Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383033333a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383033333a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          yeCRXz62sJX/Xs1MoJJllDsD7ETGdh/dqypZ/a0gMr4=
Subject key identifier:   20:B5:75:11:C4:02:3E:68:1C:52:50:CB:C9:95:86:15:02:5F:97:5D
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       76EAC74C89C807FF08F7711254B8A6A46240723C
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383033333a3a2f34382d3438203d3e203532343638.roa
Signing time:             Fri 07 Mar 2025 20:42:11 +0000
ROA not before:           Fri 07 Mar 2025 20:37:11 +0000
ROA not after:            Fri 06 Mar 2026 20:42:11 +0000
asID:                     52468
IP address blocks:        2804:2b78:8033::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ea:c7:4c:89:c8:07:ff:08:f7:71:12:54:b8:a6:a4:62:40:72:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Mar  7 20:37:11 2025 GMT
            Not After : Mar  6 20:42:11 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d8:e9:fb:4e:e4:70:5b:ad:e1:87:ec:94:c7:
                    b1:f6:da:3a:92:8f:df:b6:2b:a8:7b:d3:ff:9c:4d:
                    96:da:3e:88:7d:58:9f:88:a2:6a:dd:6a:88:72:d4:
                    f6:e2:29:95:76:36:34:8e:00:3c:85:5b:bb:dd:fc:
                    a3:60:35:53:18:11:7e:9f:b4:1e:db:f0:f2:4c:bc:
                    ad:27:de:cd:2b:a1:e2:03:cb:88:d3:47:5a:6a:78:
                    42:9a:57:9d:47:6a:cd:c1:5f:40:ce:e0:b4:e7:67:
                    56:d7:a0:af:5b:38:41:df:d9:7c:ed:2c:bf:05:91:
                    be:9f:82:d9:90:cb:32:03:ab:73:cb:a9:74:2f:72:
                    23:51:5d:f0:dc:1e:5f:a2:24:4a:59:60:7c:f4:a9:
                    4c:e9:8c:8c:3b:21:06:ac:ad:d2:79:46:a6:8b:5a:
                    ef:c0:65:4c:1a:d8:d4:43:88:c2:c7:b9:cd:99:3a:
                    76:64:34:46:2c:5e:45:6d:61:70:9d:92:cc:0d:91:
                    5f:34:19:e3:06:ea:94:45:16:a7:8d:73:de:f6:b7:
                    cc:bb:ac:8c:48:15:e1:4c:63:20:00:94:ea:ea:43:
                    32:f2:9d:5f:93:18:1d:da:7a:38:06:5e:22:bb:73:
                    27:ce:98:31:d5:5a:ca:44:6a:91:11:08:06:98:db:
                    e8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B5:75:11:C4:02:3E:68:1C:52:50:CB:C9:95:86:15:02:5F:97:5D
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383033333a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8033::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:f8:a0:6c:80:54:c5:53:e6:62:7e:dd:0b:89:85:6b:99:39:
         40:a7:96:cf:5a:f8:6b:09:a0:8e:09:48:0f:17:53:dd:e7:fe:
         55:0b:ea:9f:08:d7:8f:2a:b4:fa:22:23:a5:82:10:c5:d5:f4:
         be:6c:63:86:1e:8f:64:69:c5:bd:94:9a:d5:3d:36:b6:17:65:
         9a:6a:58:7b:01:92:fe:b4:35:be:26:12:af:32:27:ca:1f:ee:
         4c:01:3e:d1:e0:dc:c9:75:75:ed:2c:28:7f:8e:69:eb:9f:73:
         0e:59:10:b1:68:b8:41:56:aa:7e:ed:39:a6:ee:f7:22:cf:e0:
         43:2c:f3:e9:9e:9c:8f:69:b9:18:fe:8a:67:51:a1:39:a5:7f:
         3a:10:c7:9b:52:02:ea:1d:e0:f8:4b:b2:2e:87:27:cf:30:e4:
         62:c7:ac:3c:8d:ab:a8:58:06:7e:cd:ac:e7:5e:b3:7a:3d:75:
         c7:4f:5b:91:e9:45:e4:79:48:07:be:e7:3d:06:3d:f9:b4:e4:
         88:77:97:a2:5c:83:04:80:c4:55:f7:09:de:8d:4c:3e:98:5d:
         8a:a6:6d:28:8f:8c:28:d6:2b:22:7a:88:9a:f5:3a:ec:ba:0e:
         1f:03:0b:26:e8:60:a4:e6:d3:3e:2c:ba:38:6b:c4:01:0e:bf:
         2b:4c:28:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:55:00 2025 by rpki-client