Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a3a2f33332d3333203d3e203238313234.roa
File:                     323830343a326237383a3a2f33332d3333203d3e203238313234.roa (raw, json)
Hash identifier:          e4x0rVcNyPQtGGEbNt6sJdnQubIrGn+znKnqPZB/hkE=
Subject key identifier:   2D:E4:EE:3A:DA:C7:73:30:FA:1C:BB:39:30:FF:ED:AB:1B:01:38:2E
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       57AA0FE301AE9A8C0EC4B410C982E058AAC9BFCB
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a3a2f33332d3333203d3e203238313234.roa
Signing time:             Thu 08 May 2025 20:00:00 +0000
ROA not before:           Thu 08 May 2025 19:55:00 +0000
ROA not after:            Thu 07 May 2026 20:00:00 +0000
asID:                     28124
IP address blocks:        2804:2b78::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 May 2025 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:aa:0f:e3:01:ae:9a:8c:0e:c4:b4:10:c9:82:e0:58:aa:c9:bf:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: May  8 19:55:00 2025 GMT
            Not After : May  7 20:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bf:b2:77:eb:ab:e3:24:08:3d:29:4a:b1:53:
                    80:5a:30:ac:fc:cb:2d:6d:e8:46:bf:98:f6:64:87:
                    74:aa:e7:b6:cd:b5:71:ab:56:8e:f9:41:a0:63:8d:
                    cb:14:47:ce:de:ee:35:a1:77:dd:48:0d:5f:bf:7b:
                    c2:b0:5c:d7:a1:a9:1e:6b:7a:fb:d3:f9:fb:a0:44:
                    d6:2a:25:da:22:f8:da:d6:3e:38:7d:65:9f:5e:98:
                    4f:16:fb:01:65:b6:d9:b5:88:64:32:4f:c4:a1:e9:
                    18:bb:90:50:b9:de:dd:0d:37:1d:6f:5a:9b:9e:35:
                    ba:27:7f:e2:d0:af:22:20:2a:65:dc:cc:dc:ac:da:
                    50:ed:71:f8:0b:0f:e1:d4:7d:62:99:9e:ae:9d:9b:
                    bb:ad:8b:ac:54:e8:64:c4:cc:aa:20:d3:b7:37:2b:
                    67:7a:7b:0f:1c:f3:a1:d9:75:10:b0:e2:d8:b6:97:
                    f3:05:27:a0:63:3c:e6:93:12:15:b0:9b:3b:02:d3:
                    ef:a7:58:f2:13:b7:be:25:c5:4d:2f:e3:d1:88:73:
                    74:cb:1d:79:e2:e1:e0:3f:06:a2:78:1e:29:c7:6b:
                    be:bc:58:0b:c7:0b:58:88:6b:70:d3:ee:2b:70:0d:
                    07:d8:c3:b2:d8:2d:45:9b:e3:0a:6c:19:d6:36:f1:
                    9f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E4:EE:3A:DA:C7:73:30:FA:1C:BB:39:30:FF:ED:AB:1B:01:38:2E
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a3a2f33332d3333203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78::/33

    Signature Algorithm: sha256WithRSAEncryption
         28:ee:6a:27:43:ef:4b:af:9b:83:08:99:d0:69:2b:28:f3:78:
         1f:a7:bd:13:b9:ab:af:22:fd:d5:95:20:fb:d2:3c:64:f2:b4:
         f3:c6:5c:b4:ea:3b:26:23:7e:ec:f7:84:20:21:1f:e1:fb:63:
         b7:f5:fd:6a:5a:f5:f3:31:d2:79:68:ed:2e:7f:05:6d:29:9b:
         16:68:e3:d6:e7:a8:ed:02:7c:3a:c3:37:2f:d8:4e:2d:78:14:
         17:b4:9e:2c:b5:40:c5:e4:b5:2d:a4:04:82:33:8e:85:ce:b9:
         42:da:ac:6c:3e:6b:cb:d4:8b:10:1f:d7:1a:35:fa:3b:f3:e7:
         4e:59:b6:95:19:d5:28:e3:ea:bb:21:e9:a2:67:4b:34:05:55:
         ff:26:89:88:71:ee:db:3b:19:1a:42:f4:18:bd:d4:e5:9e:4e:
         23:c4:e0:d7:09:73:d9:da:c1:22:6a:d9:eb:77:b9:8e:b1:f5:
         96:ae:88:0d:83:1e:fe:dd:2d:81:04:ff:51:0e:53:de:4b:33:
         88:f2:17:65:c7:0b:7d:c9:38:e0:dd:ef:2e:74:e5:44:28:33:
         e9:01:a2:83:8c:39:c4:c5:18:f7:d1:8e:e3:c2:e7:7a:b3:88:
         e8:59:3e:b6:6c:08:f8:a5:14:97:95:d8:64:8f:2f:f0:87:4c:
         de:29:ce:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 05:47:35 2025 by rpki-client