Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383033373a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383033373a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          4nUZObpmZCloiwcu+xznAdinl5TMdJVNwcwN0fKC+U8=
Subject key identifier:   AA:C2:4B:EA:C2:42:E1:57:16:A6:AA:59:A6:C9:00:AD:08:A7:59:EA
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       3F4121B5FCDD552B4AAD7DDBDF27ABFCAB8EC208
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383033373a3a2f34382d3438203d3e203532343638.roa
Signing time:             Thu 13 Feb 2025 15:49:06 +0000
ROA not before:           Thu 13 Feb 2025 15:44:06 +0000
ROA not after:            Thu 12 Feb 2026 15:49:06 +0000
asID:                     52468
IP address blocks:        2804:2b78:8037::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:41:21:b5:fc:dd:55:2b:4a:ad:7d:db:df:27:ab:fc:ab:8e:c2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Feb 13 15:44:06 2025 GMT
            Not After : Feb 12 15:49:06 2026 GMT
        Subject: CN=3082010A0282010100C5B3185A7E508FF4DA6EA0BAFBDA232D17D158BC238AB233C680102F1FF20A2582F448E2EF94D475779C2993D9A4BD40297B835E7517D95742B07439A4731505309B72E25EFC293C75FAF65979D328F209BCB287A8877C46EC302A254F4C591640DC346EBE36AFC6999EE291388ED1CA1043B6F7F203F93DE17542DF99CADFF4BCBA1B1172FA31CD086D89262F070ABF272042AB48A25C0B472D354F63FBD9BB5EF095B4FAAAEEEDDB52FC63E98F7ED7487D3E3E01B645B07B188D96FEA9F503A321B2DED68A2B369EF5EEC823DAA740FC680CD037ACBF54602D4B0194D8ADEFF90D611F7A0AD3F263C4EE75CA30ADA5C4129C4CBE56083FDA35C42FD32A814D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b3:18:5a:7e:50:8f:f4:da:6e:a0:ba:fb:da:
                    23:2d:17:d1:58:bc:23:8a:b2:33:c6:80:10:2f:1f:
                    f2:0a:25:82:f4:48:e2:ef:94:d4:75:77:9c:29:93:
                    d9:a4:bd:40:29:7b:83:5e:75:17:d9:57:42:b0:74:
                    39:a4:73:15:05:30:9b:72:e2:5e:fc:29:3c:75:fa:
                    f6:59:79:d3:28:f2:09:bc:b2:87:a8:87:7c:46:ec:
                    30:2a:25:4f:4c:59:16:40:dc:34:6e:be:36:af:c6:
                    99:9e:e2:91:38:8e:d1:ca:10:43:b6:f7:f2:03:f9:
                    3d:e1:75:42:df:99:ca:df:f4:bc:ba:1b:11:72:fa:
                    31:cd:08:6d:89:26:2f:07:0a:bf:27:20:42:ab:48:
                    a2:5c:0b:47:2d:35:4f:63:fb:d9:bb:5e:f0:95:b4:
                    fa:aa:ee:ed:db:52:fc:63:e9:8f:7e:d7:48:7d:3e:
                    3e:01:b6:45:b0:7b:18:8d:96:fe:a9:f5:03:a3:21:
                    b2:de:d6:8a:2b:36:9e:f5:ee:c8:23:da:a7:40:fc:
                    68:0c:d0:37:ac:bf:54:60:2d:4b:01:94:d8:ad:ef:
                    f9:0d:61:1f:7a:0a:d3:f2:63:c4:ee:75:ca:30:ad:
                    a5:c4:12:9c:4c:be:56:08:3f:da:35:c4:2f:d3:2a:
                    81:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C2:4B:EA:C2:42:E1:57:16:A6:AA:59:A6:C9:00:AD:08:A7:59:EA
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383033373a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8037::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:63:ae:ff:bb:21:62:61:2d:a5:bf:c6:30:cc:81:1c:0c:08:
         49:11:d1:4d:21:7d:2a:4c:be:18:73:de:d0:2d:8d:91:cd:55:
