODI5NkQyNDNE
OTQwNjkyMUU5MzYyNkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvhM8Qx52eH5zO6AcXll+Ik5u9q6b/qsGCkCnqyOsGRHNWth5e+Ap
dmRm3ecEJ/Zo2DFq97yf7eqdaROu2ikxl31MccepZqo83jfuwl7Fa/9VpN8YtJQJ
x23dJ4b21K20r5WzbM6xICQGh/+vUxs94gG92eTE7eGfiPRh5d23ELpYRk1Zjrut
ozDLRFYD8c7XvVbm8kIKDVho8Iljofx+SSNmUX7fdE7iMpMAidIXoklGIoU7JvbP
bzdvDQVUiIAOk3o94mRsX+AnQ2hPMBKIuZXWKgoQtBX3iJ714s3/Dt5oeb4IvcBm
A6s9LE5pMl4raTFyt3gpbSQ9lAaSHpNiawIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FLkZ39+v+TO3oZPpNkjt4P+F1uOLMB8GA1UdIwQYMBaAFK4kjIDqXExXecEpcSHQ
vY0tw3nwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzEvQUUyNDhDODBFQTVDNEM1
Nzc5QzEyOTcxMjFEMEJEOEQyREMzNzlGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BRTI0OEM4MEVBNUM0QzU3NzlDMTI5NzEyMUQwQkQ4RDJEQzM3
OUYwLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8xLzMyMzgzMDM0M2EzMjYyMzczODNh
MzgzMDMzMzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKAQreIAyMA0GCSqGSIb3DQEBCwUAA4IBAQA7Sg3hlAc7u+7vW1XL3cfH
sO5jwh3rlWpuQTNNJKhhvJC88KXKOLu9mOusVo4ec2qI9sD9f/v/wH/5Ua7p/azO
vhdjMf7/CTdnEFxZJQc92AP1BTa3O/SvGzAh2eZc4TTWY/z6Fp1Kov4Ugw94rPE8
tBsD/RIdXvD88LGgOunH9YB1O53i9hW8pUmMNO0MstRCCVWtq6NdNJU7TSWnwNfT
BFBSC76YcLi5uC7ZK305/GrIVRjiHZ/mfHQDi0fmrNAAFXEbpVyAQFWzDeLF71So
339Ls/9w+FRngqBOWzLEUQZBKnYxFUZmVyUxuoa35n80eVmYLIzh5PM0lCtn2sFu
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:55:02 2025 by rpki-client