Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/323830343a326539343a383430303a3a2f34302d3430203d3e203532373830.roa
File:                     323830343a326539343a383430303a3a2f34302d3430203d3e203532373830.roa (raw, json)
Hash identifier:          kVwnvfX1oC/DGnM+1TJgsZVRY7f3xlyfO/HZwKDGnBw=
Subject key identifier:   AC:B9:61:A7:9B:3E:62:0A:32:19:34:70:C6:CA:98:00:A0:02:0C:3A
Certificate issuer:       /CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
Certificate serial:       0C658461529A23A21F0C6F0F2B0E034680A344D6
Authority key identifier: 75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/323830343a326539343a383430303a3a2f34302d3430203d3e203532373830.roa
Signing time:             Thu 12 Jun 2025 14:11:16 +0000
ROA not before:           Thu 12 Jun 2025 14:06:16 +0000
ROA not after:            Thu 11 Jun 2026 14:11:16 +0000
asID:                     52780
IP address blocks:        2804:2e94:8400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl
                          rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 00:13:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:65:84:61:52:9a:23:a2:1f:0c:6f:0f:2b:0e:03:46:80:a3:44:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
        Validity
            Not Before: Jun 12 14:06:16 2025 GMT
            Not After : Jun 11 14:11:16 2026 GMT
        Subject: CN=ACB961A79B3E620A32193470C6CA9800A0020C3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ae:d6:61:72:96:f5:f0:33:e8:1a:e3:62:35:
                    89:42:d9:72:40:9e:81:df:50:9b:97:5d:81:f2:e4:
                    05:6f:12:88:f9:13:c0:ed:bc:4d:06:d6:94:88:19:
                    11:12:b9:b7:ac:6d:bd:8f:0f:ac:69:05:e7:17:7e:
                    31:49:5c:1b:f9:bf:61:33:1a:0e:e1:ec:eb:41:ca:
                    5b:b6:54:4e:50:b7:4f:a9:11:4b:95:47:92:c0:ee:
                    96:67:83:94:2e:ca:58:ac:64:8f:15:f0:cf:fd:f1:
                    03:44:e3:b0:c7:9c:fe:64:5c:e9:a1:45:8c:7c:d0:
                    53:8b:9b:9b:8d:36:a2:e4:10:66:e9:74:0c:0d:2f:
                    fb:a3:1f:7d:c6:e4:93:87:bf:83:3a:80:68:de:d5:
                    20:ac:52:37:a0:b5:23:19:78:d3:51:60:2d:95:e0:
                    e0:89:39:29:0a:22:1a:ed:23:65:bf:e5:11:cf:b3:
                    04:9a:2c:d8:80:00:5e:5c:96:f7:64:8f:ab:08:13:
                    eb:6b:2e:de:d2:fe:c6:d0:bf:e6:a5:3b:8f:ca:4b:
                    47:67:79:35:1c:31:4e:68:7c:51:ed:9a:fd:fd:4e:
                    7c:76:77:60:18:57:3f:a9:15:e3:b3:43:6c:e0:fe:
                    6b:14:7e:bf:f2:71:fc:68:4a:82:40:ea:c1:e7:b5:
                    15:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B9:61:A7:9B:3E:62:0A:32:19:34:70:C6:CA:98:00:A0:02:0C:3A
            X509v3 Authority Key Identifier:
                keyid:75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/323830343a326539343a383430303a3a2f34302d3430203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e94:8400::/40

    Signature Algorithm: sha256WithRSAEncryption
         86:d5:55:9a:cd:39:f7:c0:83:17:8b:e8:6c:22:6b:83:4e:15:
         93:5d:13:e0:32:04:2e:c7:4f:8a:2c:2e:95:0a:56:66:c2:b4:
         c2:b5:82:bd:61:83:11:e2:15:81:8c:2d:8c:5b:9f:4e:fe:30:
         82:99:c2:ce:9a:86:7e:03:d7:5c:3f:de:9e:8f:cb:61:01:98:
         c9:38:6a:b8:3b:9d:ce:a5:c1:57:65:f3:ab:b6:c5:51:95:f8:
         d5:c0:ed:7e:4d:cf:77:4e:ec:10:be:06:02:1f:61:0f:29:44:
         1f:0e:b5:00:2b:f9:af:30:59:9e:55:b6:65:93:91:6b:84:c4:
         c9:f5:b4:26:89:33:cb:da:a1:57:1e:d9:a2:85:40:32:08:e4:
         0d:2b:50:61:9f:c8:e2:55:ba:77:93:ab:c6:4c:54:f4:29:ee:
         7b:75:22:38:5d:c3:9d:16:79:6c:8d:d2:8b:9d:8e:05:ec:e3:
         5f:15:f4:c4:c4:83:55:1b:1c:d8:aa:21:ba:96:56:79:4e:eb:
         d6:eb:42:b1:cd:ac:ff:69:2d:ef:78:c3:d7:f5:ce:f1:8c:b9:
         6b:aa:8a:14:35:2d:90:0c:c0:8e:9c:cd:62:56:36:ac:ce:5a:
         44:b7:b8:72:e5:e9:61:6d:7e:30:ff:04:e7:16:7c:65:9f:ba:
         d8:a5:87:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 06:11:13 2025 by rpki-client