Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383036333a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383036333a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          4ztA5X23NMCA2+Q/b5H7TQbKvKv8icIrE2bj/RHOlSw=
Subject key identifier:   AF:EF:00:0A:C7:2C:95:8A:03:8D:4E:55:D2:AD:B9:73:BD:FC:4B:76
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       3968A7AB76A6874DF290FF1014597826CACE544C
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383036333a3a2f34382d3438203d3e203532343638.roa
Signing time:             Wed 23 Jul 2025 19:45:54 +0000
ROA not before:           Wed 23 Jul 2025 19:40:54 +0000
ROA not after:            Wed 22 Jul 2026 19:45:54 +0000
asID:                     52468
IP address blocks:        2804:2b78:8063::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 19:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:68:a7:ab:76:a6:87:4d:f2:90:ff:10:14:59:78:26:ca:ce:54:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jul 23 19:40:54 2025 GMT
            Not After : Jul 22 19:45:54 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ea:09:b5:f4:2d:b0:26:53:67:44:2d:3e:28:
                    f4:a3:d0:45:ed:04:eb:cd:8a:59:b4:24:b3:38:06:
                    80:a1:fa:89:be:42:2d:18:e1:6c:a1:62:37:04:6b:
                    42:fb:03:be:33:65:63:02:34:dc:0a:5a:a3:c7:0f:
                    45:77:ae:17:4c:33:ad:05:11:81:0a:42:20:a1:d1:
                    52:02:fe:97:58:cc:a1:6e:c8:70:64:df:b1:aa:5c:
                    14:3b:5b:55:18:82:01:67:54:0e:23:c0:61:f7:8f:
                    18:b5:ab:ea:78:45:fa:78:2a:6d:1e:08:78:f6:f4:
                    18:23:80:98:8c:d1:45:06:be:1c:1f:09:0e:be:f5:
                    fe:3f:f7:bb:46:87:51:12:c4:80:39:70:9a:40:f6:
                    66:9c:5a:95:7a:26:18:92:31:a9:03:e5:12:50:23:
                    d5:48:11:ca:5f:59:19:f3:9a:f0:e2:c7:a4:02:18:
                    68:33:50:fe:ca:71:eb:de:87:48:9d:dc:68:06:d4:
                    9b:82:aa:68:b1:f8:3d:2b:bd:20:0f:ab:ab:c8:0d:
                    59:8a:25:dc:96:53:75:b8:db:72:80:8c:9e:c1:1b:
                    2d:d4:c5:ee:d6:42:a3:ce:1c:1b:82:85:ff:7e:3d:
                    17:34:00:f3:97:98:f6:a6:60:b9:28:25:48:40:f9:
                    24:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:EF:00:0A:C7:2C:95:8A:03:8D:4E:55:D2:AD:B9:73:BD:FC:4B:76
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383036333a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8063::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:9f:3c:b2:78:3f:2f:27:d3:a1:fd:2b:8a:de:88:ca:5b:92:
         e4:03:b2:6d:f5:3a:94:34:9f:96:e5:b5:e1:0c:03:87:b9:7a:
         da:c2:94:a4:0d:a6:6a:4a:56:aa:52:e2:40:30:78:bd:26:7c:
         be:9b:c1:97:0a:99:11:96:d9:a3:79:44:c7:63:fd:75:8b:44:
         40:c9:27:4d:e1:50:d7:1e:df:41:a8:6b:52:96:bf:f7:22:e7:
         f6:01:fb:d9:b4:91:f5:4c:7a:77:67:7a:ec:92:05:a6:3c:f3:
         16:95:de:65:8a:60:d2:8f:5f:0e:a4:b0:19:d5:27:e7:83:b2:
         ed:a3:74:c4:e5:89:19:f1:ae:84:c8:55:30:c8:de:50:09:79:
         41:12:61:84:2c:90:16:40:66:5d:61:6e:16:56:8f:92:4d:7c:
         87:ff:df:3c:85:a3:93:b1:69:9a:85:36:c3:0b:d0:d1:1c:6d:
         2d:2d:d6:d6:1b:7a:e2:6c:72:04:68:7b:bf:23:66:28:ef:15:
         f4:f3:25:06:b3:59:af:b7:3a:bc:c1:b9:95:f3:62:99:e2:0c:
         62:e0:c1:ed:d9:74:1a:5e:59:65:28:2a:a4:8a:59:ed:e3:c1:
         53:db:58:b2:5b:af:ed:01:f8:6e:b1:0e:09:8b:2f:3c:76:c7:
         40:97:ba:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:34:32 2025 by rpki-client