Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FEMGmkL6CpWnue3WgXpNgnvssfiWJ2Gnoa5CqTbLvShv/0/323830343a343034303a3a2f33322d3438203d3e20323635393437.roa
File:                     323830343a343034303a3a2f33322d3438203d3e20323635393437.roa (raw, json)
Hash identifier:          /lr6KHVA8zwAtgn9ObmNYLjYDtybqCXyCL4nEToZNok=
Subject key identifier:   A0:C2:FB:69:2E:46:74:35:A6:1C:57:4E:31:D1:28:E2:FC:2F:28:C2
Certificate issuer:       /CN=F5159D4B65C13BFAEAAC00EC92614A92530BC594
Certificate serial:       5B74CBFCFB4FEAA715606FB1C187BDCE55FD1BAD
Authority key identifier: F5:15:9D:4B:65:C1:3B:FA:EA:AC:00:EC:92:61:4A:92:53:0B:C5:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5159D4B65C13BFAEAAC00EC92614A92530BC594.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FEMGmkL6CpWnue3WgXpNgnvssfiWJ2Gnoa5CqTbLvShv/0/323830343a343034303a3a2f33322d3438203d3e20323635393437.roa
Signing time:             Mon 07 Jul 2025 19:23:41 +0000
ROA not before:           Mon 07 Jul 2025 19:18:41 +0000
ROA not after:            Mon 06 Jul 2026 19:23:41 +0000
asID:                     265947
IP address blocks:        2804:4040::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FEMGmkL6CpWnue3WgXpNgnvssfiWJ2Gnoa5CqTbLvShv/0/F5159D4B65C13BFAEAAC00EC92614A92530BC594.crl
                          rsync://rpki-repo.registro.br/repo/FEMGmkL6CpWnue3WgXpNgnvssfiWJ2Gnoa5CqTbLvShv/0/F5159D4B65C13BFAEAAC00EC92614A92530BC594.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5159D4B65C13BFAEAAC00EC92614A92530BC594.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 22:24:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:74:cb:fc:fb:4f:ea:a7:15:60:6f:b1:c1:87:bd:ce:55:fd:1b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5159D4B65C13BFAEAAC00EC92614A92530BC594
        Validity
            Not Before: Jul  7 19:18:41 2025 GMT
            Not After : Jul  6 19:23:41 2026 GMT
        Subject: CN=A0C2FB692E467435A61C574E31D128E2FC2F28C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a8:84:3e:1c:fe:ff:b0:6a:90:93:6d:d8:41:
                    6d:40:95:b4:e7:c9:91:de:81:02:dc:b4:63:24:8d:
                    e7:c2:8f:31:d5:9a:1b:a3:da:dc:8b:00:c2:37:57:
                    c3:50:41:a2:76:4b:7e:5d:38:4a:75:31:92:32:d4:
                    86:a3:3b:35:ad:d4:c5:c1:90:d5:73:fa:04:8f:e5:
                    1e:47:85:be:e9:31:a4:8f:85:a3:5a:af:93:c6:71:
                    64:eb:25:e7:26:4c:60:c3:05:58:62:82:68:07:e4:
                    68:78:5c:68:cf:d5:46:61:fc:bc:9f:52:e9:a5:35:
                    d2:f9:3c:14:7d:db:be:6d:cb:7a:2a:44:e7:c0:9d:
                    9f:f4:9b:28:21:db:b3:d3:62:71:53:5c:74:0c:cd:
                    d7:1b:8e:29:92:61:de:80:9a:48:06:5f:c1:f4:d5:
                    7a:ed:a5:56:5c:33:c7:68:f1:62:80:f5:cb:fc:25:
                    15:e9:99:6c:2d:48:ec:06:d6:0f:de:ba:74:f1:ca:
                    be:34:20:05:60:ae:6d:20:45:bf:53:eb:82:b4:1c:
                    9e:96:10:37:d6:39:2e:fc:b4:0e:db:a0:fc:fe:e2:
                    51:5c:b0:dc:4b:75:52:39:d9:98:8d:db:1a:9b:a5:
                    a6:a3:e9:98:ba:a4:51:0a:3f:b2:fa:f3:c1:cd:4e:
                    18:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C2:FB:69:2E:46:74:35:A6:1C:57:4E:31:D1:28:E2:FC:2F:28:C2
            X509v3 Authority Key Identifier:
                keyid:F5:15:9D:4B:65:C1:3B:FA:EA:AC:00:EC:92:61:4A:92:53:0B:C5:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FEMGmkL6CpWnue3WgXpNgnvssfiWJ2Gnoa5CqTbLvShv/0/F5159D4B65C13BFAEAAC00EC92614A92530BC594.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5159D4B65C13BFAEAAC00EC92614A92530BC594.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FEMGmkL6CpWnue3WgXpNgnvssfiWJ2Gnoa5CqTbLvShv/0/323830343a343034303a3a2f33322d3438203d3e20323635393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4040::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:a4:f9:ab:c1:33:b6:ca:d6:f8:81:4b:57:77:ae:4e:06:a9:
         60:44:d1:be:ea:11:d5:ad:a3:32:fb:d9:3a:76:1d:18:1c:b3:
         f2:96:a6:ee:ea:88:4c:36:98:96:b5:34:dc:d2:94:89:48:e9:
         2a:59:94:d7:30:7d:c1:e7:44:69:75:4b:c7:3f:05:b0:48:52:
         da:4e:b5:1e:87:74:cd:80:7d:9e:02:af:e1:dd:c0:a5:86:2c:
         18:72:3d:66:86:52:06:15:e7:2c:67:ac:c1:1b:27:1f:ae:f7:
         8c:d6:23:34:f6:7f:38:99:13:5c:47:c2:64:6a:1a:bc:25:7c:
         54:28:d9:d7:d6:81:78:08:95:6e:e4:70:94:23:f8:3c:c8:d0:
         3f:11:bd:5d:07:81:95:e2:eb:d8:c4:29:b8:d0:d5:19:05:e1:
         c3:e8:81:7b:86:6e:68:c5:21:b6:9e:ab:f7:6a:21:fa:97:08:
         a3:f7:5d:a6:96:ba:fc:8c:a0:7b:2f:65:56:34:ed:bc:0d:9a:
         87:f4:db:b1:8e:8b:be:07:d4:c6:10:75:1c:3d:ce:ee:86:2d:
         0e:68:8e:00:b1:d1:db:94:b9:d5:c6:a8:a1:45:ce:19:84:cf:
         8a:bd:aa:79:58:8c:81:86:03:93:b0:99:a7:cd:d3:fb:31:87:
         46:c6:f9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:04:25 2025 by rpki-client