Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3135303a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3135303a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          bcJuo/njqSli3ea0A6MPNzPfxjQ9m7TwMy1gwUiaEgg=
Subject key identifier:   F9:EC:40:98:07:7F:59:25:F3:9A:03:DF:78:53:FE:45:E8:E5:58:5D
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       3B173D19DC765F85B142C2537B66CC031F19B70A
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3135303a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 01 Aug 2025 15:06:25 +0000
ROA not before:           Fri 01 Aug 2025 15:01:25 +0000
ROA not after:            Fri 31 Jul 2026 15:06:25 +0000
asID:                     272710
IP address blocks:        2804:8774:150::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 06:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:17:3d:19:dc:76:5f:85:b1:42:c2:53:7b:66:cc:03:1f:19:b7:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug  1 15:01:25 2025 GMT
            Not After : Jul 31 15:06:25 2026 GMT
        Subject: CN=F9EC4098077F5925F39A03DF7853FE45E8E5585D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a2:47:57:15:64:57:bc:04:92:22:03:7f:48:
                    16:d6:0d:f0:2a:c8:91:d3:6a:98:b9:3e:f6:44:cb:
                    c4:4a:97:88:7f:a1:54:f2:70:3c:3e:b8:e2:9f:5e:
                    ae:59:1c:9e:c9:92:71:9f:45:35:1c:71:ad:03:92:
                    9f:28:79:28:7e:86:0d:af:1a:ed:9a:a7:49:d0:c4:
                    fb:a5:3e:c9:d4:40:66:f1:24:53:5e:20:0a:8b:9f:
                    cd:9d:69:ed:9f:75:8e:2c:68:6c:dc:83:be:5e:9f:
                    a5:e5:0d:e3:71:34:6b:f4:cc:e8:55:5d:75:dc:5e:
                    4e:33:ce:18:a5:1d:72:af:7e:83:6b:ee:87:72:7d:
                    0e:1a:bf:04:6b:98:35:36:36:34:88:c2:cf:8b:a5:
                    ac:ef:07:42:3c:72:1b:14:7e:62:16:0d:c3:0d:05:
                    11:3f:1e:d9:a9:f8:39:00:71:99:72:05:ff:b8:9b:
                    75:ca:2a:72:70:57:36:5c:49:5e:4f:35:de:29:b8:
                    69:d3:42:19:d1:78:7a:13:4b:1f:0a:e3:8d:a6:1c:
                    ac:e4:e4:f2:90:e8:19:72:3d:59:11:6e:89:2a:eb:
                    9f:7f:ec:fc:f1:25:35:ff:49:49:6b:99:36:54:22:
                    b1:48:67:23:fb:91:56:63:6f:f9:57:a4:a1:e5:b9:
                    63:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EC:40:98:07:7F:59:25:F3:9A:03:DF:78:53:FE:45:E8:E5:58:5D
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3135303a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:150::/45

    Signature Algorithm: sha256WithRSAEncryption
         53:ea:b4:12:96:88:69:0a:36:bf:a6:78:07:ae:3e:b2:11:a9:
