Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030333a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383030333a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          0fe3hAuF8ZKFdrw2b8s8s5yVnTnr6LLrq0LGjJziUMM=
Subject key identifier:   B3:F1:E9:F8:17:67:E5:26:FA:92:0A:3F:34:71:78:39:EE:14:D7:23
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       57E5097CAD5988449AD4B1D70DCF89019EB1185B
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030333a3a2f34382d3438203d3e203532343638.roa
Signing time:             Thu 08 May 2025 20:00:01 +0000
ROA not before:           Thu 08 May 2025 19:55:01 +0000
ROA not after:            Thu 07 May 2026 20:00:01 +0000
asID:                     52468
IP address blocks:        2804:2b78:8003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 May 2025 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e5:09:7c:ad:59:88:44:9a:d4:b1:d7:0d:cf:89:01:9e:b1:18:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: May  8 19:55:01 2025 GMT
            Not After : May  7 20:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:42:59:c1:ae:82:e7:fd:ad:de:0c:4a:3d:8c:
                    a2:41:e7:00:5d:5a:f0:62:db:38:0a:89:cc:e7:8d:
                    b3:17:d9:c9:cd:fc:da:59:b6:41:7b:ff:c2:22:35:
                    e2:c1:5a:7f:e5:5c:ba:4d:87:04:d5:42:5e:76:8c:
                    7d:9d:5e:b4:bb:cb:65:65:b7:82:52:32:e7:69:3e:
                    0b:12:fd:4d:b8:8a:a2:14:7c:b0:95:1b:ad:2c:14:
                    8c:a6:36:aa:3f:a7:f4:3e:49:06:2e:88:55:de:28:
                    f6:52:60:f5:76:c0:09:7a:21:0f:5a:6c:12:7c:bb:
                    d1:5e:18:5b:c9:af:68:1e:7b:ce:af:4e:08:04:6e:
                    60:72:df:0a:62:05:f7:2c:dd:80:48:b6:f3:52:86:
                    19:f1:6d:4a:f2:b3:2b:24:4c:dd:bf:c3:2a:1d:4d:
                    d6:e4:f3:23:5a:b5:8e:b7:2a:10:30:53:1e:62:e9:
                    62:d6:2b:37:76:6d:92:0f:57:19:4e:83:06:a3:ae:
                    fe:e0:1a:45:63:06:14:bc:e5:9a:c7:48:4e:ec:3c:
                    5e:90:d0:98:35:e9:56:b5:85:0b:6a:fd:0f:d4:60:
                    69:4c:c9:e7:8b:85:5d:95:b3:07:ec:5f:17:66:27:
                    03:71:26:37:ad:6a:b5:81:a0:b8:f1:64:69:3e:00:
                    97:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F1:E9:F8:17:67:E5:26:FA:92:0A:3F:34:71:78:39:EE:14:D7:23
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030333a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8003::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:92:b8:e2:33:98:21:93:55:76:7b:ff:b3:da:2b:ae:fc:12:
         fb:10:eb:c0:f0:01:51:61:bf:9c:3c:e6:ba:c8:fc:6e:24:b4:
         14:8b:ab:1d:89:11:3f:3b:84:9b:e8:5a:5c:f5:a5:25:7e:1e:
         64:63:8e:30:6c:ae:a8:4e:d7:60:71:c5:38:39:c6:f5:7e:5f:
         d5:b8:18:03:bb:53:94:ae:90:cf:87:5b:12:da:3a:0d:e6:dd:
         b5:0b:eb:d9:c8:0c:83:88:6d:db:91:ae:92:ab:63:f5:68:cf:
         f1:e1:58:b8:32:06:c1:44:1b:b3:1b:4f:21:1b:1b:0f:2c:47:
         7b:85:87:c4:5f:ed:b0:5c:71:64:73:da:61:b5:52:af:aa:7f:
         ac:35:0c:67:96:06:be:d1:17:0b:48:a3:6a:e9:3f:8a:56:13:
         57:8e:cb:60:f1:a1:db:0e:f5:78:54:f7:ad:1d:84:9c:06:66:
         bf:89:4a:d7:11:fe:88:17:c9:f6:30:6c:6d:ef:6a:18:e9:7c:
         39:01:2e:88:fc:3f:ed:e8:f0:7c:49:bf:03:32:85:43:d1:38:
         c4:e4:80:08:f8:ac:90:10:8f:94:6f:32:1f:5e:9f:6f:26:b4:
         37:e1:e9:b6:6e:35:58:9a:4e:6a:ae:d3:14:34:a7:27:c1:43:
         3d:28:45:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 10:23:44 2025 by rpki-client