Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383033623a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383033623a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          UTsypGgW6pUscoagofjcp0Sd68xUSZvfq6TeSq64Uvs=
Subject key identifier:   54:A9:1B:12:5E:00:44:94:9B:14:35:1F:28:02:AC:B3:8C:30:53:42
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       76BFFE1BB791E5EF4B32FCC2F23E4CE716453575
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383033623a3a2f34382d3438203d3e203532343638.roa
Signing time:             Wed 23 Jul 2025 19:46:27 +0000
ROA not before:           Wed 23 Jul 2025 19:41:27 +0000
ROA not after:            Wed 22 Jul 2026 19:46:27 +0000
asID:                     52468
IP address blocks:        2804:2b78:803b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 19:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:bf:fe:1b:b7:91:e5:ef:4b:32:fc:c2:f2:3e:4c:e7:16:45:35:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jul 23 19:41:27 2025 GMT
            Not After : Jul 22 19:46:27 2026 GMT
        Subject: CN=3082010A0282010100CD63DFC44FF8C0FECC7895358A07246F3341648B7B6B0066AA215CF0E44E396FE475261F491A0B590DC6541233AA9BD6F52EA715F3E141931FF7977258F890BD2466290E9E7FB1308EBC6F3AE06067EBBEE6BEBBF47CA39068D4D701DE600EC15870CA05405AC5EA40678C2A15E50874D8B352546624D653AEB3DECFF219D13D7C8092247ECDBF2EE43017F706FD78C6BB284866DA46DB489366CE7444B4FA76DDB55D0A08AC9F8C7CCA71739B704FEA4BC95F89FF34862967FBD8683FCC11EDE7AAE632C7E8AA6654F88A54A5577807715D56E088779FC6C4AE6CCB18E66EC51C556A9D335DFB73D4EF0EBA4FA7E7FE24B78010AF3C21AEF278ED5FCDB118610203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:63:df:c4:4f:f8:c0:fe:cc:78:95:35:8a:07:
                    24:6f:33:41:64:8b:7b:6b:00:66:aa:21:5c:f0:e4:
                    4e:39:6f:e4:75:26:1f:49:1a:0b:59:0d:c6:54:12:
                    33:aa:9b:d6:f5:2e:a7:15:f3:e1:41:93:1f:f7:97:
                    72:58:f8:90:bd:24:66:29:0e:9e:7f:b1:30:8e:bc:
                    6f:3a:e0:60:67:eb:be:e6:be:bb:f4:7c:a3:90:68:
                    d4:d7:01:de:60:0e:c1:58:70:ca:05:40:5a:c5:ea:
                    40:67:8c:2a:15:e5:08:74:d8:b3:52:54:66:24:d6:
                    53:ae:b3:de:cf:f2:19:d1:3d:7c:80:92:24:7e:cd:
                    bf:2e:e4:30:17:f7:06:fd:78:c6:bb:28:48:66:da:
                    46:db:48:93:66:ce:74:44:b4:fa:76:dd:b5:5d:0a:
                    08:ac:9f:8c:7c:ca:71:73:9b:70:4f:ea:4b:c9:5f:
                    89:ff:34:86:29:67:fb:d8:68:3f:cc:11:ed:e7:aa:
                    e6:32:c7:e8:aa:66:54:f8:8a:54:a5:57:78:07:71:
                    5d:56:e0:88:77:9f:c6:c4:ae:6c:cb:18:e6:6e:c5:
                    1c:55:6a:9d:33:5d:fb:73:d4:ef:0e:ba:4f:a7:e7:
                    fe:24:b7:80:10:af:3c:21:ae:f2:78:ed:5f:cd:b1:
                    18:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A9:1B:12:5E:00:44:94:9B:14:35:1F:28:02:AC:B3:8C:30:53:42
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383033623a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:803b::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:98:2a:7c:f1:70:6d:c7:0b:7a:15:ab:cc:cc:b1:20:4c:db:
         ba:2e:27:dc:86:25:c6:f8:44:46:61:9e:09:1a:82:a1:9f:27:
         0d:f8:cb:53:90:f8:78:c3:3b:f9:f3:93:be:a9:f5:53:48:0b:
         6a:7a:c4:f3:d6:d1:26:1e:7a:b9:b4:1c:d9:58:d1:36:a5:f4:
         04:f3:94:a3:1b:dd:24:df:e3:f1:de:3b:6c:d2:df:d2:56:53:
         e1:09:d0:f0:ad:b9:8a:df:74:f1:00:66:19:26:0e:57:70:f7:
         82:2b:00:94:21:ad:46:65:af:89:6b:a2:78:e0:e5:b2:b2:0e:
         1b:9f:25:64:59:d3:8d:b9:3c:39:7b:55:b8:3e:a4:ab:b9:7f:
         bb:bf:e0:04:f5:63:25:fd:b4:11:d5:8c:27:6a:f2:e7:d3:68:
         f3:a1:5a:a0:f6:ae:87:c7:cd:4c:78:19:ba:e9:b2:22:25:42:
         73:a0:6a:6c:3b:3b:d1:2f:4e:65:1f:3c:49:fb:65:bb:5f:da:
         70:cf:4f:af:e2:e5:35:e8:c5:55:0b:a7:cf:d1:e4:2f:5c:e5:
         a7:62:07:f8:ac:38:f6:95:1e:09:b1:f2:6d:11:9c:41:45:e3:
         52:37:58:71:b1:4b:51:b2:0f:94:31:9d:0c:62:3b:28:f4:d9:
         a7:64:48:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:04:10 2025 by rpki-client