Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383031613a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383031613a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          ZMP/LOIoLvAZuewPwOUi11CmtfP3YPxGJoK1FTAJ3So=
Subject key identifier:   F6:65:E5:09:56:A8:12:BF:9F:A9:E2:69:06:76:C0:1E:0F:3A:87:4A
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       16B79C1768A04DEE0AA4634683CAE8033A395957
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383031613a3a2f34382d3438203d3e203532343638.roa
Signing time:             Wed 23 Jul 2025 19:45:46 +0000
ROA not before:           Wed 23 Jul 2025 19:40:46 +0000
ROA not after:            Wed 22 Jul 2026 19:45:46 +0000
asID:                     52468
IP address blocks:        2804:2b78:801a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 03:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b7:9c:17:68:a0:4d:ee:0a:a4:63:46:83:ca:e8:03:3a:39:59:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jul 23 19:40:46 2025 GMT
            Not After : Jul 22 19:45:46 2026 GMT
        Subject: CN=3082010A0282010100BB1BD163D51F1A59F946B7AB16A8D588ADA8CE614448C7ED14041B13EA6F3E923CAD256DCDC17BA376609EA22AB5C1FBEBB960EFA20CCD3C2CF9BC53833094545F47DC540C44DF516FBCAD3FC1E3004BFBA8FC41D0204F2BD280241569D19C77186F93ACC9F01F15E3E0A3CE306DA902542B2A6724FE3A52E3FA1339E305BE8519E8E85371710CC2AE33C9A0458093326AB53FAE51BE0F40EAB123438CEDB0E887B56741A32E119A0ADD76D7A79713E434D427224F66F3B345262FBA2556228CCD7C81EEA58EEBD6EEF080D58704CC8DD4AA16F482B0095416CA0D722DBEDA9094CB78C4B568175367940F094C64DCF1902FAE2425468FA10CD53814824A22070203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1b:d1:63:d5:1f:1a:59:f9:46:b7:ab:16:a8:
                    d5:88:ad:a8:ce:61:44:48:c7:ed:14:04:1b:13:ea:
                    6f:3e:92:3c:ad:25:6d:cd:c1:7b:a3:76:60:9e:a2:
                    2a:b5:c1:fb:eb:b9:60:ef:a2:0c:cd:3c:2c:f9:bc:
                    53:83:30:94:54:5f:47:dc:54:0c:44:df:51:6f:bc:
                    ad:3f:c1:e3:00:4b:fb:a8:fc:41:d0:20:4f:2b:d2:
                    80:24:15:69:d1:9c:77:18:6f:93:ac:c9:f0:1f:15:
                    e3:e0:a3:ce:30:6d:a9:02:54:2b:2a:67:24:fe:3a:
                    52:e3:fa:13:39:e3:05:be:85:19:e8:e8:53:71:71:
                    0c:c2:ae:33:c9:a0:45:80:93:32:6a:b5:3f:ae:51:
                    be:0f:40:ea:b1:23:43:8c:ed:b0:e8:87:b5:67:41:
                    a3:2e:11:9a:0a:dd:76:d7:a7:97:13:e4:34:d4:27:
                    22:4f:66:f3:b3:45:26:2f:ba:25:56:22:8c:cd:7c:
                    81:ee:a5:8e:eb:d6:ee:f0:80:d5:87:04:cc:8d:d4:
                    aa:16:f4:82:b0:09:54:16:ca:0d:72:2d:be:da:90:
                    94:cb:78:c4:b5:68:17:53:67:94:0f:09:4c:64:dc:
                    f1:90:2f:ae:24:25:46:8f:a1:0c:d5:38:14:82:4a:
                    22:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:65:E5:09:56:A8:12:BF:9F:A9:E2:69:06:76:C0:1E:0F:3A:87:4A
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383031613a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:801a::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:10:eb:c7:70:8d:0c:b7:9e:8e:88:38:2a:9d:69:92:3c:eb:
         6d:04:9e:8f:d2:f3:46:64:12:6a:48:62:3d:19:b0:16:5a:6f:
         24:83:91:93:01:2e:53:d2:5d:97:48:95:60:25:83:91:34:4f:
         c2:25:53:f3:e6:93:7c:a4:81:7b:65:aa:16:18:a7:79:3f:29:
         40:66:77:d8:ff:74:96:13:04:f9:fb:47:fe:9c:d7:ad:f3:f5:
         ef:36:fc:01:92:12:1e:f7:44:1f:ff:ee:1a:12:03:5b:11:8b:
         45:c4:24:33:4b:9e:2d:6d:23:4e:04:34:ab:f2:b2:41:98:2c:
         bd:4c:f4:25:5c:e6:4c:70:c4:77:5a:d8:c5:b4:03:62:60:3d:
         02:02:0b:20:3e:ac:a4:8b:1c:07:a9:1c:a4:9f:5d:c9:fb:04:
         11:e3:79:54:50:4c:06:98:1a:08:47:cc:a8:ee:4c:9f:13:02:
         2c:c8:79:0d:78:ec:1d:4e:9f:5b:1d:84:c7:44:1d:b1:46:0c:
         2c:35:ec:b0:0d:2c:ea:0f:bc:c6:26:82:3d:fb:37:ca:b1:0e:
         f9:5a:8f:1f:16:9c:17:a6:cd:ad:6e:05:06:d5:1b:f5:87:88:
         fc:d5:4c:3b:18:4d:46:96:7b:b4:b0:82:96:4c:c5:13:a4:f2:
         4b:e0:5a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:57:58 2025 by rpki-client