Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030353a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383030353a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          BbvZHxE3I10JIYLVCf0I9P+ntlb3A34EJRgofcRz+Xs=
Subject key identifier:   F2:B3:FD:A5:CC:03:77:CB:65:14:B9:4E:5A:B1:12:B0:B0:D5:18:54
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       5B03F07705D1686E00A74AAE5BE19F79AA30CACF
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030353a3a2f34382d3438203d3e203532343638.roa
Signing time:             Thu 08 May 2025 20:00:00 +0000
ROA not before:           Thu 08 May 2025 19:55:00 +0000
ROA not after:            Thu 07 May 2026 20:00:00 +0000
asID:                     52468
IP address blocks:        2804:2b78:8005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 May 2025 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:03:f0:77:05:d1:68:6e:00:a7:4a:ae:5b:e1:9f:79:aa:30:ca:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: May  8 19:55:00 2025 GMT
            Not After : May  7 20:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:10:da:c3:d6:82:5e:62:8e:9c:1b:e0:04:10:
                    28:b9:3f:07:34:58:4e:44:c0:a1:f6:04:72:e2:5d:
                    97:4b:c0:33:54:3f:ff:4d:a7:70:bb:f6:55:c6:4b:
                    7e:99:03:a5:f7:84:8a:62:56:2e:63:e8:95:e1:5b:
                    f9:e4:f0:99:71:36:f3:8c:38:68:96:15:a9:69:0c:
                    ae:5d:00:49:f7:6c:5c:6e:88:43:aa:d9:3d:9d:73:
                    18:58:ee:f5:2a:42:9c:2d:5f:8a:05:60:3e:16:a9:
                    a9:e4:ce:67:46:ce:3e:d5:38:1a:79:73:28:74:6e:
                    fd:c6:de:a9:2f:62:9b:19:d0:d7:03:55:ec:2e:a7:
                    7c:6b:95:0b:0d:13:61:13:83:46:81:0c:96:6a:e5:
                    72:7a:d1:2c:1c:29:e3:51:2c:27:8f:7d:d8:13:46:
                    40:96:1a:40:c1:b4:b5:f7:bd:08:c5:6d:0b:5b:d1:
                    a0:d4:9a:0a:b5:7b:b2:db:50:13:af:a6:64:70:a8:
                    37:26:55:77:15:c1:54:aa:e1:b7:d2:39:b9:12:c2:
                    44:ad:7d:63:98:f9:bd:98:53:29:e1:b5:88:97:45:
                    7e:54:e0:95:a0:08:5c:bd:53:f5:e7:2c:a2:ad:3d:
                    e5:d5:2a:b5:f1:d3:c6:36:21:f8:17:fc:9e:c1:78:
                    e0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B3:FD:A5:CC:03:77:CB:65:14:B9:4E:5A:B1:12:B0:B0:D5:18:54
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030353a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8005::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:8d:82:1c:30:3c:bd:68:ad:2b:27:8d:9d:db:03:3c:37:53:
         b1:25:65:07:4d:6d:99:d0:0a:f1:25:12:e5:4e:d8:54:5a:fe:
         02:f6:94:b6:a8:47:c8:a3:82:b9:a3:5c:26:7a:c6:67:cf:3d:
         17:b6:1d:d0:d8:03:ab:6d:6a:1b:47:6c:49:0c:0a:93:35:32:
         83:f1:2d:f1:b8:e2:b5:5e:da:22:70:5c:22:41:bc:64:ff:27:
         c3:7b:de:8c:45:43:a0:d0:9c:c1:fd:73:ec:5b:48:9e:a3:c4:
         08:36:61:a6:aa:7f:42:b7:1a:5e:e4:1b:e4:78:1f:54:cc:5b:
         94:4f:67:6b:b5:02:05:79:8d:91:26:3e:09:7f:a4:63:4f:bf:
         e8:48:cd:c5:30:f0:99:57:9f:11:87:03:24:c4:3c:d9:cf:d8:
         e3:29:c0:d6:88:09:87:36:21:a1:3c:6e:cc:3a:ce:68:9b:71:
         a6:ea:77:81:58:34:ea:80:73:c6:96:c0:96:9b:13:17:b9:f9:
         04:14:08:dc:cb:d9:f7:00:91:0f:a0:9d:8a:a6:c5:d0:d1:be:
         50:70:6f:98:d7:91:e1:7f:80:b1:85:6d:94:e3:08:48:2e:7b:
         50:c7:d0:16:e7:b0:9f:30:2f:a3:f0:21:c3:ef:ad:05:02:27:
         9d:39:26:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 07:56:30 2025 by rpki-client