Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383031623a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383031623a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          cAWQtrRwL9g+KwKaAAiDx3wL0nUEUtdUmBO+FIM1hBU=
Subject key identifier:   DA:65:C1:B4:25:48:EF:9C:4A:E5:84:EF:A6:14:4B:F6:23:6B:F6:2C
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       46EDAD4CAA9D040D603A1BB3A364DBF0799EFE62
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383031623a3a2f34382d3438203d3e203532343638.roa
Signing time:             Wed 23 Jul 2025 19:46:13 +0000
ROA not before:           Wed 23 Jul 2025 19:41:13 +0000
ROA not after:            Wed 22 Jul 2026 19:46:13 +0000
asID:                     52468
IP address blocks:        2804:2b78:801b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 03:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ed:ad:4c:aa:9d:04:0d:60:3a:1b:b3:a3:64:db:f0:79:9e:fe:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jul 23 19:41:13 2025 GMT
            Not After : Jul 22 19:46:13 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:93:4a:70:f3:db:1b:89:a8:c5:17:38:3a:9b:
                    7f:3e:e5:3e:44:49:03:7d:d9:18:fd:22:d0:05:81:
                    c7:2f:89:1d:86:f4:c2:d9:86:33:84:a1:86:a5:4a:
                    09:b7:53:58:40:f3:1f:7e:0e:5d:02:7f:f7:82:74:
                    a8:f4:f9:85:14:ff:31:20:c5:08:67:e5:6c:2f:ec:
                    49:e1:75:dd:87:5c:6e:ae:8b:2c:45:32:83:91:ca:
                    90:a0:37:50:ab:c5:e4:34:a3:17:82:eb:5f:b4:4b:
                    25:9a:6c:db:b4:cb:b3:05:dd:66:31:3e:fd:b5:f4:
                    04:f3:40:71:5f:f2:31:74:72:ef:20:e3:4b:2a:ad:
                    7e:b7:f7:42:b1:7d:35:f2:fa:e7:5e:4a:c9:6c:57:
                    c0:52:cf:ae:da:0b:5d:3c:eb:33:02:af:c0:3b:c2:
                    b4:bc:b7:70:37:cb:c4:83:41:23:98:a6:0c:dd:0f:
                    4c:f6:1f:50:b3:79:18:6b:d2:4f:39:19:52:b9:54:
                    b5:91:17:ca:fa:da:c7:34:90:36:83:34:88:d8:42:
                    c1:df:a7:b6:4f:c3:7f:61:8a:47:f8:2b:07:b8:4e:
                    86:3e:81:b1:db:38:a1:3a:11:59:05:a7:ab:e1:e7:
                    46:21:0c:4e:57:23:19:d8:88:9a:52:47:0d:42:51:
                    50:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:65:C1:B4:25:48:EF:9C:4A:E5:84:EF:A6:14:4B:F6:23:6B:F6:2C
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383031623a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:801b::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:bb:12:90:94:f8:d7:70:9e:1f:92:35:45:cc:25:2c:8d:37:
         97:06:17:a3:b8:b9:fc:f6:9a:62:74:f8:dc:cc:46:cf:19:d0:
         50:84:7a:fe:65:e5:1d:a5:0a:9b:55:e5:7d:77:b3:fa:56:0d:
         58:73:20:df:6c:25:cc:81:42:ba:43:03:2c:70:37:f2:3b:bd:
         f5:d3:38:2a:e3:4e:9a:6d:00:03:f2:a1:f1:c4:08:d2:fd:14:
         85:a5:b0:ab:10:db:57:99:a5:48:b5:6e:04:f7:73:9f:0b:57:
         3e:77:a9:53:2b:3e:75:32:27:29:7e:ff:9f:02:42:a4:06:8b:
         01:85:ff:82:b7:b5:98:f2:09:4f:1d:b7:cb:c5:67:ba:bc:25:
         63:4d:fa:57:24:eb:72:c7:d3:83:e5:87:59:c1:33:4a:fa:82:
         da:a4:bb:d8:f8:0c:b3:fd:a5:65:fa:20:c7:a3:37:bc:5e:d4:
         49:4d:44:cc:33:01:18:86:7d:4c:72:39:71:e5:f5:1b:2e:93:
         39:11:42:5b:8c:06:64:86:95:48:98:02:df:41:a4:ca:45:90:
         5d:98:58:58:0e:cc:41:01:8c:b0:4b:e9:2c:f2:bc:b1:cb:ca:
         a6:d4:c7:1f:85:8f:f6:fa:36:88:d6:dc:13:6b:37:35:e5:b6:
         02:37:e3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:54:10 2025 by rpki-client