Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383036313a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383036313a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          wMDVYO2Tx9X/9Z4bZKhDP6CeX09kmjlcQgtfRHbATEI=
Subject key identifier:   DE:DD:C1:D9:EB:03:95:9B:F7:DD:E1:F2:84:81:EE:35:37:F4:ED:02
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       026A3607D86D7F9DEAFDFC5C534978F4260E0479
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383036313a3a2f34382d3438203d3e203532343638.roa
Signing time:             Wed 23 Jul 2025 19:46:01 +0000
ROA not before:           Wed 23 Jul 2025 19:41:01 +0000
ROA not after:            Wed 22 Jul 2026 19:46:01 +0000
asID:                     52468
IP address blocks:        2804:2b78:8061::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 19:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:6a:36:07:d8:6d:7f:9d:ea:fd:fc:5c:53:49:78:f4:26:0e:04:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jul 23 19:41:01 2025 GMT
            Not After : Jul 22 19:46:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d8:1b:3d:d5:87:1f:0e:a7:33:18:21:1b:17:
                    75:0b:d0:0f:fe:fb:fb:55:41:82:eb:da:60:de:6d:
                    5f:91:d9:90:d5:78:4a:4a:fd:7b:52:e6:74:6d:08:
                    21:f6:cd:71:7b:ec:2e:e7:42:ea:ff:a8:5d:3d:1e:
                    fc:3e:ca:5f:c0:36:02:e7:8a:31:3c:58:3e:4d:6b:
                    26:a1:f3:c8:74:35:dd:a6:bb:38:f9:ea:18:e0:41:
                    67:40:22:b4:b1:5c:28:06:83:0d:53:fb:78:e9:fc:
                    f1:12:1d:83:3b:91:c4:88:0b:64:d7:d2:8d:63:68:
                    8e:df:d4:62:66:2e:a7:24:c0:b8:cf:25:cb:9b:de:
                    82:f0:b3:75:d5:12:5c:63:99:c0:35:9c:54:51:d0:
                    1c:ff:fd:5a:c3:70:ea:ae:bd:27:a1:b6:92:b9:b5:
                    2b:c7:ef:45:c2:e6:6f:d1:78:af:e0:8f:b2:81:f6:
                    a7:dc:96:e4:f3:c0:f6:af:ec:e5:95:b2:0d:0b:5e:
                    18:0a:46:03:6e:e6:65:e5:2d:e8:1d:36:fd:97:0f:
                    b5:37:62:4a:38:e9:7b:cb:19:a8:e1:ff:0e:8e:ba:
                    2e:07:af:d8:e4:7c:b4:57:31:9e:b4:00:a5:42:4c:
                    ac:79:03:e2:e5:a3:66:2c:69:16:22:98:43:79:62:
                    52:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:DD:C1:D9:EB:03:95:9B:F7:DD:E1:F2:84:81:EE:35:37:F4:ED:02
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383036313a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8061::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:19:cf:2b:0c:35:9f:01:5e:12:a0:55:83:f1:b1:00:d3:38:
         82:54:06:24:3c:98:0f:00:e8:b6:99:f4:79:3a:5b:7b:92:68:
         67:20:ca:22:87:9c:88:fc:64:61:cb:4c:ab:00:85:6e:b5:df:
         a5:19:e5:55:af:07:f6:d4:8c:5a:65:21:f1:11:f7:c6:3f:36:
         85:2d:9f:c8:ea:6b:8c:18:8d:6f:21:9b:1b:f6:4b:c6:89:5d:
         a5:4e:af:42:02:ce:da:f8:2b:f5:04:14:3a:23:84:3d:7e:b7:
