Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3134383a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3134383a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          s8PIqPvqwFyx8/+hGqhGEktNeAUmNUosHkT67XZeTIM=
Subject key identifier:   B5:62:F1:FE:7E:80:5C:00:51:4E:11:47:44:C1:A3:9D:62:97:EF:B8
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       193AA6399FFFBDBA543B3EB1BD4F969405A941D6
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3134383a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 01 Aug 2025 15:06:27 +0000
ROA not before:           Fri 01 Aug 2025 15:01:27 +0000
ROA not after:            Fri 31 Jul 2026 15:06:27 +0000
asID:                     272710
IP address blocks:        2804:8774:148::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 06:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:3a:a6:39:9f:ff:bd:ba:54:3b:3e:b1:bd:4f:96:94:05:a9:41:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug  1 15:01:27 2025 GMT
            Not After : Jul 31 15:06:27 2026 GMT
        Subject: CN=B562F1FE7E805C00514E114744C1A39D6297EFB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:05:78:ac:ce:d0:05:a3:bd:7b:57:88:68:82:
                    c8:51:f7:cf:2b:bc:8d:bb:16:22:8a:42:cb:ce:15:
                    7c:42:1b:f5:1e:34:04:14:dc:f9:46:13:dd:21:3a:
                    93:c0:25:06:bf:36:02:32:17:ea:c5:c0:c2:71:b6:
                    db:4d:10:7b:ec:64:70:a1:6e:47:86:02:ac:81:4b:
                    6e:37:17:a9:cf:87:61:97:52:cd:64:e9:02:77:c5:
                    18:d9:3b:18:31:5b:54:0c:8e:e7:33:4c:5d:7e:08:
                    4e:0c:4a:f5:03:5a:a7:b0:4b:78:56:b0:45:f8:c2:
                    e8:62:bc:66:e9:25:5b:c4:00:03:9f:67:26:65:b4:
                    40:63:c8:aa:a6:6b:a5:3e:25:9d:c8:59:69:a0:49:
                    ea:8b:7f:bc:e8:fe:4a:55:0c:6e:65:a1:ff:b7:66:
                    a2:4f:f4:41:2d:95:5e:3d:1f:d7:23:83:af:26:ae:
                    69:f6:39:b3:d1:dd:b7:b7:70:a0:00:e6:66:ed:cc:
                    e5:56:24:51:c1:c8:18:e2:eb:52:af:69:8a:1e:ed:
                    f6:92:da:27:bb:f5:25:dc:b0:bc:38:e1:39:b4:8c:
                    fe:b3:e1:a1:a9:cf:49:54:7b:db:d1:ab:8b:87:17:
                    a0:c2:92:01:fc:62:43:26:13:de:31:76:22:ad:41:
                    58:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:62:F1:FE:7E:80:5C:00:51:4E:11:47:44:C1:A3:9D:62:97:EF:B8
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3134383a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:148::/45

    Signature Algorithm: sha256WithRSAEncryption
         2c:e7:b3:b8:d4:45:16:cc:a6:4b:96:a0:b7:86:05:b5:75:94:
         6a:b8:60:3c:c9:40:1d:0b:a1:67:72:5b:3a:79:9d:f6:45:14:
         aa:28:0c:14:b6:79:b7:55:c5:cc:09:0c:ec:20:13:40:0d:96:
         85:86:4b:60:62:2c:2c:2f:5a:53:9a:c6:e9:c8:1b:20:24:3b:
         67:a9:ca:50:7b:d3:68:10:d5:cd:c1:24:bd:f6:18:f4:3c:34:
         a6:cd:13:73:2d:8d:24:83:ab:eb:a8:b9:56:71:46:49:aa:2a:
         90:09:1a:e4:0a:23:00:b0:1c:c1:e8:2c:7b:68:24:44:7a:9f:
         44:b5:42:ae:2a:2e:79:6b:f0:85:1e:00:16:76:a4:ea:20:22:
         9b:d9:e5:c5:4d:92:58:bb:7e:60:97:fa:3e:8b:86:1c:24:3b:
         9c:28:4a:66:21:6b:83:97:33:c1:5a:e3:ff:1d:c6:ed:3c:62:
         ed:7c:43:6c:39:2f:80:43:75:ed:4a:9d:68:95:49:7e:a7:e6:
         42:b8:56:ba:bf:0d:89:e0:5d:8c:d6:ff:4e:8a:3f:a1:80:a8:
         32:11:b2:19:84:9d:31:1b:bd:c2:96:89:a1:a4:41:91:42:c4:
         a4:5a:a9:05:1c:e4:01:14:09:de:57:38:6b:dd:0f:e6:eb:0d:
         ec:39:39:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:18:30 2025 by rpki-client