Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a3437303a3a2f33322d3332203d3e203238313234.roa
File:                     323830343a3437303a3a2f33322d3332203d3e203238313234.roa (raw, json)
Hash identifier:          LSRCJMtxqYsPMdQApuk3HJgdxKkLRGzVkjbE65vS4Qw=
Subject key identifier:   F4:1E:82:F4:D9:AB:0D:51:5B:0E:FB:38:5C:F3:35:42:5B:75:3B:C8
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       3161FB7084410D0443E7A9EBA33FF865C875D7EB
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a3437303a3a2f33322d3332203d3e203238313234.roa
Signing time:             Thu 06 Feb 2025 18:53:18 +0000
ROA not before:           Thu 06 Feb 2025 18:48:18 +0000
ROA not after:            Thu 05 Feb 2026 18:53:18 +0000
asID:                     28124
IP address blocks:        2804:470::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 07:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:61:fb:70:84:41:0d:04:43:e7:a9:eb:a3:3f:f8:65:c8:75:d7:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Feb  6 18:48:18 2025 GMT
            Not After : Feb  5 18:53:18 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:95:f6:e8:27:05:0b:66:d6:a8:bd:fb:00:17:
                    ce:9a:b3:5c:56:5e:92:c8:5d:c0:40:46:1f:6a:92:
                    75:a5:36:e1:36:d9:3f:5b:f1:86:11:e7:f1:76:11:
                    b9:31:ce:7d:a9:18:a4:b1:ce:a2:21:e5:09:3e:d4:
                    aa:6c:1e:ea:4e:c8:af:94:b2:cc:5d:2f:c5:fd:b6:
                    a9:19:e3:a4:ad:de:97:2f:a9:76:e0:11:8b:46:d0:
                    6f:42:36:04:6e:c4:87:2f:50:54:0f:b4:f4:be:57:
                    af:7b:2e:a5:2c:17:67:c1:76:b6:f1:40:04:d1:ff:
                    70:a6:c1:1d:16:ce:d5:db:99:9c:b1:50:7d:73:08:
                    46:10:0c:a4:19:73:51:02:ee:19:1c:1c:ca:8e:24:
                    51:a1:59:87:3a:12:a4:55:80:25:30:58:d2:51:ac:
                    45:6a:8f:ea:b4:a7:16:8d:ce:03:2f:56:cb:53:59:
                    a1:5b:5a:bc:70:01:5b:0b:6e:b7:cf:cc:a8:73:a1:
                    fa:a1:a8:e0:41:77:3a:91:8d:fd:64:b1:c8:7d:d7:
                    e6:fb:a0:82:c6:d2:6b:d1:02:2b:32:3b:b5:49:28:
                    48:d2:0d:12:8b:27:6f:21:5a:c5:29:67:76:7c:b2:
                    78:a0:6f:d2:d3:04:9b:39:3f:c3:45:41:a9:f7:6b:
                    71:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1E:82:F4:D9:AB:0D:51:5B:0E:FB:38:5C:F3:35:42:5B:75:3B:C8
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a3437303a3a2f33322d3332203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:470::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:5c:11:ca:22:25:2a:d2:aa:26:5c:48:98:ee:6e:17:58:7d:
         43:9d:94:70:0f:7e:98:8a:2e:63:47:8f:30:e5:d6:ce:4c:42:
         a2:8c:09:f7:49:cc:3b:af:0f:1c:b8:5a:c0:b9:f3:e4:c8:41:
         5f:7d:45:f9:74:c3:db:04:37:0a:4d:a9:fd:a5:2c:8f:c2:9e:
         0a:3c:b6:32:86:ab:98:12:8c:15:6d:a0:5c:c4:a4:7c:13:2a:
         31:08:58:6a:c9:c1:9d:a8:58:dd:be:90:ea:68:f7:7b:2d:c4:
         94:e4:34:75:4d:8f:4c:b4:fa:c0:b2:79:08:99:5a:a4:71:a1:
         b4:05:f0:0c:c2:28:16:92:0e:fb:64:00:b7:9b:1f:5d:65:66:
         20:20:90:75:d1:90:d0:45:e2:f2:d6:e2:02:d2:9e:12:14:1a:
         23:3b:4c:6c:2b:8d:80:e9:fd:f2:c2:fe:30:9c:e3:04:40:04:
         6e:3a:33:ce:bb:72:85:de:a3:76:a0:4f:de:20:37:c3:dc:6b:
         24:db:ac:c4:c4:8d:e9:30:45:a4:75:5e:d3:43:35:e5:55:20:
         90:c6:c3:43:3d:a8:d7:60:a4:a5:ab:96:be:06:c1:4a:ab:f8:
         c5:73:72:b4:9b:7e:a3:77:65:3b:2c:27:86:a2:41:28:ef:eb:
         36:b1:d1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:55:05 2025 by rpki-client