         96:0e:2e:ef:90:4f:d7:36:72:e0:76:f6:5d:1c:53:bd:06:2c:
         22:27:52:ab:1d:99:46:97:a9:b7:d8:43:df:91:b8:d9:50:53:
         1c:10:ad:9d:f3:21:aa:03:16:27:86:3b:ea:6c:ae:38:43:88:
         85:7e:3b:96:2a:c1:93:f0:4a:f6:bf:d8:20:b0:bd:19:86:8c:
         e5:44:6f:8e:8a:06:70:93:cc:05:ea:e2:15:8b:b2:35:ef:a2:
         c2:97:ea:43:e3:2e:da:c9:3e:a9:09:7e:0e:95:c7:22:12:93:
         da:0c:d4:cd:de:15:24:ad:65:0e:bd:46:18:13:a8:09:09:2f:
         80:04:21:fd:fc:d9:29:59:10:bb:07:3a:e9:c5:71:dc:2f:b3:
         f4:be:da:70
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUAmo2B9htf53q/fxcU0l49CYOBHkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyNDhDODBFQTVDNEM1Nzc5QzEyOTcxMjFEMEJEOEQy
REMzNzlGMDAeFw0yNTA3MjMxOTQxMDFaFw0yNjA3MjIxOTQ2MDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDZEODFCM0RENTg3MUYwRUE3
MzMxODIxMUIxNzc1MEJEMDBGRkVGQkZCNTU0MTgyRUJEQTYwREU2RDVGOTFEOTkw
RDU3ODRBNEFGRDdCNTJFNjc0NkQwODIxRjZDRDcxN0JFQzJFRTc0MkVBRkZBODVE
M0QxRUZDM0VDQTVGQzAzNjAyRTc4QTMxM0M1ODNFNEQ2QjI2QTFGM0M4NzQzNURE
QTZCQjM4RjlFQTE4RTA0MTY3NDAyMkI0QjE1QzI4MDY4MzBENTNGQjc4RTlGQ0Yx
MTIxRDgzM0I5MUM0ODgwQjY0RDdEMjhENjM2ODhFREZENDYyNjYyRUE3MjRDMEI4
Q0YyNUNCOUJERTgyRjBCMzc1RDUxMjVDNjM5OUMwMzU5QzU0NTFEMDFDRkZGRDVB
QzM3MEVBQUVCRDI3QTFCNjkyQjlCNTJCQzdFRjQ1QzJFNjZGRDE3OEFGRTA4RkIy
ODFGNkE3REM5NkU0RjNDMEY2QUZFQ0U1OTVCMjBEMEI1RTE4MEE0NjAzNkVFNjY1
RTUyREU4MUQzNkZEOTcwRkI1Mzc2MjRBMzhFOTdCQ0IxOUE4RTFGRjBFOEVCQTJF
MDdBRkQ4RTQ3Q0I0NTczMTlFQjQwMEE1NDI0Q0FDNzkwM0UyRTVBMzY2MkM2OTE2
MjI5ODQzNzk2MjUyMjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1tgbPdWHHw6nMxghGxd1C9AP/vv7VUGC69pg3m1fkdmQ1XhKSv17
UuZ0bQgh9s1xe+wu50Lq/6hdPR78PspfwDYC54oxPFg+TWsmofPIdDXdprs4+eoY
4EFnQCK0sVwoBoMNU/t46fzxEh2DO5HEiAtk19KNY2iO39RiZi6nJMC4zyXLm96C
8LN11RJcY5nANZxUUdAc//1aw3Dqrr0nobaSubUrx+9FwuZv0Xiv4I+ygfan3Jbk
88D2r+zllbINC14YCkYDbuZl5S3oHTb9lw+1N2JKOOl7yxmo4f8OjrouB6/Y5Hy0
VzGetAClQkyseQPi5aNmLGkWIphDeWJSKQIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FN7dwdnrA5Wb993h8oSB7jU39O0CMB8GA1UdIwQYMBaAFK4kjIDqXExXecEpcSHQ
vY0tw3nwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzEvQUUyNDhDODBFQTVDNEM1
Nzc5QzEyOTcxMjFEMEJEOEQyREMzNzlGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BRTI0OEM4MEVBNUM0QzU3NzlDMTI5NzEyMUQwQkQ4RDJEQzM3
OUYwLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8xLzMyMzgzMDM0M2EzMjYyMzczODNh
MzgzMDM2MzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKAQreIBhMA0GCSqGSIb3DQEBCwUAA4IBAQAgGc8rDDWfAV4SoFWD8bEA
0ziCVAYkPJgPAOi2mfR5Olt7kmhnIMoih5yI/GRhy0yrAIVutd+lGeVVrwf21Ixa
ZSHxEffGPzaFLZ/I6muMGI1vIZsb9kvGiV2lTq9CAs7a+Cv1BBQ6I4Q9freWDi7v
kE/XNnLgdvZdHFO9BiwiJ1KrHZlGl6m32EPfkbjZUFMcEK2d8yGqAxYnhjvqbK44
Q4iFfjuWKsGT8Er2v9ggsL0ZhozlRG+OigZwk8wF6uIVi7I176LCl+pD4y7ayT6p
CX4OlcciEpPaDNTN3hUkrWUOvUYYE6gJCS+ABCH9/NkpWRC7BzrpxXHcL7P0vtpw
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:29:59 2025 by rpki-client