Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a3130303a3a2f34302d3434203d3e20323734363732.roa
File:                     323830343a393165303a3130303a3a2f34302d3434203d3e20323734363732.roa (raw, json)
Hash identifier:          R/SehBGCYP1oC28CVXrTxhE7omeEBKgAN0q7D8FfI9Y=
Subject key identifier:   19:91:F7:64:3F:AC:25:D6:7E:05:DF:E2:C8:CD:55:1B:90:92:59:E9
Certificate issuer:       /CN=048F5080A314D580279F12113E7EC9BCA443B4B7
Certificate serial:       30E0ED5C560A3B818BA99F4A8932730242A4CE5C
Authority key identifier: 04:8F:50:80:A3:14:D5:80:27:9F:12:11:3E:7E:C9:BC:A4:43:B4:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048F5080A314D580279F12113E7EC9BCA443B4B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a3130303a3a2f34302d3434203d3e20323734363732.roa
Signing time:             Thu 29 May 2025 17:37:29 +0000
ROA not before:           Thu 29 May 2025 17:32:29 +0000
ROA not after:            Thu 28 May 2026 17:37:29 +0000
asID:                     274672
IP address blocks:        2804:91e0:100::/40 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/048F5080A314D580279F12113E7EC9BCA443B4B7.crl
                          rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/048F5080A314D580279F12113E7EC9BCA443B4B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048F5080A314D580279F12113E7EC9BCA443B4B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 09:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e0:ed:5c:56:0a:3b:81:8b:a9:9f:4a:89:32:73:02:42:a4:ce:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048F5080A314D580279F12113E7EC9BCA443B4B7
        Validity
            Not Before: May 29 17:32:29 2025 GMT
            Not After : May 28 17:37:29 2026 GMT
        Subject: CN=1991F7643FAC25D67E05DFE2C8CD551B909259E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:43:41:3e:3d:1b:f3:40:9b:47:61:ef:7c:d3:
                    ee:d9:86:f4:f3:3a:89:a9:90:c3:8d:c9:17:6b:24:
                    15:a8:08:56:2f:d6:b7:c5:20:fc:67:8c:ed:e5:e5:
                    81:e0:52:f6:82:48:b2:04:52:f4:a4:49:0d:62:48:
                    31:99:1b:0e:18:06:7b:61:0e:e8:51:36:e2:a8:12:
                    e5:9c:b5:07:0f:e3:be:93:7a:af:f5:c0:1c:e2:b0:
                    8c:dd:53:db:99:18:d6:0f:9f:91:2b:eb:65:06:3c:
                    f1:ba:a7:b2:c5:10:80:c9:0c:04:f5:62:69:8f:85:
                    27:7d:4f:b5:6e:bc:4c:88:f5:72:ee:26:41:54:c9:
                    22:6f:70:d3:32:75:22:65:68:90:21:d4:5c:04:ba:
                    a9:3d:4d:ee:2e:84:20:02:7d:b6:eb:64:0b:1a:3e:
                    7d:4c:72:c1:f1:1f:64:33:6a:ae:42:c4:c8:d2:d0:
                    6d:03:69:33:a5:d0:4a:b9:71:f0:e7:e3:77:81:9a:
                    d2:6c:47:85:b4:4c:e1:e6:0a:48:11:cd:77:a7:3f:
                    92:79:82:87:8e:c4:99:b5:1e:8a:f0:2e:e6:9e:2f:
                    7c:fc:5a:da:04:2a:24:88:81:3e:7a:e9:e2:ff:b7:
                    72:ed:2b:ea:f0:76:3d:3b:68:df:e4:06:4b:ac:e3:
                    ac:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:91:F7:64:3F:AC:25:D6:7E:05:DF:E2:C8:CD:55:1B:90:92:59:E9
            X509v3 Authority Key Identifier:
                keyid:04:8F:50:80:A3:14:D5:80:27:9F:12:11:3E:7E:C9:BC:A4:43:B4:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/048F5080A314D580279F12113E7EC9BCA443B4B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048F5080A314D580279F12113E7EC9BCA443B4B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a3130303a3a2f34302d3434203d3e20323734363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91e0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         68:74:f3:87:9e:8c:92:3c:b6:0a:30:c3:d0:18:14:0e:0c:ed:
         3e:9f:b7:ef:28:0c:22:68:07:05:f7:c1:37:62:73:e4:4b:d6:
         08:3a:3f:70:5b:29:d4:95:72:27:af:60:b5:85:6b:33:90:2f:
         17:f9:38:36:f3:99:33:12:2c:46:eb:7c:3d:3c:e7:3b:a0:b6:
         6f:11:10:51:b2:8b:b1:dc:c5:05:11:d8:20:f9:e7:2f:b8:2f:
         8c:f2:a3:0b:f1:da:5f:d4:65:fb:6c:c4:24:5a:6c:5e:72:3e:
         58:76:dd:2a:51:8c:1d:d6:50:ce:26:f7:22:15:d4:e1:9d:e6:
         62:e4:e5:5b:df:8d:ca:fc:7c:91:62:ef:4f:d5:e5:ac:2e:7e:
         a3:e4:35:1d:38:65:84:34:de:6d:63:66:74:4e:bd:db:4a:8e:
         a8:e6:a3:7f:33:bf:bb:67:f2:ca:55:26:85:6e:d7:c8:d7:0d:
         72:4f:05:f9:d3:0c:74:11:e7:a4:34:31:b1:aa:9f:e7:7f:36:
         44:85:01:44:29:25:7e:49:76:1f:a4:ff:5e:af:f5:38:fc:5a:
         d9:42:9a:79:66:06:98:4f:37:91:32:9a:53:2c:79:f9:a0:47:
         9b:5b:f4:62:11:ae:d5:cc:0b:84:5b:47:e3:ae:b3:89:39:7c:
         c0:f4:cb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:06:28 2025 by rpki-client