Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666230303a3a2f34302d3434203d3e20323734363732.roa
File:                     323830343a393165303a666230303a3a2f34302d3434203d3e20323734363732.roa (raw, json)
Hash identifier:          QMAtmCd64arcXz45LiLE/3ikCN6/mS0zuIfN+uDAImo=
Subject key identifier:   D2:B5:B8:86:6E:B6:F1:C1:35:CE:4F:A0:2A:40:7D:13:35:50:B3:A9
Certificate issuer:       /CN=048F5080A314D580279F12113E7EC9BCA443B4B7
Certificate serial:       55EA023A699DD64BD3E31DDC5409FAACE59217AC
Authority key identifier: 04:8F:50:80:A3:14:D5:80:27:9F:12:11:3E:7E:C9:BC:A4:43:B4:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048F5080A314D580279F12113E7EC9BCA443B4B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666230303a3a2f34302d3434203d3e20323734363732.roa
Signing time:             Thu 29 May 2025 17:34:48 +0000
ROA not before:           Thu 29 May 2025 17:29:48 +0000
ROA not after:            Thu 28 May 2026 17:34:48 +0000
asID:                     274672
IP address blocks:        2804:91e0:fb00::/40 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/048F5080A314D580279F12113E7EC9BCA443B4B7.crl
                          rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/048F5080A314D580279F12113E7EC9BCA443B4B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048F5080A314D580279F12113E7EC9BCA443B4B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 22:06:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ea:02:3a:69:9d:d6:4b:d3:e3:1d:dc:54:09:fa:ac:e5:92:17:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048F5080A314D580279F12113E7EC9BCA443B4B7
        Validity
            Not Before: May 29 17:29:48 2025 GMT
            Not After : May 28 17:34:48 2026 GMT
        Subject: CN=D2B5B8866EB6F1C135CE4FA02A407D133550B3A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:af:93:14:51:04:a8:c6:b6:6f:82:f6:51:1b:
                    31:60:74:88:4d:c9:59:1c:ab:e8:37:d1:11:da:59:
                    7d:91:19:98:0b:9f:b1:04:cb:8d:e3:af:6f:25:d1:
                    80:59:b3:c5:b9:cf:a4:69:c0:84:90:9b:94:42:b5:
                    3f:21:c3:80:c3:e2:01:d6:e9:91:dd:53:41:f6:a0:
                    e9:fd:70:61:0c:5e:f7:70:3c:c9:de:63:45:b5:06:
                    ae:10:af:69:ff:bb:0f:06:fb:b9:bc:e2:f8:1d:f0:
                    cb:bf:26:27:ff:61:c5:52:8b:40:b2:18:28:62:cd:
                    28:76:18:81:99:e6:4a:19:42:0d:e0:1f:f3:aa:e8:
                    67:b6:1c:08:56:31:dc:45:66:0d:37:6c:3b:b2:b7:
                    7c:cd:af:8e:63:ff:6d:aa:ad:d8:66:e1:50:28:39:
                    0d:90:9b:22:d2:41:5a:d6:5a:a3:e1:5e:ee:d8:cc:
                    c8:73:25:24:1d:df:49:59:75:a9:40:81:7d:74:f8:
                    2b:68:90:6a:3a:01:17:96:84:02:3c:64:d7:2c:1b:
                    b5:6f:9b:77:f6:e0:73:90:66:0d:a5:76:75:13:58:
                    6e:1e:1d:00:88:f4:a9:fa:ee:c7:ac:e0:0c:c7:d2:
                    4b:b9:a1:9c:e9:4c:99:bf:a2:5c:58:6b:4a:52:58:
                    da:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B5:B8:86:6E:B6:F1:C1:35:CE:4F:A0:2A:40:7D:13:35:50:B3:A9
            X509v3 Authority Key Identifier:
                keyid:04:8F:50:80:A3:14:D5:80:27:9F:12:11:3E:7E:C9:BC:A4:43:B4:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/048F5080A314D580279F12113E7EC9BCA443B4B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048F5080A314D580279F12113E7EC9BCA443B4B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666230303a3a2f34302d3434203d3e20323734363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91e0:fb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8f:9f:9f:69:1e:86:61:aa:e9:8c:95:e1:6b:38:8c:b1:4a:10:
         04:53:6b:6f:0a:5f:c8:c8:e4:2f:8d:96:d9:5e:48:80:7e:f5:
         7e:6a:fe:d0:9e:2c:6d:91:0e:15:07:3a:c1:3f:3a:a0:1d:42:
         85:9d:55:84:0b:83:29:74:a7:8a:01:1a:d0:2d:32:96:ff:a6:
         ba:f7:df:57:ec:79:68:9b:19:77:cd:c1:76:7a:f2:4b:8b:f3:
         b5:27:a6:d5:e7:99:87:31:dc:6d:e7:8f:dd:1e:12:39:7a:c2:
         63:27:4c:77:9e:53:c8:a0:1e:42:be:4f:56:0b:1c:b3:8e:34:
         0b:16:7c:94:9d:b9:b2:7b:79:1a:d7:e7:67:e1:bc:53:51:70:
         91:49:da:06:0b:18:c6:bd:f2:b2:ff:5e:fa:71:2b:b2:3c:1c:
         25:0e:9a:37:cf:9b:29:bd:f8:e7:fb:61:b3:2c:f5:00:52:3c:
         4a:6e:fc:81:3a:40:b7:b0:27:9a:55:c8:0e:93:c7:75:00:2e:
         a9:54:a4:64:c9:d8:8d:c5:af:db:a6:4b:2c:26:8f:4f:ec:ec:
         ad:96:d0:5e:5d:ce:d2:08:00:a1:d3:5a:83:95:59:f6:1d:03:
         cc:87:83:3c:ec:28:f8:67:5a:2b:fc:fe:f6:e3:9b:7f:36:18:
         b7:74:9a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 23:28:38 2025 by rpki-client