Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/323830343a326566633a3a2f33322d3438203d3e20323634383634.roa
File:                     323830343a326566633a3a2f33322d3438203d3e20323634383634.roa (raw, json)
Hash identifier:          +aVkOUvbGGflUKkCCkHIVmzrgzLvs6PyoNmf2BlYDJU=
Subject key identifier:   49:2E:99:04:CA:54:1A:EE:F0:99:26:F9:DF:D4:C8:F3:95:5A:2A:07
Certificate issuer:       /CN=FDE3E024B610CB82CCD6BC3247C371E85AED8728
Certificate serial:       5BFE1EC22229D53ED2767C31BEC72BA85B4AD8DB
Authority key identifier: FD:E3:E0:24:B6:10:CB:82:CC:D6:BC:32:47:C3:71:E8:5A:ED:87:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDE3E024B610CB82CCD6BC3247C371E85AED8728.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/323830343a326566633a3a2f33322d3438203d3e20323634383634.roa
Signing time:             Thu 28 Aug 2025 17:54:27 +0000
ROA not before:           Thu 28 Aug 2025 17:49:27 +0000
ROA not after:            Thu 27 Aug 2026 17:54:27 +0000
asID:                     264864
IP address blocks:        2804:2efc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/FDE3E024B610CB82CCD6BC3247C371E85AED8728.crl
                          rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/FDE3E024B610CB82CCD6BC3247C371E85AED8728.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDE3E024B610CB82CCD6BC3247C371E85AED8728.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 16:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:fe:1e:c2:22:29:d5:3e:d2:76:7c:31:be:c7:2b:a8:5b:4a:d8:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDE3E024B610CB82CCD6BC3247C371E85AED8728
        Validity
            Not Before: Aug 28 17:49:27 2025 GMT
            Not After : Aug 27 17:54:27 2026 GMT
        Subject: CN=492E9904CA541AEEF09926F9DFD4C8F3955A2A07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:13:b5:55:25:dc:d2:df:84:f9:2f:b8:9b:8a:
                    56:88:85:7f:76:ec:3d:be:d7:62:56:b2:d9:e6:b5:
                    41:f7:66:5f:ef:79:61:b8:0e:d8:d4:f4:7c:d9:0c:
                    56:39:55:44:43:bb:42:8a:6f:28:84:71:83:a0:79:
                    91:a1:d2:ca:7f:11:6c:af:e8:82:29:9f:15:e1:d0:
                    56:85:90:05:11:b3:90:00:3a:b2:f9:44:e7:1e:1f:
                    39:79:ab:fe:4f:86:89:c6:16:b3:3e:c0:18:99:9b:
                    c3:b1:57:be:bf:b3:93:bd:8c:66:a3:a8:84:d0:17:
                    cf:6e:54:1c:1d:85:89:cf:41:48:b0:73:bc:1b:d9:
                    ab:64:3a:7a:84:59:97:eb:bb:e6:6e:35:a7:1d:87:
                    6e:e9:2a:20:23:0e:4e:d9:cf:13:7e:83:c7:c9:8f:
                    a2:79:fb:b1:73:bc:26:8a:aa:d3:b6:19:a7:03:8e:
                    c4:8e:3b:74:df:cc:fa:c9:7a:a5:44:f4:00:57:9a:
                    07:fd:be:34:06:e2:92:21:d6:d9:36:0a:05:4f:97:
                    a9:c2:4d:f0:56:c0:50:b5:88:64:4f:c9:8e:a1:8a:
                    0b:ef:68:92:2f:96:b2:d6:98:2c:b8:ed:f8:11:d4:
                    00:7a:07:02:99:0c:7b:79:0d:07:bf:96:4d:ce:55:
                    4c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2E:99:04:CA:54:1A:EE:F0:99:26:F9:DF:D4:C8:F3:95:5A:2A:07
            X509v3 Authority Key Identifier:
                keyid:FD:E3:E0:24:B6:10:CB:82:CC:D6:BC:32:47:C3:71:E8:5A:ED:87:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/FDE3E024B610CB82CCD6BC3247C371E85AED8728.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDE3E024B610CB82CCD6BC3247C371E85AED8728.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/323830343a326566633a3a2f33322d3438203d3e20323634383634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2efc::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:43:70:5e:dc:a9:60:a5:d5:47:c9:32:e6:3f:98:39:d6:2a:
         59:d4:51:91:c4:dd:dd:64:24:95:43:35:ac:4e:79:e5:c2:55:
         3c:d5:61:43:d1:3b:8a:e4:57:51:da:f6:fd:ab:b9:60:fb:dd:
         a4:af:7d:4f:58:13:66:5d:65:85:ce:03:a0:3a:a9:24:50:bd:
         8a:c8:c7:03:84:fc:3f:d2:cc:9a:88:43:bf:70:e7:af:e6:8e:
         f1:47:5f:9a:e6:dd:fd:d5:4e:e9:63:7f:b5:30:12:ba:81:8d:
         b9:5e:5e:b5:e5:05:6c:76:b4:4a:71:ff:00:f0:da:c5:02:ed:
         b6:c8:55:f7:5d:76:78:ea:ff:0f:b5:18:2c:0c:36:19:0f:2b:
         78:c3:12:5a:2e:5d:ce:69:c1:eb:5d:09:73:e9:60:d5:a1:b7:
         86:e7:f7:b4:98:ab:27:7e:c6:0d:00:a3:1c:08:c3:ab:b5:f0:
         91:9f:2b:93:ab:28:1b:b3:e4:72:49:6b:b8:b9:a0:37:b6:bc:
         26:7d:92:40:cb:de:0d:ff:89:11:40:d1:bb:56:4f:c8:80:8b:
         83:8f:08:03:fa:1b:66:15:ed:c8:d7:a5:30:b0:b8:ff:73:05:
         31:69:84:4a:c8:51:54:7c:9b:92:f8:3f:28:ba:0d:81:e7:5d:
         af:57:6f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:33:53 2025 by rpki-client