Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666430303a3a2f34302d3434203d3e20323734363732.roa
File:                     323830343a393165303a666430303a3a2f34302d3434203d3e20323734363732.roa (raw, json)
Hash identifier:          ysamrxlEbasAxStWm3OCXkX1DzktK3l5INhabM/0ED8=
Subject key identifier:   47:0C:A6:B7:50:4B:5F:F2:2B:19:F6:CF:A2:EE:23:A9:48:88:4F:46
Certificate issuer:       /CN=048F5080A314D580279F12113E7EC9BCA443B4B7
Certificate serial:       388990537DF7567B228D47C1C40728BA5979DC17
Authority key identifier: 04:8F:50:80:A3:14:D5:80:27:9F:12:11:3E:7E:C9:BC:A4:43:B4:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048F5080A314D580279F12113E7EC9BCA443B4B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666430303a3a2f34302d3434203d3e20323734363732.roa
Signing time:             Thu 29 May 2025 17:32:14 +0000
ROA not before:           Thu 29 May 2025 17:27:14 +0000
ROA not after:            Thu 28 May 2026 17:32:14 +0000
asID:                     274672
IP address blocks:        2804:91e0:fd00::/40 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/048F5080A314D580279F12113E7EC9BCA443B4B7.crl
                          rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/048F5080A314D580279F12113E7EC9BCA443B4B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048F5080A314D580279F12113E7EC9BCA443B4B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 11:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:89:90:53:7d:f7:56:7b:22:8d:47:c1:c4:07:28:ba:59:79:dc:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048F5080A314D580279F12113E7EC9BCA443B4B7
        Validity
            Not Before: May 29 17:27:14 2025 GMT
            Not After : May 28 17:32:14 2026 GMT
        Subject: CN=470CA6B7504B5FF22B19F6CFA2EE23A948884F46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fd:df:a8:8c:3e:85:da:7a:fd:12:a1:25:14:
                    be:74:7a:a0:b6:cb:3b:ee:9c:80:6f:49:68:1c:84:
                    39:0e:6c:06:ca:2d:4b:a1:59:6a:7d:1e:fb:f5:e2:
                    0a:8d:10:06:f0:b9:9f:f4:7d:79:33:53:77:53:c7:
                    0e:3d:e4:02:f4:1a:fd:66:35:9a:58:ba:6d:bf:4b:
                    d9:ef:fc:5b:51:b6:c0:b8:0e:9b:50:54:14:5b:70:
                    7e:51:61:8e:c4:c8:22:47:7d:94:03:4a:64:5c:b6:
                    cb:d1:bc:24:b6:08:e4:09:a1:92:2e:e0:85:9b:d5:
                    a1:b9:d8:63:40:f7:6f:7b:98:d9:4e:78:88:a0:16:
                    b1:da:95:f9:55:87:07:70:ed:16:cc:c0:9f:71:5a:
                    04:1a:27:6d:41:5e:63:05:be:37:8c:77:b1:e4:42:
                    78:24:44:6f:0e:88:49:77:a0:58:f8:aa:24:8a:3d:
                    8c:ae:fa:5d:61:60:4c:2f:43:d4:10:6a:44:67:7f:
                    9f:f3:49:98:83:c9:e0:a2:cf:d6:e0:d0:64:42:ce:
                    c7:12:75:38:08:9d:44:3d:9a:43:e0:fb:d6:4e:ce:
                    de:49:68:99:0c:7e:cc:88:70:e2:ad:58:67:b8:dd:
                    3f:18:43:a1:92:4f:d2:75:c4:0c:15:64:d3:78:b5:
                    eb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0C:A6:B7:50:4B:5F:F2:2B:19:F6:CF:A2:EE:23:A9:48:88:4F:46
            X509v3 Authority Key Identifier:
