Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666430303a3a2f34302d3434203d3e20323639313934.roa
File:                     323830343a393165303a666430303a3a2f34302d3434203d3e20323639313934.roa (raw, json)
Hash identifier:          7l6aYr+0Wecd3GhCbRNTT+oCG1r2XOXl8rQBfuRgMD8=
Subject key identifier:   35:46:B0:B1:2D:6B:E3:A2:DF:03:DE:1A:DD:B7:64:40:BF:73:45:20
Certificate issuer:       /CN=048F5080A314D580279F12113E7EC9BCA443B4B7
Certificate serial:       56810FFD508AC1433FAF6D3E9E66B7A7D2EBA501
Authority key identifier: 04:8F:50:80:A3:14:D5:80:27:9F:12:11:3E:7E:C9:BC:A4:43:B4:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048F5080A314D580279F12113E7EC9BCA443B4B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666430303a3a2f34302d3434203d3e20323639313934.roa
Signing time:             Mon 12 May 2025 13:48:57 +0000
ROA not before:           Mon 12 May 2025 13:43:57 +0000
ROA not after:            Mon 11 May 2026 13:48:57 +0000
asID:                     269194
IP address blocks:        2804:91e0:fd00::/40 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/048F5080A314D580279F12113E7EC9BCA443B4B7.crl
                          rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/048F5080A314D580279F12113E7EC9BCA443B4B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048F5080A314D580279F12113E7EC9BCA443B4B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 10:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:81:0f:fd:50:8a:c1:43:3f:af:6d:3e:9e:66:b7:a7:d2:eb:a5:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048F5080A314D580279F12113E7EC9BCA443B4B7
        Validity
            Not Before: May 12 13:43:57 2025 GMT
            Not After : May 11 13:48:57 2026 GMT
        Subject: CN=3546B0B12D6BE3A2DF03DE1ADDB76440BF734520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ae:ad:db:73:fa:1f:0f:84:d1:8f:b3:3a:00:
                    69:e5:4f:4c:b1:65:93:d3:70:43:8b:79:b4:86:44:
                    eb:10:d3:79:0e:41:da:b4:67:77:e5:04:73:6f:1e:
                    55:8a:36:29:f9:55:de:ee:4b:d5:5b:ab:35:68:ac:
                    cf:7b:97:54:23:15:5f:6d:7d:d6:84:08:90:48:f3:
                    93:6c:50:90:93:ed:34:61:4c:55:ba:91:eb:2f:38:
                    cc:81:71:16:cc:4c:b5:3e:a7:4c:25:f9:b5:a2:49:
                    1a:4c:fd:59:65:38:3c:de:a8:5e:62:ba:5e:95:36:
                    ee:65:07:72:e1:a7:a0:31:2b:19:5d:0e:98:88:4d:
                    bd:b1:1b:89:ac:f5:59:26:ac:2c:c2:6a:67:7a:ec:
                    d9:0a:f2:98:a0:83:71:90:46:3b:b8:17:05:49:e6:
                    70:b9:ac:21:7b:5c:e4:93:25:5b:82:25:08:bb:6b:
                    25:2b:a0:bf:11:dd:b3:0c:d7:b2:81:a3:e4:84:4f:
                    24:d5:7c:35:aa:b3:85:7a:a3:f5:d1:3e:59:c1:00:
                    67:37:6a:12:df:05:34:74:e8:64:6b:07:89:40:9b:
                    7d:cc:5d:44:1a:a8:11:63:30:74:35:90:8c:18:2f:
                    9c:a3:cb:da:27:bf:84:79:ee:1e:92:2a:b4:ee:ba:
                    4f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:46:B0:B1:2D:6B:E3:A2:DF:03:DE:1A:DD:B7:64:40:BF:73:45:20
            X509v3 Authority Key Identifier:
