Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/323830343a326539343a3a2f33322d3438203d3e203532373830.roa
File:                     323830343a326539343a3a2f33322d3438203d3e203532373830.roa (raw, json)
Hash identifier:          8+yqs7RUJpX2yT4UiSP3rmmWsxJekUpVgjcbLKRliog=
Subject key identifier:   E3:C2:AE:C8:A5:7A:3D:9B:B1:EC:49:07:EF:01:D5:48:C3:FD:D5:B5
Certificate issuer:       /CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
Certificate serial:       47A15361E89CBB08C87FCDA7B77C6240D5A449C1
Authority key identifier: 75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/323830343a326539343a3a2f33322d3438203d3e203532373830.roa
Signing time:             Mon 22 Sep 2025 19:36:38 +0000
ROA not before:           Mon 22 Sep 2025 19:31:38 +0000
ROA not after:            Mon 21 Sep 2026 19:36:38 +0000
asID:                     52780
IP address blocks:        2804:2e94::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl
                          rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 18:10:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a1:53:61:e8:9c:bb:08:c8:7f:cd:a7:b7:7c:62:40:d5:a4:49:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
        Validity
            Not Before: Sep 22 19:31:38 2025 GMT
            Not After : Sep 21 19:36:38 2026 GMT
        Subject: CN=E3C2AEC8A57A3D9BB1EC4907EF01D548C3FDD5B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5a:f3:f0:98:97:4a:78:b9:46:97:1a:47:0e:
                    50:57:df:e7:53:ba:4e:5d:79:05:67:1e:9a:fd:a1:
                    64:30:aa:f8:44:0e:f2:14:9d:d8:d3:45:0b:cf:1e:
                    ef:84:0f:a3:2e:bd:17:8e:5e:3c:32:05:97:5e:23:
                    24:4d:3d:92:a3:50:6c:79:42:b6:6c:e8:55:cd:80:
                    9d:1c:f0:42:0b:67:f3:19:06:70:77:05:89:94:d0:
                    4d:6a:12:0b:2e:aa:ee:57:a0:aa:82:94:39:17:e9:
                    1b:58:b5:64:57:36:6a:f3:65:70:e4:13:92:95:51:
                    53:63:05:87:46:39:e7:30:a1:78:c0:d0:b8:1a:9c:
                    c9:dd:5e:8b:41:21:f3:85:55:06:d1:0e:fb:39:66:
                    4d:bf:90:22:1c:c8:a7:1b:a0:61:52:e3:2e:b9:33:
                    e4:6f:b7:f3:70:02:b0:33:f7:86:22:bb:cf:c0:01:
                    06:8d:69:5a:32:dd:40:bf:70:4f:e4:be:cd:4d:b4:
                    7a:aa:06:b4:c6:66:fb:88:5a:61:94:d2:31:71:c8:
                    fe:85:ba:7d:26:38:91:4e:e0:e1:26:f2:05:41:d7:
                    4d:36:89:ed:b5:3a:d4:b0:37:5b:32:21:3d:3e:e0:
                    85:96:b6:b5:08:33:7b:40:62:c0:de:01:4b:18:64:
                    87:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C2:AE:C8:A5:7A:3D:9B:B1:EC:49:07:EF:01:D5:48:C3:FD:D5:B5
            X509v3 Authority Key Identifier:
                keyid:75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/323830343a326539343a3a2f33322d3438203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e94::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:14:f6:9c:04:22:9c:f5:ec:a3:e2:a0:e6:4a:48:a4:83:82:
         ad:63:dd:fd:ea:fe:9c:cd:7e:a7:9b:74:34:4d:3a:18:95:c7:
         f4:c9:8b:ac:0e:e7:14:2b:63:ea:ab:2b:f2:ac:1f:6e:58:99:
         ff:d7:94:8f:a7:42:44:fa:7b:38:6c:61:79:5f:5e:82:fc:86:
         b3:ba:f6:31:65:a3:0b:52:70:bd:55:f4:2f:ef:19:c2:c7:d2:
         d2:cf:b0:2a:55:5e:a2:3c:d9:92:51:1c:1e:e2:f7:dc:c8:7d:
         53:5c:ef:28:97:0e:36:8a:57:0e:14:b0:95:1b:b5:28:3f:60:
         63:e6:7a:b7:26:05:c1:5b:b0:1c:af:4f:e1:b9:07:1f:89:60:
         5c:ea:92:4c:b9:05:f9:95:f5:88:4e:c2:27:4a:50:66:04:9e:
         cc:d7:09:c5:9f:02:59:1a:fd:f9:63:f4:1d:45:8b:2c:4b:18:
         a2:b2:bd:08:0d:e5:48:7e:78:b8:9c:fc:fb:7a:7a:a6:fc:c2:
         12:b2:04:76:05:83:eb:af:96:32:18:50:06:b2:88:f3:21:7c:
         c5:08:5f:dd:2f:44:d1:cd:5a:64:91:46:32:59:d3:b9:b8:8e:
         8a:df:08:1b:9a:a2:af:52:69:16:dd:a7:66:c4:90:22:9a:c2:
         6f:d9:5a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:00:43 2025 by rpki-client