Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666530303a3a2f34302d3434203d3e20323734363732.roa
File:                     323830343a393165303a666530303a3a2f34302d3434203d3e20323734363732.roa (raw, json)
Hash identifier:          ooDCDvEj73tMFetC7Q+yjgvD2qsGWJahMFa1h1ikq7E=
Subject key identifier:   A7:74:A8:18:EB:37:EB:39:54:B4:BD:F1:85:21:16:54:CF:39:74:AE
Certificate issuer:       /CN=048F5080A314D580279F12113E7EC9BCA443B4B7
Certificate serial:       04B53644E9C704A626F3C3E9C5F5AB79B064A6B2
Authority key identifier: 04:8F:50:80:A3:14:D5:80:27:9F:12:11:3E:7E:C9:BC:A4:43:B4:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048F5080A314D580279F12113E7EC9BCA443B4B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666530303a3a2f34302d3434203d3e20323734363732.roa
Signing time:             Thu 29 May 2025 17:33:11 +0000
ROA not before:           Thu 29 May 2025 17:28:11 +0000
ROA not after:            Thu 28 May 2026 17:33:11 +0000
asID:                     274672
IP address blocks:        2804:91e0:fe00::/40 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/048F5080A314D580279F12113E7EC9BCA443B4B7.crl
                          rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/048F5080A314D580279F12113E7EC9BCA443B4B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048F5080A314D580279F12113E7EC9BCA443B4B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 16:22:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b5:36:44:e9:c7:04:a6:26:f3:c3:e9:c5:f5:ab:79:b0:64:a6:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048F5080A314D580279F12113E7EC9BCA443B4B7
        Validity
            Not Before: May 29 17:28:11 2025 GMT
            Not After : May 28 17:33:11 2026 GMT
        Subject: CN=A774A818EB37EB3954B4BDF185211654CF3974AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d4:5d:5c:d5:e3:81:7c:b4:0c:66:21:02:a2:
                    12:d9:3e:23:3e:6e:c7:26:52:61:c2:60:0e:db:78:
                    db:72:00:a8:9b:08:06:98:93:fd:62:fb:2b:47:36:
                    58:58:b2:ab:b2:6d:dc:0c:b2:a3:2e:d3:7a:a3:27:
                    38:6a:1b:2d:a9:b4:01:c6:9b:dc:0f:6b:34:50:8c:
                    ff:2b:36:2c:ba:af:11:a7:01:9a:21:f6:cc:64:00:
                    cc:ea:60:5e:7e:44:ca:2c:2e:4a:b1:b0:57:e3:02:
                    83:2e:fa:da:9f:45:79:1a:6a:91:c7:81:a7:1a:aa:
                    16:b4:0a:bf:85:5d:d4:70:f3:01:3a:fd:49:ff:92:
                    3f:2f:e8:04:b2:a4:70:a9:47:57:26:06:a7:66:5e:
                    b0:5d:de:3e:2b:7f:b7:23:95:1d:07:5e:81:15:26:
                    d2:fc:4e:52:6b:b8:bf:6e:50:8e:73:fa:ed:11:59:
                    8d:b7:91:b9:1c:9f:12:d5:aa:9b:f2:64:17:54:42:
                    e6:d2:ae:5d:d5:cf:a4:e1:45:ef:c6:2b:7a:93:61:
                    f3:5f:6c:92:c1:bd:c5:ba:aa:87:7a:ec:bc:dd:a8:
                    7f:8a:a7:97:1d:59:40:d7:49:67:ac:87:cf:4f:63:
                    9d:47:10:bb:bc:77:5f:4d:01:5e:e6:06:b8:6b:6a:
                    1b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:74:A8:18:EB:37:EB:39:54:B4:BD:F1:85:21:16:54:CF:39:74:AE
            X509v3 Authority Key Identifier:
