Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030373a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383030373a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          yRSFOjzucBw7oRfE3whBMvQpDVgaFE2b9q7/8I74NvU=
Subject key identifier:   4D:0D:AF:8E:00:6E:00:DC:5A:89:F7:78:49:BC:F9:2F:8C:9F:9E:5E
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       6F1162CD8F411733D9E1EE1E919B0D60C1CB55D1
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030373a3a2f34382d3438203d3e203532343638.roa
Signing time:             Tue 10 Jun 2025 02:00:00 +0000
ROA not before:           Tue 10 Jun 2025 01:55:00 +0000
ROA not after:            Tue 09 Jun 2026 02:00:00 +0000
asID:                     52468
IP address blocks:        2804:2b78:8007::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Jun 2025 10:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:11:62:cd:8f:41:17:33:d9:e1:ee:1e:91:9b:0d:60:c1:cb:55:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jun 10 01:55:00 2025 GMT
            Not After : Jun  9 02:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2b:88:e5:49:da:2b:7e:fb:22:6a:fb:31:fb:
                    50:a3:d7:c5:0a:29:ae:91:39:01:4b:a9:48:63:05:
                    48:fc:5b:01:71:52:ff:09:21:5b:d6:b2:cb:a7:26:
                    fd:8a:09:47:fc:54:77:62:d2:5c:c0:66:9f:4d:6e:
                    57:0b:c9:b2:0e:21:ca:a4:a5:ad:7e:04:81:15:cd:
                    c4:26:57:30:44:d3:60:bf:92:3d:20:e6:9a:e5:6f:
                    62:94:0b:4e:9f:88:8d:3c:2a:69:77:98:89:81:53:
                    ec:a1:09:1f:3d:64:71:5e:63:a6:b7:31:be:48:b8:
                    68:19:06:e5:aa:d8:72:06:5d:3a:77:8c:85:82:2b:
                    69:53:2c:e2:68:c2:3d:b6:1d:c1:7e:df:37:46:f6:
                    17:33:03:c1:68:1d:4e:9e:44:7b:06:d9:8d:49:80:
                    56:8f:3d:29:b6:86:64:40:9d:8d:94:70:47:de:62:
                    aa:c2:13:35:ed:ea:f0:e1:c7:04:77:45:dc:99:bf:
                    ca:dc:a6:bb:08:8b:c8:bb:23:8f:c6:82:eb:11:d1:
                    f3:68:d8:d5:18:d9:d2:bb:4d:74:35:8e:07:99:14:
                    35:1b:15:85:b7:51:d5:ad:f6:dc:b5:da:fd:12:4a:
                    76:dc:a8:99:72:51:14:94:e9:9d:11:69:9f:dd:57:
                    73:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0D:AF:8E:00:6E:00:DC:5A:89:F7:78:49:BC:F9:2F:8C:9F:9E:5E
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030373a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8007::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:c5:95:9d:7e:c3:31:dc:70:8f:d3:b0:48:1a:28:b4:29:92:
         a0:db:d2:3e:34:2f:bf:a8:e0:4d:2f:ff:2e:47:56:12:12:a7:
         6e:87:ae:18:df:c3:af:b4:0e:b2:eb:ad:ab:96:a6:30:29:43:
         3d:a1:2a:6b:9c:b6:f1:53:7a:83:25:b7:eb:67:ad:4c:39:60:
         74:32:1d:9b:b4:7b:e0:53:2a:e8:b1:19:19:92:4e:79:2e:56:
         92:b8:b9:b3:3d:b3:4a:13:24:bc:66:cb:c6:5d:90:5f:36:ea:
         4a:bf:cf:1c:3f:8b:87:4a:80:6e:43:37:24:65:6a:8b:33:0b:
         a8:0a:1e:02:a4:33:14:b7:77:7b:bf:ba:7d:80:f2:8a:de:e3:
         d3:a8:a9:23:0e:d8:f1:17:9a:7f:76:4c:d0:81:bc:cb:56:fe:
         78:ef:5b:28:6d:ba:3f:cc:49:a1:4a:5a:bb:bd:a5:e0:7a:ae:
         0b:6a:c3:f7:1b:fd:7a:5b:aa:5f:88:ee:13:0d:58:ea:ba:6d:
         63:29:48:b8:1b:70:1d:7c:3e:6f:a0:40:e1:cc:37:a0:c6:b5:
         f4:0c:d4:74:04:31:7f:5b:c6:28:4e:a8:6b:f9:8c:ae:9b:7d:
         06:24:e6:c0:32:7a:75:61:fa:e1:71:b0:a2:02:18:21:b1:6b:
         a4:38:f8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 13:11:55 2025 by rpki-client