Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383035303a3a2f34342d3434203d3e203532343638.roa
File:                     323830343a326237383a383035303a3a2f34342d3434203d3e203532343638.roa (raw, json)
Hash identifier:          2KPfC4CHoHenEN8wdEPzYdUpnEegL15NY4i6kDfAEc8=
Subject key identifier:   3D:43:F3:2B:0C:14:28:F6:71:B4:EE:6E:80:23:AA:CA:70:09:3F:B0
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       7DF4C13E196E8D0F78DAAD5963FA45ABBFAE4926
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383035303a3a2f34342d3434203d3e203532343638.roa
Signing time:             Thu 13 Feb 2025 15:48:45 +0000
ROA not before:           Thu 13 Feb 2025 15:43:45 +0000
ROA not after:            Thu 12 Feb 2026 15:48:45 +0000
asID:                     52468
IP address blocks:        2804:2b78:8050::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 07:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f4:c1:3e:19:6e:8d:0f:78:da:ad:59:63:fa:45:ab:bf:ae:49:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Feb 13 15:43:45 2025 GMT
            Not After : Feb 12 15:48:45 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7a:d2:57:d5:a2:1b:7d:63:7d:38:40:a6:be:
                    a4:90:18:50:9b:23:48:98:36:03:c5:4a:e5:37:23:
                    85:a9:6e:1a:84:a0:37:c0:ea:3f:74:dd:93:d9:ff:
                    19:df:fe:c0:09:07:29:8b:ef:7c:50:c9:8e:33:e5:
                    e4:fa:46:6c:dc:fe:2f:0f:f8:d5:95:6f:04:f6:a4:
                    4b:e1:a0:b3:31:f5:e3:a0:cc:1f:35:0f:a7:07:cd:
                    be:8b:1b:36:78:ff:03:91:ce:b6:5d:c7:dd:66:3c:
                    4f:3d:f1:f5:94:11:f7:f2:a8:fe:d9:9a:25:00:bf:
                    68:0c:3d:f7:75:66:d4:51:63:44:26:ef:e3:2d:c0:
                    d7:7e:f4:87:ce:c9:63:76:70:be:d4:5b:a0:67:fc:
                    c7:0a:f4:5f:04:cf:84:fe:63:f0:fa:f9:59:56:cd:
                    15:dd:8c:16:66:5c:82:47:40:ae:d2:80:c7:7d:df:
                    f1:35:53:7e:ac:c6:5a:47:07:97:2c:e3:fe:f0:b7:
                    46:b4:23:bf:e4:7d:d0:db:ba:1a:00:65:2a:fd:2e:
                    e6:e3:61:fe:06:74:f0:fe:9a:b2:d3:24:f0:a9:54:
                    d9:7f:2c:16:ec:87:14:03:2a:e7:b9:6b:bc:db:1c:
                    b6:1f:22:0e:97:e0:8d:e0:5e:eb:4a:ef:45:02:49:
                    41:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:43:F3:2B:0C:14:28:F6:71:B4:EE:6E:80:23:AA:CA:70:09:3F:B0
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383035303a3a2f34342d3434203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8050::/44

    Signature Algorithm: sha256WithRSAEncryption
         8b:54:28:65:62:cd:c0:de:58:db:7e:2a:69:26:30:6d:f9:7b:
         a3:c9:44:a4:59:d8:45:17:46:78:b6:b6:bb:c1:a3:da:37:25:
         88:58:8d:81:c3:d8:63:ee:7e:75:ae:a1:a0:cc:f8:db:59:fa:
         73:59:d2:e6:46:e9:12:83:37:e3:1f:b0:50:8c:9e:db:1d:34:
         cd:3e:cf:e5:b4:32:6f:25:17:50:b4:6b:03:b8:cd:93:98:32:
         62:b3:e5:a4:ff:6e:a7:36:62:74:d5:19:b6:e1:11:27:ed:f8:
         ff:65:6a:ce:34:ac:8d:a8:18:ac:93:dc:1e:34:d4:78:f2:0f:
         e8:e9:bf:fd:49:96:df:a6:f3:62:25:4e:42:82:90:8f:af:35:
         81:93:43:8a:d8:85:09:a7:e8:b3:7e:2e:18:6c:02:5b:e2:f7:
         d2:ab:f4:59:0a:31:51:b3:3c:44:4e:a0:fa:e2:3f:f6:12:0f:
         80:d5:4d:40:69:5e:29:98:d7:81:19:bb:39:8a:77:79:6b:f9:
         73:40:ff:d5:7c:a6:40:27:cf:43:7d:26:cc:a6:b0:59:62:b8:
         13:69:13:44:e0:81:b7:57:ec:76:de:d3:90:df:de:11:81:c4:
         66:b1:66:07:7e:4f:d6:b7:46:35:8a:eb:32:40:d3:ae:b0:2b:
         29:62:3c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:54:51 2025 by rpki-client