Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030323a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383030323a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          BlJQaovnqGzNmIgS82FYLSUuiL1u5gLH/sjfoIGDHts=
Subject key identifier:   1B:2A:82:FC:2E:8B:B8:37:74:9A:1E:A7:18:9C:38:4F:1D:E9:BC:D8
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       421298A033DB5B6E65375541C03A043D75B2E758
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030323a3a2f34382d3438203d3e203532343638.roa
Signing time:             Thu 08 May 2025 20:00:00 +0000
ROA not before:           Thu 08 May 2025 19:55:00 +0000
ROA not after:            Thu 07 May 2026 20:00:00 +0000
asID:                     52468
IP address blocks:        2804:2b78:8002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 May 2025 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:12:98:a0:33:db:5b:6e:65:37:55:41:c0:3a:04:3d:75:b2:e7:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: May  8 19:55:00 2025 GMT
            Not After : May  7 20:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5e:89:a0:de:89:a3:a2:3d:93:4a:ce:45:7b:
                    7c:87:25:93:63:47:f5:9a:af:08:85:95:a4:bc:36:
                    10:7c:2f:e1:a8:16:64:85:2b:c6:8c:71:d3:68:0a:
                    6f:03:12:22:3f:2c:6b:5e:ee:84:37:e2:53:cc:17:
                    b6:ad:d7:2f:33:8f:94:f0:bf:86:4c:e9:e8:44:63:
                    57:f8:41:9c:f0:a2:85:11:e6:07:51:ae:98:51:49:
                    fb:2d:65:5b:36:88:00:f7:b8:02:fb:78:6b:b2:87:
                    fe:39:6b:29:1a:aa:4f:90:9b:ee:04:28:58:03:40:
                    2d:ef:f3:4f:74:7c:5a:f6:81:47:5a:b9:29:bb:a8:
                    8d:6d:e4:39:61:c6:01:a7:80:c3:7b:83:e2:76:b0:
                    9f:32:e1:ff:d5:42:e5:5a:99:41:2f:c9:f9:99:76:
                    6f:b1:b8:99:47:cc:b6:b3:2c:38:80:cf:45:ba:c3:
                    96:97:1d:c9:83:e4:3a:9b:6c:cf:ab:06:d8:ac:bd:
                    65:a1:99:55:c7:8d:62:6a:4a:17:3e:dd:ed:23:be:
                    de:3a:78:d1:61:b2:2b:99:a1:f3:b5:fe:66:9c:a5:
                    7b:b4:ab:f5:db:e8:bc:59:c3:5c:73:1c:79:63:3a:
                    c6:18:bd:34:2d:b5:c7:e6:06:24:a2:47:bb:9e:96:
                    83:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2A:82:FC:2E:8B:B8:37:74:9A:1E:A7:18:9C:38:4F:1D:E9:BC:D8
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030323a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8002::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:3e:cf:6e:d5:33:bc:1b:e6:cf:34:e5:24:09:5f:a2:8d:f5:
         cf:fa:88:d0:61:a9:7e:80:b1:d4:ec:f3:69:35:55:69:f7:1d:
         39:cd:a7:cb:8a:a2:bd:e7:17:7e:d9:33:23:8a:17:9a:d6:99:
         ca:25:13:f4:41:c8:6b:6f:ab:53:75:cf:f4:b4:7e:46:c0:62:
         60:b0:46:99:dd:ff:8a:38:16:95:c0:fe:e9:9b:6a:f4:08:cd:
         87:3f:a5:b7:b4:46:db:ab:e4:a7:ea:98:f8:05:82:f3:22:e1:
