Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3130383a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3130383a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          iKvmu22WxYQ1H4lzfNHbepyI/pWx6djl8f/REc4dmnQ=
Subject key identifier:   52:25:91:A8:3E:48:AD:1B:97:1A:CD:C4:B4:DF:A9:9C:BC:A2:66:FD
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       3309D988FB6B859F52EFA8EE2B8B6CA9435AD09B
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3130383a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 01 Aug 2025 15:06:26 +0000
ROA not before:           Fri 01 Aug 2025 15:01:26 +0000
ROA not after:            Fri 31 Jul 2026 15:06:26 +0000
asID:                     272710
IP address blocks:        2804:8774:108::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 06:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:09:d9:88:fb:6b:85:9f:52:ef:a8:ee:2b:8b:6c:a9:43:5a:d0:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug  1 15:01:26 2025 GMT
            Not After : Jul 31 15:06:26 2026 GMT
        Subject: CN=522591A83E48AD1B971ACDC4B4DFA99CBCA266FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c7:76:dc:c1:4c:fc:86:08:4d:40:52:a0:33:
                    0b:47:9d:9f:08:af:ae:37:96:5b:d8:1a:aa:c0:8a:
                    04:b7:48:b4:dd:61:e9:56:5e:0d:18:ef:ff:db:74:
                    01:5f:ff:3b:4e:57:c2:c6:70:88:bd:35:10:db:87:
                    f5:a2:8c:f5:2a:de:2d:0d:7a:5e:54:ca:c8:85:5f:
                    73:e9:fc:ec:25:c4:76:ac:03:f0:ad:e1:eb:b8:fe:
                    16:92:be:12:36:40:f2:21:06:5b:47:43:72:9a:0c:
                    b3:ef:dc:84:a3:f0:fa:6a:83:b1:1f:db:4f:fc:af:
                    69:09:6d:6e:68:97:6d:e2:9b:e9:21:c6:e2:b9:b3:
                    2a:bb:c0:ec:7e:53:7b:a2:f8:cd:2b:71:54:de:e6:
                    1f:51:a9:6d:6d:c1:03:84:4a:af:3c:28:be:3e:af:
                    b6:a1:32:ee:0c:3f:60:43:6f:fa:9f:ec:90:30:14:
                    82:5d:55:41:6c:75:a4:94:16:33:93:9a:3f:6b:ea:
                    5f:95:27:42:35:71:3a:49:79:b0:e5:d5:b2:09:ef:
                    65:0d:c3:8f:3f:47:30:9a:42:3e:0d:fc:14:49:3e:
                    d8:e5:d7:2a:9f:3a:de:40:8b:b2:fe:d5:f8:8f:73:
                    f0:cb:55:ff:2a:68:48:18:02:9a:3d:c0:53:e4:df:
                    c1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:25:91:A8:3E:48:AD:1B:97:1A:CD:C4:B4:DF:A9:9C:BC:A2:66:FD
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3130383a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:108::/45

    Signature Algorithm: sha256WithRSAEncryption
         2e:ee:93:f2:ee:b4:ac:91:eb:37:78:2f:6e:10:a2:c1:86:2d:
         52:e3:3d:d0:77:e7:88:21:1a:83:1c:be:bf:6a:ae:b8:06:23:
         ce:94:ca:b8:2e:25:f9:6e:58:38:00:bc:ee:b6:23:4d:c9:34:
         2d:3d:31:fd:13:21:c9:c0:76:31:64:b0:c6:bf:54:4f:65:ae:
         4d:49:fb:00:18:ca:76:9c:f6:03:f3:ca:66:58:52:60:48:1b:
         65:e3:64:74:0a:96:cb:f9:b6:b3:85:da:f3:22:d7:c1:46:59:
         5a:89:29:de:cc:55:25:3c:33:15:8c:2a:53:f7:9a:21:26:5f:
         59:8f:a3:38:70:11:da:c9:aa:de:9d:6f:1c:4c:92:21:2b:17:
         ab:bf:36:34:e5:75:53:03:3f:bc:3a:09:98:36:ff:ef:a9:67:
         29:16:05:67:32:a6:3b:2a:53:ef:73:a5:e0:8d:1e:c2:9e:bc:
         77:e2:22:d4:21:a7:46:34:97:be:62:93:68:32:4a:10:ea:05:
         c8:e7:3f:29:f3:b3:00:92:d7:31:a5:5f:87:b3:e4:4f:0c:71:
         c1:60:14:fd:f1:7f:57:95:dc:5b:fe:0d:8c:48:fc:09:20:fa:
         06:23:ce:aa:c4:fd:64:c9:d2:ee:66:bd:f2:7e:fd:77:1f:83:
         96:e3:ad:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:20:02 2025 by rpki-client