Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/323830343a333034383a3a2f33322d3332203d3e20323634393431.roa
File:                     323830343a333034383a3a2f33322d3332203d3e20323634393431.roa (raw, json)
Hash identifier:          JiGc+KJHJmZnJ/TfikITAxcQlEnOZyoP5mx+yjpzgH0=
Subject key identifier:   5C:95:38:D9:05:2A:DA:EF:61:96:37:9D:2A:3D:A2:7E:65:6E:94:51
Certificate issuer:       /CN=E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D
Certificate serial:       4763BFF396C8D27D1B75E62C367E685461FE0F47
Authority key identifier: E5:79:D9:FF:63:D9:A4:8D:BD:6C:7C:9A:21:1C:5A:62:53:89:1E:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/323830343a333034383a3a2f33322d3332203d3e20323634393431.roa
Signing time:             Tue 02 Sep 2025 00:31:09 +0000
ROA not before:           Tue 02 Sep 2025 00:26:09 +0000
ROA not after:            Tue 01 Sep 2026 00:31:09 +0000
asID:                     264941
IP address blocks:        2804:3048::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.crl
                          rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 06:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:63:bf:f3:96:c8:d2:7d:1b:75:e6:2c:36:7e:68:54:61:fe:0f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D
        Validity
            Not Before: Sep  2 00:26:09 2025 GMT
            Not After : Sep  1 00:31:09 2026 GMT
        Subject: CN=5C9538D9052ADAEF6196379D2A3DA27E656E9451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:60:4b:cc:bf:92:6c:27:2e:98:aa:a8:52:ee:
                    99:a4:c7:2e:07:8a:25:da:29:39:a8:15:ca:7e:19:
                    cd:b6:5e:2a:cd:48:4b:28:95:fe:98:73:d8:76:78:
                    be:83:88:13:30:2e:0a:6e:c2:07:13:70:7b:5e:b4:
                    98:68:0b:13:a7:4b:2a:08:57:ab:96:76:1a:8c:fc:
                    77:45:fb:f5:1d:d4:90:83:54:70:e7:90:f5:ea:ad:
                    91:f0:f3:00:4f:b2:8f:3c:09:0a:80:2d:10:22:18:
                    10:c0:2a:07:33:b4:70:7d:bf:cd:8a:80:ee:56:31:
                    f0:42:8e:a5:0d:d1:27:d6:ab:a6:a0:94:88:11:a4:
                    60:e0:68:55:89:bc:3e:36:af:59:6a:25:02:c8:fc:
                    5d:14:6d:d0:84:57:7a:89:2d:d9:96:d8:24:57:a0:
                    fe:4d:64:9a:af:4c:53:aa:88:67:8d:88:aa:8c:9f:
                    66:fd:d1:39:2b:54:6c:e0:61:69:2e:09:be:a2:d5:
                    e5:39:0e:bf:3a:89:fd:15:ed:cd:12:38:ba:af:3b:
                    8a:59:54:69:c1:e0:89:56:7e:aa:90:9a:01:90:93:
                    ef:78:70:d1:5b:e4:cb:f3:7b:c2:a0:14:16:05:bc:
                    98:06:e4:88:95:fc:80:52:d8:c8:a0:a0:6b:09:0a:
                    70:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:95:38:D9:05:2A:DA:EF:61:96:37:9D:2A:3D:A2:7E:65:6E:94:51
            X509v3 Authority Key Identifier:
                keyid:E5:79:D9:FF:63:D9:A4:8D:BD:6C:7C:9A:21:1C:5A:62:53:89:1E:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/323830343a333034383a3a2f33322d3332203d3e20323634393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3048::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:a8:13:c1:64:bc:74:87:42:a7:a4:d5:eb:3b:63:d0:96:4f:
         98:5b:7e:e4:0b:a1:01:dc:5e:41:97:68:7d:4a:2c:c0:b2:06:
         66:ed:10:eb:23:3b:bd:3e:03:1e:4f:f9:99:a7:2c:74:6a:0a:
         2c:97:80:6b:3b:2e:5b:df:95:d0:f9:f9:7b:1a:61:b8:62:ad:
         d0:ee:d1:ae:33:a7:0e:c0:dd:93:11:f5:61:77:07:18:53:9a:
         24:b3:e3:2a:ab:fd:11:7e:13:85:5f:f0:24:ab:58:f2:25:b8:
         da:2f:bc:04:22:77:b8:50:b1:80:99:7a:fc:a7:1e:d0:e6:96:
         59:9b:20:33:ad:36:73:75:08:01:ca:db:10:db:b9:4b:ee:0e:
         6f:49:d3:4d:fd:8f:cc:93:db:11:ef:50:94:2f:09:f7:c0:ef:
         75:d5:0d:3d:4e:4e:43:3a:61:fc:e4:3d:60:bb:a8:ac:dc:f0:
         8e:39:7d:26:ea:c8:1d:b1:cc:bc:99:aa:8b:e8:2d:4e:b9:e6:
         ce:08:af:b2:de:25:c8:72:fb:3e:7d:ce:20:78:ef:d6:2f:86:
         ff:94:1e:eb:e1:51:8d:d5:e1:0e:53:a2:2a:52:bd:02:eb:21:
         49:1a:50:e9:16:34:c5:28:8e:68:56:50:50:a1:ff:19:47:5e:
         7d:94:82:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 14:41:55 2025 by rpki-client