                keyid:04:8F:50:80:A3:14:D5:80:27:9F:12:11:3E:7E:C9:BC:A4:43:B4:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/048F5080A314D580279F12113E7EC9BCA443B4B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048F5080A314D580279F12113E7EC9BCA443B4B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666430303a3a2f34302d3434203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91e0:fd00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7c:c8:df:f3:15:bb:ad:79:5a:24:68:09:f3:36:62:a5:e4:89:
         64:ff:96:ca:34:0e:82:8a:cf:ae:0f:23:ba:f3:68:ab:a3:ea:
         47:9c:72:d2:04:1b:20:31:95:f8:a7:58:62:20:ba:0c:a6:c6:
         36:47:e5:9e:e3:18:f1:43:8c:51:df:45:22:3d:0d:f9:06:07:
         ac:6a:57:24:4b:1d:6d:92:30:03:74:7d:1f:b2:43:fa:84:5c:
         c1:96:36:b3:9d:23:ed:77:d6:17:8f:47:26:91:8b:4c:84:27:
         8e:e2:20:49:5c:9a:ba:d5:75:2d:b4:28:d5:6d:a5:dd:96:4d:
         8b:dd:56:6f:c6:7f:74:6f:9d:2f:ea:08:3d:3e:6f:d5:ca:4b:
         bf:ce:9e:a5:fb:90:e1:f2:14:73:d8:c2:73:5a:b5:34:24:42:
         55:e9:68:5b:8d:fc:7d:26:4f:1a:d2:7d:6b:2d:96:d9:3e:f4:
         f3:38:f6:ba:7f:6f:53:58:70:88:c1:66:54:b0:e1:59:56:53:
         89:0e:14:04:0e:a3:bb:f9:73:7e:a0:5f:62:9e:9a:10:55:2e:
         ee:ec:8d:28:07:c4:7b:82:76:5c:1e:a2:ba:26:f6:f8:31:43:
         95:4c:db:45:c9:f4:25:21:20:00:c7:e7:56:24:cf:ff:e8:3d:
         9e:92:ce:36
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUVoEP/VCKwUM/r20+nma3p9LrpQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4RjUwODBBMzE0RDU4MDI3OUYxMjExM0U3RUM5QkNB
NDQzQjRCNzAeFw0yNTA1MTIxMzQzNTdaFw0yNjA1MTExMzQ4NTdaMDMxMTAvBgNV
BAMTKDM1NDZCMEIxMkQ2QkUzQTJERjAzREUxQUREQjc2NDQwQkY3MzQ1MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0rq3bc/ofD4TRj7M6AGnlT0yx
ZZPTcEOLebSGROsQ03kOQdq0Z3flBHNvHlWKNin5Vd7uS9VbqzVorM97l1QjFV9t
fdaECJBI85NsUJCT7TRhTFW6kesvOMyBcRbMTLU+p0wl+bWiSRpM/VllODzeqF5i
ul6VNu5lB3Lhp6AxKxldDpiITb2xG4ms9VkmrCzCamd67NkK8pigg3GQRju4FwVJ
5nC5rCF7XOSTJVuCJQi7ayUroL8R3bMM17KBo+SETyTVfDWqs4V6o/XRPlnBAGc3
ahLfBTR06GRrB4lAm33MXUQaqBFjMHQ1kIwYL5yjy9onv4R57h6SKrTuuk9LAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUNUawsS1r46LfA94a3bdkQL9zRSAwHwYDVR0j
BBgwFoAUBI9QgKMU1YAnnxIRPn7JvKRDtLcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnhpWGc5bWNmMnpCZ0hRdGpyaUViTGVld2FpdUhoMlV3NjVyNFNkVXBh
QjcvMC8wNDhGNTA4MEEzMTRENTgwMjc5RjEyMTEzRTdFQzlCQ0E0NDNCNEI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0OEY1MDgwQTMxNEQ1ODAy
NzlGMTIxMTNFN0VDOUJDQTQ0M0I0QjcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z4aVhnOW1jZjJ6QmdIUXRqcmlFYkxlZXdhaXVIaDJVdzY1cjRTZFVwYUI3LzAv
MzIzODMwMzQzYTM5MzE2NTMwM2E2NjY0MzAzMDNhM2EyZjM0MzAyZDM0MzQyMDNk
M2UyMDMyMzYzOTMxMzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEkeD9MA0GCSqGSIb3DQEBCwUA
A4IBAQB8yN/zFbuteVokaAnzNmKl5Ilk/5bKNA6Cis+uDyO682iro+pHnHLSBBsg
MZX4p1hiILoMpsY2R+We4xjxQ4xR30UiPQ35BgesalckSx1tkjADdH0fskP6hFzB
ljaznSPtd9YXj0cmkYtMhCeO4iBJXJq61XUttCjVbaXdlk2L3VZvxn90b50v6gg9
Pm/Vyku/zp6l+5Dh8hRz2MJzWrU0JEJV6Whbjfx9Jk8a0n1rLZbZPvTzOPa6f29T
WHCIwWZUsOFZVlOJDhQEDqO7+XN+oF9inpoQVS7u7I0oB8R7gnZcHqK6Jvb4MUOV
TNtFyfQlISAAx+dWJM//6D2eks42
-----END CERTIFICATE-----
Generated at Tue May 13 23:09:02 2025 by rpki-client