Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FbWMqD47F1p6HEZDbTvwSybmDiPPUs5iQV5mpLMbi2VL/0/323830343a386336383a3a2f33322d313238203d3e20323733383030.roa
File:                     323830343a386336383a3a2f33322d313238203d3e20323733383030.roa (raw, json)
Hash identifier:          9KrUPJQ3WlIEiIKZyzL03+ZhiSe0RMEjzmHKJVAvkgo=
Subject key identifier:   CC:53:0E:60:CE:06:14:35:C2:68:7D:DB:B5:AB:F2:7A:04:8F:FD:37
Certificate issuer:       /CN=44463AE9A0B8D215D4D8BA6EB33A39926BD8A599
Certificate serial:       4AB2B56FB020FD0B373CBD38CF4663C6957D70B1
Authority key identifier: 44:46:3A:E9:A0:B8:D2:15:D4:D8:BA:6E:B3:3A:39:92:6B:D8:A5:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44463AE9A0B8D215D4D8BA6EB33A39926BD8A599.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FbWMqD47F1p6HEZDbTvwSybmDiPPUs5iQV5mpLMbi2VL/0/323830343a386336383a3a2f33322d313238203d3e20323733383030.roa
Signing time:             Mon 15 Sep 2025 23:36:56 +0000
ROA not before:           Mon 15 Sep 2025 23:31:56 +0000
ROA not after:            Mon 14 Sep 2026 23:36:56 +0000
asID:                     273800
IP address blocks:        2804:8c68::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FbWMqD47F1p6HEZDbTvwSybmDiPPUs5iQV5mpLMbi2VL/0/44463AE9A0B8D215D4D8BA6EB33A39926BD8A599.crl
                          rsync://rpki-repo.registro.br/repo/FbWMqD47F1p6HEZDbTvwSybmDiPPUs5iQV5mpLMbi2VL/0/44463AE9A0B8D215D4D8BA6EB33A39926BD8A599.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44463AE9A0B8D215D4D8BA6EB33A39926BD8A599.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 02:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b2:b5:6f:b0:20:fd:0b:37:3c:bd:38:cf:46:63:c6:95:7d:70:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44463AE9A0B8D215D4D8BA6EB33A39926BD8A599
        Validity
            Not Before: Sep 15 23:31:56 2025 GMT
            Not After : Sep 14 23:36:56 2026 GMT
        Subject: CN=CC530E60CE061435C2687DDBB5ABF27A048FFD37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:23:e9:e1:b8:56:c0:5b:d0:05:6e:38:dc:d2:
                    1c:06:49:0e:4b:c4:58:cf:40:f6:34:f8:74:98:13:
                    a1:49:c0:e4:f0:15:82:62:c4:a1:ac:a7:f6:92:0d:
                    d7:4b:e4:80:cb:c0:99:af:7d:1d:26:93:b0:dd:4a:
                    2a:36:fd:eb:2b:10:08:b4:cf:55:c6:91:b2:d3:56:
                    23:15:00:d0:b0:b8:60:fe:1d:fc:c8:48:43:60:3e:
                    c6:05:1f:26:50:76:93:45:80:46:e6:6a:de:64:03:
                    68:0e:ac:30:b7:10:c0:1b:b8:cd:2c:ec:32:a6:4d:
                    56:34:c8:37:6e:d5:0d:c7:95:1b:d8:9a:86:35:1d:
                    af:12:e1:3a:d6:8b:fe:6d:1b:ae:62:98:6b:a5:6e:
                    b3:2e:90:6a:5c:44:f2:38:4a:53:ae:99:71:7c:c2:
                    cc:b8:b6:7f:2a:17:7d:ac:e3:aa:09:50:8e:8e:bf:
                    83:fc:c8:93:d7:5b:ac:42:de:df:04:32:67:e1:8b:
                    c6:db:41:38:af:eb:fe:f2:af:85:fd:4e:e9:3e:46:
                    fc:05:22:ad:42:41:c3:8b:6b:22:96:6c:b3:cf:a1:
                    49:65:ab:2d:c1:fc:92:6c:7d:02:d9:64:09:d4:01:
                    03:bd:2c:51:ff:c3:59:70:9d:0d:78:93:e8:42:c8:
                    7f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:53:0E:60:CE:06:14:35:C2:68:7D:DB:B5:AB:F2:7A:04:8F:FD:37
            X509v3 Authority Key Identifier:
                keyid:44:46:3A:E9:A0:B8:D2:15:D4:D8:BA:6E:B3:3A:39:92:6B:D8:A5:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FbWMqD47F1p6HEZDbTvwSybmDiPPUs5iQV5mpLMbi2VL/0/44463AE9A0B8D215D4D8BA6EB33A39926BD8A599.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44463AE9A0B8D215D4D8BA6EB33A39926BD8A599.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FbWMqD47F1p6HEZDbTvwSybmDiPPUs5iQV5mpLMbi2VL/0/323830343a386336383a3a2f33322d313238203d3e20323733383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c68::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:12:92:17:21:7c:1d:16:bd:af:d9:c2:0d:6a:ef:38:b3:72:
         2f:ba:2a:ab:58:7b:1a:60:2d:dc:10:4b:f9:7d:75:6b:00:a8:
         93:02:87:4d:fa:32:00:e6:d0:0c:bb:e2:05:e9:34:4c:9c:4f:
         f1:c6:2c:a8:05:b8:76:98:db:c5:c2:e5:82:46:99:10:d0:34:
         b0:77:81:67:b2:30:17:e8:0d:16:a2:1d:17:2e:8b:d4:dd:0c:
         9c:c7:1e:dc:1f:89:11:07:61:04:5c:25:26:fc:44:06:b2:2a:
         b9:1e:e6:18:ac:04:b9:3a:8a:27:1a:16:b1:5a:42:50:e7:1a:
         26:03:7f:e3:d3:01:51:76:df:bc:0a:bf:55:56:52:f4:38:a0:
         6d:2b:da:7e:c4:1a:86:28:bc:4a:94:13:80:9e:d5:03:f0:7e:
         0c:f8:d5:ba:b4:ac:2d:3c:46:f8:12:e5:0b:c6:49:05:7d:cf:
         4a:b2:78:22:c4:70:b5:78:4c:bb:7a:35:6e:d3:6e:6c:81:02:
         8c:5d:fa:84:f0:53:e6:e4:1e:74:d8:a2:b1:33:6c:ec:bf:83:
         cc:12:1c:7d:b5:8f:e4:e6:ec:0b:e8:22:eb:3f:ce:54:93:e9:
         0e:78:96:0d:f5:5e:61:b9:b0:46:68:91:a4:19:3d:3b:aa:8b:
         5c:03:48:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 11:35:41 2025 by rpki-client