Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/323830343a323866303a3a2f33322d3438203d3e20323633393838.roa
File:                     323830343a323866303a3a2f33322d3438203d3e20323633393838.roa (raw, json)
Hash identifier:          FfG5ZDyee+a4qFY2Xwev7D7TVMxppMxA3lYE3RL6Ewg=
Subject key identifier:   E8:BD:69:15:48:8E:6F:9C:8E:86:22:1A:42:8E:14:08:8A:6C:BD:D3
Certificate issuer:       /CN=4491F61A3392F58DCF5B33411AD0EC4329C8AFB7
Certificate serial:       75E311C2EDCDB52C895687CA2D99135B61681927
Authority key identifier: 44:91:F6:1A:33:92:F5:8D:CF:5B:33:41:1A:D0:EC:43:29:C8:AF:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/323830343a323866303a3a2f33322d3438203d3e20323633393838.roa
Signing time:             Tue 27 May 2025 13:40:56 +0000
ROA not before:           Tue 27 May 2025 13:35:56 +0000
ROA not after:            Tue 26 May 2026 13:40:56 +0000
asID:                     263988
IP address blocks:        2804:28f0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.crl
                          rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 14:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e3:11:c2:ed:cd:b5:2c:89:56:87:ca:2d:99:13:5b:61:68:19:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4491F61A3392F58DCF5B33411AD0EC4329C8AFB7
        Validity
            Not Before: May 27 13:35:56 2025 GMT
            Not After : May 26 13:40:56 2026 GMT
        Subject: CN=E8BD6915488E6F9C8E86221A428E14088A6CBDD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:56:40:56:5a:0c:ec:2b:6a:95:d6:92:4f:53:
                    94:08:02:14:81:a5:57:9a:6d:6b:dd:6c:2d:67:5c:
                    58:e4:d0:93:c6:4c:84:99:c1:16:9e:5c:70:1d:4f:
                    d5:3d:b8:23:ec:d7:49:02:19:8a:e1:a2:ac:3a:c1:
                    f3:d7:48:e3:1f:c0:0b:29:c1:5e:d1:3f:23:85:14:
                    ed:d2:47:49:4e:2b:6c:f9:f6:af:b3:63:1a:9c:5c:
                    b4:7f:46:20:54:12:62:51:69:82:f3:00:06:24:7d:
                    de:ab:94:0f:d4:42:3a:89:6f:23:da:41:9a:ca:23:
                    fc:25:a0:74:50:56:0f:66:84:62:1d:5a:12:19:3e:
                    66:52:6f:cc:e4:7b:4a:42:58:7c:2d:52:09:c3:dc:
                    55:97:4f:47:9b:12:f2:ce:81:36:d0:55:5c:64:b1:
                    66:43:d2:38:18:23:75:2e:9b:3f:88:65:36:e7:ba:
                    83:8e:8c:01:1b:b7:1a:0d:e6:3a:60:e0:89:87:fb:
                    14:92:91:20:8d:b6:cb:90:3f:56:ba:0c:35:87:74:
                    15:72:cf:7b:bf:06:fa:8f:0b:15:78:23:8d:6c:e9:
                    de:89:6a:c4:86:25:46:26:12:34:db:b3:55:f9:1c:
                    8f:e0:af:71:e2:0a:00:03:23:fc:a6:a2:69:f2:78:
                    a3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BD:69:15:48:8E:6F:9C:8E:86:22:1A:42:8E:14:08:8A:6C:BD:D3
            X509v3 Authority Key Identifier:
                keyid:44:91:F6:1A:33:92:F5:8D:CF:5B:33:41:1A:D0:EC:43:29:C8:AF:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/323830343a323866303a3a2f33322d3438203d3e20323633393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:3a:cd:86:3b:b4:7c:d8:9e:7c:c1:fb:fe:87:70:69:de:1f:
         e6:f5:fe:8a:bd:a2:83:ba:ae:7b:4c:ab:64:93:36:ec:0e:6e:
         14:1d:ed:80:7f:13:ea:65:8e:8d:1b:59:24:bd:3b:ed:d7:72:
         f9:fd:e2:88:64:5b:96:66:6d:67:43:c0:85:2e:18:9e:b8:6b:
         7e:d8:be:7b:b5:ba:3e:9a:d6:d9:9a:1f:14:08:b4:56:65:00:
         68:bd:de:f0:bb:44:74:68:cb:18:13:1f:45:1e:16:63:ca:cc:
         ee:f3:2d:a4:50:41:40:bc:3f:e9:d2:98:0f:45:4a:e2:a1:43:
         4f:ba:8b:b0:c7:71:bd:f1:76:05:03:70:36:1e:ba:a2:f2:01:
         f9:a2:63:b6:23:65:32:23:f5:06:92:11:24:32:9f:17:5d:f8:
         16:db:ef:83:53:85:46:11:9d:3e:b5:1d:3d:b3:f7:84:46:d0:
         0c:ec:ab:aa:75:bd:9e:5b:66:f2:3e:b4:26:b3:e3:fa:b3:16:
         6a:e7:df:57:66:d4:2c:d9:42:69:cc:62:b9:50:bb:52:a5:8f:
         f1:f0:83:ee:bd:fa:7f:fa:71:86:67:ea:59:5c:d4:cc:08:af:
         a8:95:34:fe:9f:0c:0f:c8:78:72:64:60:2d:8c:b5:9f:a0:db:
         1d:30:c6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 16:39:00 2025 by rpki-client