         fd:7a:34:f0:46:c1:f3:8d:be:2d:e5:cc:07:f8:29:51:09:29:
         c5:3f:ee:fb:b2:92:da:c0:ef:4b:d6:2b:0d:05:42:3a:e9:fc:
         0d:99:df:32:f7:91:ec:72:a6:bc:56:17:bc:59:fb:78:1c:0e:
         d4:d7:c4:1a:04:7e:c2:b4:19:b9:ab:92:e9:68:0e:f3:ae:5d:
         e3:08:1a:65:77:b3:4c:e7:a1:12:8a:5c:d3:62:43:06:c9:ce:
         d1:e5:9e:71:49:f1:90:24:a3:1d:4e:7f:ba:10:ab:ff:17:c4:
         2a:fa:98:eb:71:26:56:52:74:80:2f:f9:6c:06:bc:f3:c7:ce:
         53:25:12:c4:0c:2d:80:4b:58:92:d3:0a:b5:aa:df:c6:99:6d:
         b9:75:84:4f:74:f1:68:cb:d4:19:b9:86:6a:ad:1c:48:46:43:
         b8:d2:1e:78:85:a5:88:95:d5:d5:e9:0b:13:c8:a9:35:23:42:
         b7:57:23:f7:8f:01:a4:d3:35:70:2e:bf:fa:99:ad:b7:76:b9:
         d8:af:99:ff:65:1d:36:65:bf:32:11:0b:4c:d1:09:f6:c9:47:
         2b:ff:ad:2a:45:02:b5:20:19:26:0f:82:7d:b6:a6:63:75:c4:
         ad:3e:2e:92
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUOxc9Gdx2X4WxQsJTe2bMAx8ZtwowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVEMzdFMjJFQjhFNTY2OEYwOTM1NDZFNjM0QjU1QjBB
NzgwRDI0RjAeFw0yNTA4MDExNTAxMjVaFw0yNjA3MzExNTA2MjVaMDMxMTAvBgNV
BAMTKEY5RUM0MDk4MDc3RjU5MjVGMzlBMDNERjc4NTNGRTQ1RThFNTU4NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCokdXFWRXvASSIgN/SBbWDfAq
yJHTapi5PvZEy8RKl4h/oVTycDw+uOKfXq5ZHJ7JknGfRTUcca0Dkp8oeSh+hg2v
Gu2ap0nQxPulPsnUQGbxJFNeIAqLn82dae2fdY4saGzcg75en6XlDeNxNGv0zOhV
XXXcXk4zzhilHXKvfoNr7odyfQ4avwRrmDU2NjSIws+LpazvB0I8chsUfmIWDcMN
BRE/Htmp+DkAcZlyBf+4m3XKKnJwVzZcSV5PNd4puGnTQhnReHoTSx8K442mHKzk
5PKQ6BlyPVkRbokq659/7PzxJTX/SUlrmTZUIrFIZyP7kVZjb/lXpKHluWPRAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQU+exAmAd/WSXzmgPfeFP+RejlWF0wHwYDVR0j
BBgwFoAUtdN+IuuOVmjwk1RuY0tVsKeA0k8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkRGU3VTRU1YSnJkV0JHVnFFYmg0WlMxZHQ5bUFQRmRuUkJNVnEydUEz
ZFIvMC9CNUQzN0UyMkVCOEU1NjY4RjA5MzU0NkU2MzRCNTVCMEE3ODBEMjRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1RDM3RTIyRUI4RTU2NjhG
MDkzNTQ2RTYzNEI1NUIwQTc4MEQyNEYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZERlN1U0VNWEpyZFdCR1ZxRWJoNFpTMWR0OW1BUEZkblJCTVZxMnVBM2RSLzAv
MzIzODMwMzQzYTM4MzczNzM0M2EzMTM1MzAzYTNhMmYzNDM1MmQzNDM1MjAzZDNl
MjAzMjM3MzIzNzMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwMoBId0AVAwDQYJKoZIhvcNAQELBQAD
ggEBAFPqtBKWiGkKNr+meAeuPrIRqf16NPBGwfONvi3lzAf4KVEJKcU/7vuyktrA
70vWKw0FQjrp/A2Z3zL3kexyprxWF7xZ+3gcDtTXxBoEfsK0GbmrkuloDvOuXeMI
GmV3s0znoRKKXNNiQwbJztHlnnFJ8ZAkox1Of7oQq/8XxCr6mOtxJlZSdIAv+WwG
vPPHzlMlEsQMLYBLWJLTCrWq38aZbbl1hE908WjL1Bm5hmqtHEhGQ7jSHniFpYiV
1dXpCxPIqTUjQrdXI/ePAaTTNXAuv/qZrbd2udivmf9lHTZlvzIRC0zRCfbJRyv/
rSpFArUgGSYPgn22pmN1xK0+LpI=
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:18:22 2025 by rpki-client