Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383036323a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383036323a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          rNkFxN6wxRKUw0EQdwaqr39+8sc2HpPUSYhGKG/Upl0=
Subject key identifier:   84:07:E4:E7:65:4E:6E:78:F9:D7:2E:72:B7:59:28:E5:20:AA:58:60
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       37FDE4A652B91BADD7E7802BA31710C84142E770
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383036323a3a2f34382d3438203d3e203532343638.roa
Signing time:             Wed 23 Jul 2025 19:46:32 +0000
ROA not before:           Wed 23 Jul 2025 19:41:32 +0000
ROA not after:            Wed 22 Jul 2026 19:46:32 +0000
asID:                     52468
IP address blocks:        2804:2b78:8062::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 19:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:fd:e4:a6:52:b9:1b:ad:d7:e7:80:2b:a3:17:10:c8:41:42:e7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jul 23 19:41:32 2025 GMT
            Not After : Jul 22 19:46:32 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2d:02:34:46:a4:1a:7a:0f:3f:96:ab:a7:0c:
                    1f:1c:b9:55:3f:be:1a:a5:6b:ea:fc:16:d6:ad:50:
                    a4:86:a9:03:b0:53:cf:c6:16:5b:f5:3d:71:c3:6f:
                    14:ad:0c:60:9d:65:2c:61:78:ee:c8:ac:0b:af:78:
                    f7:ea:ad:6b:5b:f5:1f:02:25:b2:7a:ea:2d:7c:31:
                    c7:1f:1e:1e:23:0e:5c:8b:eb:de:74:63:be:85:ca:
                    aa:b7:57:83:4f:a2:76:71:e0:2c:79:9c:59:f7:52:
                    3c:7e:e3:ff:a1:46:a5:de:df:3b:7d:fc:7a:bb:f7:
                    f7:94:b4:f6:7b:b5:af:ae:21:37:9e:b4:af:11:49:
                    92:6e:ce:26:9a:3f:54:bf:fd:af:8a:cf:69:5a:23:
                    e2:22:23:b5:d1:07:ae:24:b8:c2:3a:94:aa:1b:09:
                    c7:9b:43:0b:84:16:21:c3:d2:e0:74:a4:d3:40:fe:
                    64:bf:e7:4b:48:67:bb:5e:84:c7:b3:0a:6e:49:43:
                    b7:58:38:19:60:6a:7f:3d:2a:fd:16:e3:27:c1:d6:
                    ca:58:48:d6:f4:cd:78:82:d3:23:c8:4e:f8:4d:ca:
                    0c:c6:4d:ed:f1:22:bc:a2:fe:9a:0b:a8:69:21:dd:
                    34:42:1c:73:61:a1:f5:21:23:d1:ec:8f:17:65:9a:
                    db:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:07:E4:E7:65:4E:6E:78:F9:D7:2E:72:B7:59:28:E5:20:AA:58:60
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383036323a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8062::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:3f:64:1a:96:81:99:84:a9:f4:b3:fd:0d:f9:1d:46:85:ce:
         92:80:21:1c:d0:87:69:60:78:ca:d8:0a:c0:09:ef:7d:05:b8:
         18:e4:a0:71:dc:87:77:70:c0:21:a4:92:e9:02:c7:c8:12:4d:
         fb:bf:26:4d:cc:f1:ec:2e:ab:e0:08:09:6c:ce:d1:3d:56:89:
         8d:1f:0e:55:b6:3f:16:59:02:63:91:f4:f8:69:bb:2c:34:b8:
         ac:7b:a2:a3:6f:d2:16:9c:bb:4a:f7:d4:3a:ea:90:54:1b:11:
         ed:b6:70:07:64:e9:19:40:b8:e8:a2:6d:cf:7a:17:61:56:56:
         1b:64:38:e0:0a:87:be:1c:99:22:0c:8a:b3:00:60:ed:3f:d6:
         18:00:b5:4e:3b:79:1f:cc:99:3e:c5:6d:bd:58:e2:bb:fb:38:
         77:4f:2a:a8:db:85:ce:76:1e:ee:02:37:3f:3e:b7:09:09:ce:
         2b:52:45:0a:e4:35:d8:9f:3c:ef:20:59:1a:09:e3:f6:4d:7a:
         fa:18:42:28:d3:46:6c:c5:3c:7e:fe:5e:c3:d4:fc:57:b5:d4:
         06:d3:a4:31:b2:34:1f:19:81:2e:bc:5f:84:ca:57:d2:cb:12:
         69:8d:dd:6b:cc:8a:20:92:5b:18:8f:dd:42:aa:34:e4:e0:3e:
         b5:82:ae:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:45:28 2025 by rpki-client