         83:35:28:2e:8b:cd:e0:76:e1:56:e9:3b:7d:29:03:85:32:78:
         c3:82:90:80:5a:31:40:d8:5e:f4:d2:06:79:1f:27:6f:76:eb:
         d8:cf:2c:0d:45:f6:53:42:68:63:51:1a:64:eb:81:87:0b:52:
         73:7c:3d:63:97:37:e3:d3:f5:7e:80:5d:ea:1a:e7:b1:23:33:
         fc:af:64:bd:ad:a6:3b:3e:d5:5e:cb:f2:d8:03:ff:e3:a3:a9:
         1c:a0:62:c9:29:c1:5b:27:76:34:3e:0c:03:59:38:1c:c6:40:
         75:b6:3a:c5:3d:86:75:4f:28:5b:dc:c9:71:7d:d4:c8:cc:a9:
         7c:b1:f3:17:bd:7d:24:54:41:39:31:5a:29:f2:8e:b1:61:80:
         5d:18:82:ce
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUQhKYoDPbW25lN1VBwDoEPXWy51gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyNDhDODBFQTVDNEM1Nzc5QzEyOTcxMjFEMEJEOEQy
REMzNzlGMDAeFw0yNTA1MDgxOTU1MDBaFw0yNjA1MDcyMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTQ1RTg5QTBERTg5QTNBMjNE
OTM0QUNFNDU3QjdDODcyNTkzNjM0N0Y1OUFBRjA4ODU5NUE0QkMzNjEwN0MyRkUx
QTgxNjY0ODUyQkM2OEM3MUQzNjgwQTZGMDMxMjIyM0YyQzZCNUVFRTg0MzdFMjUz
Q0MxN0I2QURENzJGMzM4Rjk0RjBCRjg2NENFOUU4NDQ2MzU3Rjg0MTlDRjBBMjg1
MTFFNjA3NTFBRTk4NTE0OUZCMkQ2NTVCMzY4ODAwRjdCODAyRkI3ODZCQjI4N0ZF
Mzk2QjI5MUFBQTRGOTA5QkVFMDQyODU4MDM0MDJERUZGMzRGNzQ3QzVBRjY4MTQ3
NUFCOTI5QkJBODhENkRFNDM5NjFDNjAxQTc4MEMzN0I4M0UyNzZCMDlGMzJFMUZG
RDU0MkU1NUE5OTQxMkZDOUY5OTk3NjZGQjFCODk5NDdDQ0I2QjMyQzM4ODBDRjQ1
QkFDMzk2OTcxREM5ODNFNDNBOUI2Q0NGQUIwNkQ4QUNCRDY1QTE5OTU1Qzc4RDYy
NkE0QTE3M0VEREVEMjNCRURFM0E3OEQxNjFCMjJCOTlBMUYzQjVGRTY2OUNBNTdC
QjRBQkY1REJFOEJDNTlDMzVDNzMxQzc5NjMzQUM2MThCRDM0MkRCNUM3RTYwNjI0
QTI0N0JCOUU5NjgzRTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAlF6JoN6Jo6I9k0rORXt8hyWTY0f1mq8IhZWkvDYQfC/hqBZkhSvG
jHHTaApvAxIiPyxrXu6EN+JTzBe2rdcvM4+U8L+GTOnoRGNX+EGc8KKFEeYHUa6Y
UUn7LWVbNogA97gC+3hrsof+OWspGqpPkJvuBChYA0At7/NPdHxa9oFHWrkpu6iN
beQ5YcYBp4DDe4PidrCfMuH/1ULlWplBL8n5mXZvsbiZR8y2syw4gM9FusOWlx3J
g+Q6m2zPqwbYrL1loZlVx41iakoXPt3tI77eOnjRYbIrmaHztf5mnKV7tKv12+i8
WcNccxx5YzrGGL00LbXH5gYkoke7npaD4QIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FBsqgvwui7g3dJoepxicOE8d6bzYMB8GA1UdIwQYMBaAFK4kjIDqXExXecEpcSHQ
vY0tw3nwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzEvQUUyNDhDODBFQTVDNEM1
Nzc5QzEyOTcxMjFEMEJEOEQyREMzNzlGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BRTI0OEM4MEVBNUM0QzU3NzlDMTI5NzEyMUQwQkQ4RDJEQzM3
OUYwLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8xLzMyMzgzMDM0M2EzMjYyMzczODNh
MzgzMDMwMzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKAQreIACMA0GCSqGSIb3DQEBCwUAA4IBAQBLPs9u1TO8G+bPNOUkCV+i
jfXP+ojQYal+gLHU7PNpNVVp9x05zafLiqK95xd+2TMjihea1pnKJRP0Qchrb6tT
dc/0tH5GwGJgsEaZ3f+KOBaVwP7pm2r0CM2HP6W3tEbbq+Sn6pj4BYLzIuGDNSgu
i83gduFW6Tt9KQOFMnjDgpCAWjFA2F700gZ5HydvduvYzywNRfZTQmhjURpk64GH
C1JzfD1jlzfj0/V+gF3qGuexIzP8r2S9raY7PtVey/LYA//jo6kcoGLJKcFbJ3Y0
PgwDWTgcxkB1tjrFPYZ1Tyhb3MlxfdTIzKl8sfMXvX0kVEE5MVop8o6xYYBdGILO
-----END CERTIFICATE-----
Generated at Sat May 17 11:34:17 2025 by rpki-client