         e4:4d:32:67:87:70:6f:62:67:2c:af:76:81:30:b3:5c:58:79:
         07:5e:b0:44:fd:b2:51:32:e9:a4:f7:cd:28:15:78:10:82:aa:
         8e:d4:ac:f9:0c:8b:0d:12:f9:1f:3a:d1:ca:2d:a3:2a:4b:a6:
         de:a3:be:87:2e:cc:71:c7:11:10:c3:65:e3:9b:40:70:4c:b8:
         19:33:6c:1e:77:9e:96:9e:99:c0:bb:84:58:79:0a:e0:39:bd:
         8c:ed:c6:0b:a7:66:4b:9f:3f:59:95:ad:8a:1e:76:0b:0f:e6:
         62:be:21:22:6b:c1:ad:90:36:0c:f7:b8:24:8b:39:0e:f6:0e:
         13:3f:67:ed:e1:e8:73:a5:87:dc:02:a9:34:28:43:3f:a8:f4:
         24:b6:60:2b:60:3a:40:d6:6f:bf:56:c6:00:76:16:2f:5f:58:
         83:90:67:ef:b0:ac:e9:8f:49:82:29:32:98:b7:3a:19:5f:49:
         9c:23:f4:e1:45:14:13:b3:88:b3:ce:ba:e1:98:18:f0:a6:be:
         3d:80:0f:84:e9:a5:c6:ac:35:59:ad:84:06:a1:fd:71:ec:83:
         34:90:71:f2
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUP0EhtfzdVStKrX3b3yer/KuOwggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyNDhDODBFQTVDNEM1Nzc5QzEyOTcxMjFEMEJEOEQy
REMzNzlGMDAeFw0yNTAyMTMxNTQ0MDZaFw0yNjAyMTIxNTQ5MDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzVCMzE4NUE3RTUwOEZGNERB
NkVBMEJBRkJEQTIzMkQxN0QxNThCQzIzOEFCMjMzQzY4MDEwMkYxRkYyMEEyNTgy
RjQ0OEUyRUY5NEQ0NzU3NzlDMjk5M0Q5QTRCRDQwMjk3QjgzNUU3NTE3RDk1NzQy
QjA3NDM5QTQ3MzE1MDUzMDlCNzJFMjVFRkMyOTNDNzVGQUY2NTk3OUQzMjhGMjA5
QkNCMjg3QTg4NzdDNDZFQzMwMkEyNTRGNEM1OTE2NDBEQzM0NkVCRTM2QUZDNjk5
OUVFMjkxMzg4RUQxQ0ExMDQzQjZGN0YyMDNGOTNERTE3NTQyREY5OUNBREZGNEJD
QkExQjExNzJGQTMxQ0QwODZEODkyNjJGMDcwQUJGMjcyMDQyQUI0OEEyNUMwQjQ3
MkQzNTRGNjNGQkQ5QkI1RUYwOTVCNEZBQUFFRUVEREI1MkZDNjNFOThGN0VENzQ4
N0QzRTNFMDFCNjQ1QjA3QjE4OEQ5NkZFQTlGNTAzQTMyMUIyREVENjhBMkIzNjlF
RjVFRUM4MjNEQUE3NDBGQzY4MENEMDM3QUNCRjU0NjAyRDRCMDE5NEQ4QURFRkY5
MEQ2MTFGN0EwQUQzRjI2M0M0RUU3NUNBMzBBREE1QzQxMjlDNENCRTU2MDgzRkRB
MzVDNDJGRDMyQTgxNEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxbMYWn5Qj/TabqC6+9ojLRfRWLwjirIzxoAQLx/yCiWC9Eji75TU
dXecKZPZpL1AKXuDXnUX2VdCsHQ5pHMVBTCbcuJe/Ck8dfr2WXnTKPIJvLKHqId8
RuwwKiVPTFkWQNw0br42r8aZnuKROI7RyhBDtvfyA/k94XVC35nK3/S8uhsRcvox
zQhtiSYvBwq/JyBCq0iiXAtHLTVPY/vZu17wlbT6qu7t21L8Y+mPftdIfT4+AbZF
sHsYjZb+qfUDoyGy3taKKzae9e7II9qnQPxoDNA3rL9UYC1LAZTYre/5DWEfegrT
8mPE7nXKMK2lxBKcTL5WCD/aNcQv0yqBTQIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FKrCS+rCQuFXFqaqWabJAK0Ip1nqMB8GA1UdIwQYMBaAFK4kjIDqXExXecEpcSHQ
vY0tw3nwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzEvQUUyNDhDODBFQTVDNEM1
Nzc5QzEyOTcxMjFEMEJEOEQyREMzNzlGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BRTI0OEM4MEVBNUM0QzU3NzlDMTI5NzEyMUQwQkQ4RDJEQzM3
OUYwLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8xLzMyMzgzMDM0M2EzMjYyMzczODNh
MzgzMDMzMzczYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKAQreIA3MA0GCSqGSIb3DQEBCwUAA4IBAQAGY67/uyFiYS2lv8YwzIEc
DAhJEdFNIX0qTL4Yc97QLY2RzVXkTTJnh3BvYmcsr3aBMLNcWHkHXrBE/bJRMumk
980oFXgQgqqO1Kz5DIsNEvkfOtHKLaMqS6beo76HLsxxxxEQw2Xjm0BwTLgZM2we
d56WnpnAu4RYeQrgOb2M7cYLp2ZLnz9Zla2KHnYLD+ZiviEia8GtkDYM97gkizkO
9g4TP2ft4ehzpYfcAqk0KEM/qPQktmArYDpA1m+/VsYAdhYvX1iDkGfvsKzpj0mC
KTKYtzoZX0mcI/ThRRQTs4izzrrhmBjwpr49gA+E6aXGrDVZrYQGof1x7IM0kHHy
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:55:11 2025 by rpki-client