                keyid:04:8F:50:80:A3:14:D5:80:27:9F:12:11:3E:7E:C9:BC:A4:43:B4:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/048F5080A314D580279F12113E7EC9BCA443B4B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048F5080A314D580279F12113E7EC9BCA443B4B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666530303a3a2f34302d3434203d3e20323734363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91e0:fe00::/40

    Signature Algorithm: sha256WithRSAEncryption
         2b:79:ef:d8:6f:84:e7:83:72:e3:d8:5d:9c:37:4a:d9:2d:a0:
         19:c4:b6:b5:f0:64:3a:88:c9:95:5b:91:9b:b4:01:6c:de:b3:
         b8:3b:a1:9b:84:9d:48:d4:30:1e:8f:1e:15:37:59:05:1c:e2:
         08:35:63:93:e7:c1:de:b5:fa:38:2a:8b:8f:29:60:3a:b5:0e:
         db:0c:e4:4d:64:46:73:2d:8d:66:1c:2f:99:df:d1:fb:6f:b8:
         41:7c:12:25:9a:37:35:b9:5a:39:e5:47:52:86:a5:3f:2a:8e:
         d8:0d:f0:9e:06:bc:4e:48:42:d5:d9:bb:72:ba:9f:ef:e5:64:
         2e:20:b3:00:8a:81:0c:c6:09:e0:88:1a:8f:5c:9e:82:fc:bf:
         92:3f:af:2d:f5:c0:62:19:22:8f:78:60:dd:d6:39:1a:59:0a:
         9b:2e:9e:34:6c:78:8e:69:ac:2b:dd:db:a0:3d:4e:36:1d:81:
         c7:0f:92:71:c2:c2:58:ff:47:cd:d2:8c:a8:ba:9c:a4:e5:76:
         71:6c:3f:e6:e7:05:29:14:0b:78:1a:be:ac:9f:27:b5:d7:fa:
         59:b3:48:92:54:75:32:9a:38:78:0f:d1:a9:c5:71:fb:88:0d:
         bb:d8:8a:30:bf:da:62:e0:c5:d3:7e:41:aa:9e:ce:a4:2e:3d:
         f3:8e:41:b3
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUBLU2ROnHBKYm88PpxfWrebBkprIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4RjUwODBBMzE0RDU4MDI3OUYxMjExM0U3RUM5QkNB
NDQzQjRCNzAeFw0yNTA1MjkxNzI4MTFaFw0yNjA1MjgxNzMzMTFaMDMxMTAvBgNV
BAMTKEE3NzRBODE4RUIzN0VCMzk1NEI0QkRGMTg1MjExNjU0Q0YzOTc0QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH1F1c1eOBfLQMZiECohLZPiM+
bscmUmHCYA7beNtyAKibCAaYk/1i+ytHNlhYsquybdwMsqMu03qjJzhqGy2ptAHG
m9wPazRQjP8rNiy6rxGnAZoh9sxkAMzqYF5+RMosLkqxsFfjAoMu+tqfRXkaapHH
gacaqha0Cr+FXdRw8wE6/Un/kj8v6ASypHCpR1cmBqdmXrBd3j4rf7cjlR0HXoEV
JtL8TlJruL9uUI5z+u0RWY23kbkcnxLVqpvyZBdUQubSrl3Vz6ThRe/GK3qTYfNf
bJLBvcW6qod67LzdqH+Kp5cdWUDXSWesh89PY51HELu8d19NAV7mBrhrahstAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUp3SoGOs36zlUtL3xhSEWVM85dK4wHwYDVR0j
BBgwFoAUBI9QgKMU1YAnnxIRPn7JvKRDtLcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnhpWGc5bWNmMnpCZ0hRdGpyaUViTGVld2FpdUhoMlV3NjVyNFNkVXBh
QjcvMC8wNDhGNTA4MEEzMTRENTgwMjc5RjEyMTEzRTdFQzlCQ0E0NDNCNEI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0OEY1MDgwQTMxNEQ1ODAy
NzlGMTIxMTNFN0VDOUJDQTQ0M0I0QjcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z4aVhnOW1jZjJ6QmdIUXRqcmlFYkxlZXdhaXVIaDJVdzY1cjRTZFVwYUI3LzAv
MzIzODMwMzQzYTM5MzE2NTMwM2E2NjY1MzAzMDNhM2EyZjM0MzAyZDM0MzQyMDNk
M2UyMDMyMzczNDM2MzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEkeD+MA0GCSqGSIb3DQEBCwUA
A4IBAQAree/Yb4Tng3Lj2F2cN0rZLaAZxLa18GQ6iMmVW5GbtAFs3rO4O6GbhJ1I
1DAejx4VN1kFHOIINWOT58Hetfo4KouPKWA6tQ7bDORNZEZzLY1mHC+Z39H7b7hB
fBIlmjc1uVo55UdShqU/Ko7YDfCeBrxOSELV2btyup/v5WQuILMAioEMxgngiBqP
XJ6C/L+SP68t9cBiGSKPeGDd1jkaWQqbLp40bHiOaawr3dugPU42HYHHD5JxwsJY
/0fN0oyoupyk5XZxbD/m5wUpFAt4Gr6snye11/pZs0iSVHUymjh4D9GpxXH7iA27
2Iowv9pi4MXTfkGqns6kLj3zjkGz
-----END CERTIFICATE-----
Generated at Mon Jun 9 07:27:09 2025 by rpki-client