Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383033363a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383033363a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          aDfHJAOjIAFKVy6wGb8KIyKDx7oCtf1iffGjEKxKs80=
Subject key identifier:   F7:C1:5D:C7:65:06:9F:C8:60:33:4D:33:37:55:B4:BF:29:89:8F:A0
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       2C369094D564DB156F89E197AA6D9FF21BBA4C0A
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383033363a3a2f34382d3438203d3e203532343638.roa
Signing time:             Wed 23 Jul 2025 19:46:08 +0000
ROA not before:           Wed 23 Jul 2025 19:41:08 +0000
ROA not after:            Wed 22 Jul 2026 19:46:08 +0000
asID:                     52468
IP address blocks:        2804:2b78:8036::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 19:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:36:90:94:d5:64:db:15:6f:89:e1:97:aa:6d:9f:f2:1b:ba:4c:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jul 23 19:41:08 2025 GMT
            Not After : Jul 22 19:46:08 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ec:5b:67:50:37:be:c6:cf:2f:32:87:54:c5:
                    a1:69:51:99:92:9b:06:91:25:7d:2e:e9:53:e3:02:
                    90:a7:e5:d9:bc:2a:1f:0e:0f:1c:e9:d8:72:cf:b0:
                    fa:55:19:a8:cf:76:41:f8:38:50:a6:b2:f0:1d:88:
                    a3:6f:cb:53:52:a3:9d:0b:76:9e:21:a1:02:fb:27:
                    65:c6:d7:9f:c0:89:df:20:c6:7c:d9:37:a4:96:8a:
                    dd:5d:dd:6c:70:c6:bc:76:49:53:c5:c8:95:b5:3d:
                    87:d4:58:b5:58:79:e3:4c:5b:1c:06:b8:f8:bd:16:
                    b6:b3:14:5d:bc:b8:b1:e0:1a:30:7e:9b:7a:32:1d:
                    15:71:ef:36:94:d3:ee:ec:7d:53:02:41:a7:f4:36:
                    91:fb:95:6c:8d:90:97:e4:b3:cc:a6:3a:3e:83:d0:
                    23:b0:ff:a6:54:ad:9d:1c:58:88:e5:ed:98:96:8b:
                    6f:ab:da:25:1e:14:19:83:89:aa:ff:43:8b:26:64:
                    b3:62:f8:c2:7d:db:ed:d5:9c:5d:3f:e9:74:01:62:
                    f3:2f:59:da:76:a4:5e:5d:38:ed:fa:94:5b:c5:c4:
                    96:e6:29:cb:f8:33:9a:55:85:a7:10:71:34:6f:77:
                    11:cf:a5:ff:94:35:dd:f5:46:e1:ae:4d:2d:67:62:
                    c3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C1:5D:C7:65:06:9F:C8:60:33:4D:33:37:55:B4:BF:29:89:8F:A0
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383033363a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8036::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:0d:69:29:43:69:ac:f8:4d:2c:94:7d:24:6e:53:f6:b1:33:
         95:3b:b7:fa:c2:24:fb:35:6e:0d:9e:d1:dd:36:b7:6b:eb:86:
         7a:3a:c2:0f:c1:74:14:ae:c8:e6:b6:42:b1:18:62:dc:a8:6e:
         9f:0c:6f:2b:db:3b:b4:0a:29:ec:ad:1a:cf:4f:8a:60:06:3a:
         dd:20:49:c6:07:3f:9f:63:ce:04:8f:70:c0:3f:2c:c6:57:63:
         da:80:40:ca:c9:26:ad:0e:1d:02:79:bf:f6:0c:24:0a:a4:be:
         ef:11:fb:10:92:25:f1:ac:f2:6e:a9:af:90:67:b2:f0:67:72:
         5f:bc:3e:d4:6f:85:6e:72:17:0f:ef:cd:05:67:83:5b:b9:e5:
         43:69:12:1e:bb:9e:01:91:8e:e4:80:7d:7a:83:6b:04:f4:69:
         c7:55:1b:11:66:1b:a7:0a:b2:97:a9:de:d5:d3:41:e9:5e:94:
         79:52:4a:9b:4f:e1:2b:c9:47:6a:a9:5d:8b:cc:1c:c2:3b:54:
         49:4f:68:a1:cf:ca:65:b1:e8:be:c6:cb:a0:89:33:95:b1:85:
         0c:ec:72:65:7a:0a:30:6b:65:b1:29:17:bf:48:57:3d:33:81:
         3e:92:65:ef:f1:75:89:fb:ed:10:8b:b4:d7:76:01:ab:29:c4:
         14:7c:92:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:05:55 2025 by rpki-client