                keyid:04:8F:50:80:A3:14:D5:80:27:9F:12:11:3E:7E:C9:BC:A4:43:B4:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/048F5080A314D580279F12113E7EC9BCA443B4B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048F5080A314D580279F12113E7EC9BCA443B4B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666430303a3a2f34302d3434203d3e20323734363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91e0:fd00::/40

    Signature Algorithm: sha256WithRSAEncryption
         06:4b:f1:71:f9:00:ea:97:74:52:74:e8:50:aa:b4:03:29:61:
         34:73:34:df:e4:61:66:85:15:58:aa:30:60:eb:2e:ac:a2:33:
         5f:f4:10:ec:9e:53:19:41:e1:3a:00:50:60:b9:d5:c4:51:53:
         fd:34:84:cb:91:db:2e:fa:80:8f:bb:95:1e:0b:cf:3d:97:4b:
         6f:ab:7b:44:1b:0e:ba:a6:9e:e1:1e:ba:51:42:19:cc:53:c3:
         3c:a4:6c:7e:93:18:58:b7:58:93:e9:32:96:71:47:73:c5:82:
         76:80:e3:59:71:b2:af:b6:0d:b9:b5:2a:1a:5f:65:f6:77:64:
         9d:d9:35:70:08:78:74:5c:8c:dc:66:b1:bb:f8:bb:a2:1f:70:
         1a:27:e6:ad:42:27:51:6f:22:bb:48:28:a7:cd:c2:72:e3:5e:
         42:bd:f3:7f:f1:5e:08:2c:7e:10:e3:f5:68:2e:94:69:75:1d:
         0d:1d:2b:aa:3f:cd:f3:c6:ef:bd:2e:65:74:3a:49:46:f8:7b:
         af:08:6d:a3:c3:a4:81:d1:af:34:d8:0e:97:f0:a1:a6:17:36:
         09:bc:de:7b:38:45:09:b3:65:63:58:db:a9:2b:22:9c:94:45:
         61:a0:96:b5:e7:31:d5:4d:2c:31:11:66:f9:d2:af:58:7b:07:
         e1:ff:6b:ed
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUOImQU333VnsijUfBxAcoull53BcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4RjUwODBBMzE0RDU4MDI3OUYxMjExM0U3RUM5QkNB
NDQzQjRCNzAeFw0yNTA1MjkxNzI3MTRaFw0yNjA1MjgxNzMyMTRaMDMxMTAvBgNV
BAMTKDQ3MENBNkI3NTA0QjVGRjIyQjE5RjZDRkEyRUUyM0E5NDg4ODRGNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH/d+ojD6F2nr9EqElFL50eqC2
yzvunIBvSWgchDkObAbKLUuhWWp9Hvv14gqNEAbwuZ/0fXkzU3dTxw495AL0Gv1m
NZpYum2/S9nv/FtRtsC4DptQVBRbcH5RYY7EyCJHfZQDSmRctsvRvCS2COQJoZIu
4IWb1aG52GNA9297mNlOeIigFrHalflVhwdw7RbMwJ9xWgQaJ21BXmMFvjeMd7Hk
QngkRG8OiEl3oFj4qiSKPYyu+l1hYEwvQ9QQakRnf5/zSZiDyeCiz9bg0GRCzscS
dTgInUQ9mkPg+9ZOzt5JaJkMfsyIcOKtWGe43T8YQ6GST9J1xAwVZNN4teuLAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQURwymt1BLX/IrGfbPou4jqUiIT0YwHwYDVR0j
BBgwFoAUBI9QgKMU1YAnnxIRPn7JvKRDtLcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnhpWGc5bWNmMnpCZ0hRdGpyaUViTGVld2FpdUhoMlV3NjVyNFNkVXBh
QjcvMC8wNDhGNTA4MEEzMTRENTgwMjc5RjEyMTEzRTdFQzlCQ0E0NDNCNEI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0OEY1MDgwQTMxNEQ1ODAy
NzlGMTIxMTNFN0VDOUJDQTQ0M0I0QjcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z4aVhnOW1jZjJ6QmdIUXRqcmlFYkxlZXdhaXVIaDJVdzY1cjRTZFVwYUI3LzAv
MzIzODMwMzQzYTM5MzE2NTMwM2E2NjY0MzAzMDNhM2EyZjM0MzAyZDM0MzQyMDNk
M2UyMDMyMzczNDM2MzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEkeD9MA0GCSqGSIb3DQEBCwUA
A4IBAQAGS/Fx+QDql3RSdOhQqrQDKWE0czTf5GFmhRVYqjBg6y6sojNf9BDsnlMZ
QeE6AFBgudXEUVP9NITLkdsu+oCPu5UeC889l0tvq3tEGw66pp7hHrpRQhnMU8M8
pGx+kxhYt1iT6TKWcUdzxYJ2gONZcbKvtg25tSoaX2X2d2Sd2TVwCHh0XIzcZrG7
+LuiH3AaJ+atQidRbyK7SCinzcJy415CvfN/8V4ILH4Q4/VoLpRpdR0NHSuqP83z
xu+9LmV0OklG+HuvCG2jw6SB0a802A6X8KGmFzYJvN57OEUJs2VjWNupKyKclEVh
oJa15zHVTSwxEWb50q9Yewfh/2vt
-----END CERTIFICATE-----
Generated at Mon Jun 9 15:11:56 2025 by rpki-client