Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666430303a3a2f34302d3434203d3e20323632353033.roa
File:                     323830343a393165303a666430303a3a2f34302d3434203d3e20323632353033.roa (raw, json)
Hash identifier:          HEs9j3DgTERsKWFAMznYKqLJic755xOHlT3SxtLEuT0=
Subject key identifier:   45:CF:2A:1E:AC:9C:70:22:F2:95:68:52:CB:CB:1B:D7:FC:DB:D0:FC
Certificate issuer:       /CN=048F5080A314D580279F12113E7EC9BCA443B4B7
Certificate serial:       62D38FF7C903A13697B06F89BDEB399F7AECDC12
Authority key identifier: 04:8F:50:80:A3:14:D5:80:27:9F:12:11:3E:7E:C9:BC:A4:43:B4:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048F5080A314D580279F12113E7EC9BCA443B4B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666430303a3a2f34302d3434203d3e20323632353033.roa
Signing time:             Mon 12 May 2025 13:49:39 +0000
ROA not before:           Mon 12 May 2025 13:44:39 +0000
ROA not after:            Mon 11 May 2026 13:49:39 +0000
asID:                     262503
IP address blocks:        2804:91e0:fd00::/40 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/048F5080A314D580279F12113E7EC9BCA443B4B7.crl
                          rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/048F5080A314D580279F12113E7EC9BCA443B4B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048F5080A314D580279F12113E7EC9BCA443B4B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 10:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d3:8f:f7:c9:03:a1:36:97:b0:6f:89:bd:eb:39:9f:7a:ec:dc:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048F5080A314D580279F12113E7EC9BCA443B4B7
        Validity
            Not Before: May 12 13:44:39 2025 GMT
            Not After : May 11 13:49:39 2026 GMT
        Subject: CN=45CF2A1EAC9C7022F2956852CBCB1BD7FCDBD0FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8d:15:db:da:8e:03:6e:0d:f3:ac:59:74:13:
                    31:00:07:54:d3:5b:34:c3:f1:19:a2:1e:76:75:62:
                    68:60:f9:3c:c3:f8:dd:7a:2c:b0:9a:6c:a9:39:a0:
                    72:21:45:1d:b8:85:8c:17:4d:ae:dd:18:b5:66:56:
                    e8:8c:4e:a3:9c:a9:e9:fe:c2:05:94:59:7d:66:f4:
                    00:1f:40:e5:86:32:52:ce:24:ef:5a:40:a7:9c:ab:
                    a9:ff:82:89:dc:6f:be:30:9a:74:0c:d5:8b:04:78:
                    b4:54:f2:3c:a5:6a:b2:ec:eb:00:de:18:df:52:9b:
                    89:19:6c:73:ba:49:30:66:90:5f:4c:8e:a9:4e:de:
                    5f:ee:3b:c2:e6:a0:4e:6a:66:53:b6:af:d4:b0:a0:
                    d6:35:21:27:43:8e:d5:02:e2:e4:40:29:2f:ac:a1:
                    70:47:50:15:7f:a7:f3:55:69:2e:ae:4a:2e:b6:44:
                    88:2e:38:53:f6:5a:ff:03:82:2e:96:8f:39:6a:47:
                    98:2a:9e:1c:b4:00:f7:f1:ba:95:15:fa:56:81:3d:
                    84:db:ed:51:4f:a3:38:df:0f:a4:07:52:5b:97:e1:
                    5d:80:70:69:46:10:fd:28:5e:28:2b:18:9d:31:4a:
                    3b:f4:74:24:27:52:0c:3b:4d:dd:c0:09:08:78:12:
                    ca:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CF:2A:1E:AC:9C:70:22:F2:95:68:52:CB:CB:1B:D7:FC:DB:D0:FC
            X509v3 Authority Key Identifier:
                keyid:04:8F:50:80:A3:14:D5:80:27:9F:12:11:3E:7E:C9:BC:A4:43:B4:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/048F5080A314D580279F12113E7EC9BCA443B4B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048F5080A314D580279F12113E7EC9BCA443B4B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666430303a3a2f34302d3434203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91e0:fd00::/40

    Signature Algorithm: sha256WithRSAEncryption
         62:c9:a7:a1:c2:95:37:69:ca:f6:7b:5d:e2:02:a5:eb:30:20:
         c0:24:07:20:f1:1f:2a:6d:22:67:3d:1c:75:34:d4:68:d9:34:
         54:92:71:5e:53:94:e2:6f:69:88:d9:01:3d:51:38:8a:cb:1a:
         8d:f6:91:b5:3e:a8:f7:4f:da:ea:3f:a9:43:6f:3f:eb:8b:be:
         bd:de:3e:73:09:34:6b:d5:c4:b4:57:b0:b9:d0:2c:52:c3:af:
         1b:af:32:28:9e:42:04:fc:25:52:9b:74:21:1e:c3:6b:2c:2e:
         30:a5:14:43:4c:bf:cd:4b:9e:74:0e:a9:86:d0:cf:bf:dd:65:
         aa:53:73:7b:d6:b8:ff:35:0f:2f:66:b7:75:9f:d5:f2:64:9d:
         a1:12:4c:4f:74:21:c3:12:bf:50:83:66:19:1b:e1:1c:9b:35:
         aa:35:57:c8:2f:32:21:2c:c2:1c:aa:be:42:0c:c9:a3:a8:2c:
         75:06:d2:e6:72:88:64:c5:be:25:55:a9:f5:91:8a:10:07:7b:
         99:4c:b3:eb:ba:d0:64:cb:7a:98:fe:16:57:a8:71:1c:97:7f:
         f1:34:8c:71:0a:5f:18:35:4f:1c:ca:cb:b0:a9:64:f0:a3:a5:
         89:25:6f:dd:e4:68:c2:57:df:d6:af:4d:99:a0:9a:01:52:83:
         2c:67:fb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:28:24 2025 by rpki-client