Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48UQk1DpVCnVRAHM9zjkJDZJkJhmabUUUwSBQ41fo2fa/0/323830343a63303a3a2f33322d3438203d3e203533313030.roa
File:                     323830343a63303a3a2f33322d3438203d3e203533313030.roa (raw, json)
Hash identifier:          ldUffX1G1bNquYRc7UvBquI214BFR+WbHZYYRYhmzW8=
Subject key identifier:   B9:AF:17:D6:96:03:A7:65:71:47:04:70:D4:3F:A1:62:24:AB:34:3C
Certificate issuer:       /CN=FB00CA0598A73490EF0DBF449C1D7858B1B875CF
Certificate serial:       79355E63E4667832DB12E5EB662277762951A6B5
Authority key identifier: FB:00:CA:05:98:A7:34:90:EF:0D:BF:44:9C:1D:78:58:B1:B8:75:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB00CA0598A73490EF0DBF449C1D7858B1B875CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48UQk1DpVCnVRAHM9zjkJDZJkJhmabUUUwSBQ41fo2fa/0/323830343a63303a3a2f33322d3438203d3e203533313030.roa
Signing time:             Wed 07 May 2025 19:31:21 +0000
ROA not before:           Wed 07 May 2025 19:26:21 +0000
ROA not after:            Wed 06 May 2026 19:31:21 +0000
asID:                     53100
IP address blocks:        2804:c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48UQk1DpVCnVRAHM9zjkJDZJkJhmabUUUwSBQ41fo2fa/0/FB00CA0598A73490EF0DBF449C1D7858B1B875CF.crl
                          rsync://rpki-repo.registro.br/repo/48UQk1DpVCnVRAHM9zjkJDZJkJhmabUUUwSBQ41fo2fa/0/FB00CA0598A73490EF0DBF449C1D7858B1B875CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB00CA0598A73490EF0DBF449C1D7858B1B875CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 13:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:35:5e:63:e4:66:78:32:db:12:e5:eb:66:22:77:76:29:51:a6:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB00CA0598A73490EF0DBF449C1D7858B1B875CF
        Validity
            Not Before: May  7 19:26:21 2025 GMT
            Not After : May  6 19:31:21 2026 GMT
        Subject: CN=B9AF17D69603A76571470470D43FA16224AB343C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:69:3a:b8:8a:c9:ed:73:99:b1:ec:be:de:25:
                    b4:27:75:0b:a2:a9:77:94:f9:7d:4d:7f:3e:da:fd:
                    6a:51:a2:46:f7:f5:8f:e5:30:25:2f:e5:0a:5e:16:
                    87:9d:3f:e3:89:a1:6f:ac:ce:e8:ff:8d:26:2e:73:
                    ab:41:7f:b6:68:60:ce:80:bb:07:35:fe:43:e0:28:
                    51:af:2c:cc:6c:bc:a7:11:24:02:3f:eb:d8:73:17:
                    e5:cd:c0:7e:63:3b:b2:5f:20:58:c3:e1:2f:80:a9:
                    93:ef:83:48:1f:50:dd:2b:8c:c3:9c:29:bd:4d:9b:
                    e4:0a:50:02:83:5d:9f:66:b6:b2:9b:a3:05:7e:b3:
                    34:c5:1e:d0:15:3f:c3:d2:30:4b:1c:10:91:d0:1f:
                    6b:93:74:e4:30:42:17:8f:ac:30:ec:f4:c2:ac:c8:
                    19:b2:2c:8a:cd:03:e9:dd:05:1b:c7:4c:fe:15:b6:
                    a0:4f:c7:bd:51:c4:ad:ea:b1:6d:c2:45:8f:1a:2d:
                    81:f5:60:dd:88:e3:91:b0:35:5b:43:25:b2:21:22:
                    35:11:11:93:a4:44:63:6b:9d:bf:db:5c:bd:51:ea:
                    23:2d:a7:ae:25:35:cb:6d:50:9a:63:7e:34:05:c5:
                    87:0f:b8:02:50:09:a9:71:45:e1:e6:83:6e:6e:80:
                    cb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AF:17:D6:96:03:A7:65:71:47:04:70:D4:3F:A1:62:24:AB:34:3C
            X509v3 Authority Key Identifier:
                keyid:FB:00:CA:05:98:A7:34:90:EF:0D:BF:44:9C:1D:78:58:B1:B8:75:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48UQk1DpVCnVRAHM9zjkJDZJkJhmabUUUwSBQ41fo2fa/0/FB00CA0598A73490EF0DBF449C1D7858B1B875CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB00CA0598A73490EF0DBF449C1D7858B1B875CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48UQk1DpVCnVRAHM9zjkJDZJkJhmabUUUwSBQ41fo2fa/0/323830343a63303a3a2f33322d3438203d3e203533313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:2d:ab:34:0c:56:87:bb:28:65:26:38:85:01:de:2f:45:fa:
         de:17:04:5b:c8:86:c8:c1:74:b7:9a:7f:7e:7e:f9:27:56:24:
         50:fc:af:8f:40:6e:e5:18:1b:0d:f9:a5:b3:77:aa:1c:e1:45:
         9f:76:10:30:b3:71:76:82:49:9a:3d:80:fe:22:32:b7:f6:d1:
         5a:59:50:85:c2:63:7a:69:ab:ef:b8:ac:1c:a1:cd:8d:e6:5e:
         34:ba:19:3b:0c:be:a3:e8:70:54:fa:72:a5:63:e4:b8:41:a6:
         02:b9:a5:22:99:71:1e:49:b9:9f:95:7c:56:ed:87:4b:8c:c8:
         45:7d:80:4b:ab:91:05:6e:6e:2a:22:04:6c:6e:63:44:0d:89:
         8e:3f:9e:48:f9:f3:79:bd:8c:2a:b4:b8:f0:c0:54:76:c5:ac:
         0b:3f:85:cc:6a:e4:65:9e:10:6c:0d:43:b5:4a:47:e2:96:db:
         6f:1e:65:15:8d:ea:1f:0d:44:3b:48:a1:d8:2e:e3:cd:81:b8:
         06:bb:37:dd:d9:d2:25:68:9c:93:7f:34:bd:77:76:32:2d:ff:
         62:88:5a:24:01:01:50:e0:b8:b5:aa:ac:a2:ed:88:5f:c1:ea:
         11:22:c5:41:6c:e4:33:2a:ba:95:4f:b3:e8:5f:ea:10:52:77:
         ee:1d:35:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 19:58:17 2025 by rpki-client