Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3135383a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3135383a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          F8FS6HTd3C0IOWGjC7m6RfzavAl3sPKV2Y0BTf1CvjM=
Subject key identifier:   1B:DE:C7:12:87:EA:36:FA:C9:A9:B9:EB:F3:A3:76:24:B3:CE:BB:47
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       0D84FE6B03D8309AAE4013E9AB71F7EE8A2FC817
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3135383a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 01 Aug 2025 15:06:27 +0000
ROA not before:           Fri 01 Aug 2025 15:01:27 +0000
ROA not after:            Fri 31 Jul 2026 15:06:27 +0000
asID:                     272710
IP address blocks:        2804:8774:158::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 06:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:84:fe:6b:03:d8:30:9a:ae:40:13:e9:ab:71:f7:ee:8a:2f:c8:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug  1 15:01:27 2025 GMT
            Not After : Jul 31 15:06:27 2026 GMT
        Subject: CN=1BDEC71287EA36FAC9A9B9EBF3A37624B3CEBB47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ce:7a:af:ec:28:05:1d:92:b2:91:2b:e1:25:
                    00:fb:1e:22:75:65:e0:76:91:9f:5a:db:68:67:be:
                    38:4c:39:be:df:cf:64:0d:9b:16:c4:0f:7f:3e:18:
                    63:da:72:9a:29:cb:6d:c2:25:3d:e1:df:06:96:a7:
                    3e:c3:5f:37:91:b5:10:55:7b:e4:6f:cd:2f:84:3b:
                    8a:1a:f9:0d:17:99:bb:eb:31:f7:75:a1:6a:e2:ae:
                    f1:c9:57:09:bd:dd:20:ef:df:88:86:45:b3:25:15:
                    9c:0e:0c:a7:fb:79:ee:7c:71:cc:69:07:b6:58:77:
                    7f:b1:ef:34:ce:57:18:1e:8b:34:a3:7f:e1:e9:4b:
                    7a:dc:69:67:88:0d:d7:fc:b1:c2:bf:4e:d0:73:db:
                    fb:17:d1:27:d3:9f:75:97:33:81:bd:db:12:eb:c3:
                    c7:38:60:c4:73:a0:eb:ed:9e:eb:eb:52:39:b5:d3:
                    0f:0f:0b:cb:c5:35:77:9e:ec:31:18:1e:fb:58:cb:
                    b1:43:15:04:97:dd:16:f6:20:35:55:4f:6e:73:40:
                    bd:f9:f9:ad:99:f5:aa:4c:11:a2:12:94:2e:ec:99:
                    83:ed:1e:cb:a8:b5:ff:e9:f4:e5:e9:fa:c9:b7:69:
                    72:9d:e5:04:cb:00:37:1c:5f:ae:d0:26:94:d4:16:
                    7b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DE:C7:12:87:EA:36:FA:C9:A9:B9:EB:F3:A3:76:24:B3:CE:BB:47
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3135383a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:158::/45

    Signature Algorithm: sha256WithRSAEncryption
         73:34:72:b6:d6:55:0a:68:63:c3:5d:02:25:66:ff:da:fe:09:
         6d:5e:17:a1:c8:65:ab:64:2f:24:b3:1d:46:e2:75:94:1c:af:
         17:f0:b6:60:99:42:da:a3:ec:36:68:35:60:5a:9b:68:03:3f:
         5f:c6:f0:ee:86:e7:1d:85:1f:17:6a:3a:35:d2:0e:dd:42:d2:
         8f:a3:a5:27:11:bf:8f:03:79:c0:9f:d6:36:83:3b:4a:35:e7:
         28:82:5b:8d:8f:18:94:d8:87:97:9b:2a:99:cd:74:8c:65:40:
         7a:65:0e:05:78:97:f3:c0:84:f6:d4:ab:7b:c3:1e:f7:35:19:
         18:65:07:d6:f4:fb:30:19:56:13:47:85:ec:d1:bb:fb:4d:0e:
         ea:be:15:79:f3:6b:fc:83:97:6d:5b:b9:59:c2:fc:07:9d:ed:
         4e:b6:49:d4:0e:f2:d0:4a:c0:f8:c1:b7:63:8d:6b:9e:26:15:
         b4:d5:7d:6f:ab:6b:6e:d5:2f:4f:9f:7d:da:cd:99:69:68:99:
         33:23:c5:2f:8f:38:78:48:91:b8:8a:05:7a:26:56:98:62:4d:
         40:6e:5a:5f:92:63:f1:43:b9:1d:9a:91:26:4e:51:d0:ea:ff:
         83:90:22:b7:69:56:c9:73:e3:94:f5:66:e4:f5:27:f1:aa:16:
         54:95:ea:e0
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUDYT+awPYMJquQBPpq3H37oovyBcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVEMzdFMjJFQjhFNTY2OEYwOTM1NDZFNjM0QjU1QjBB
NzgwRDI0RjAeFw0yNTA4MDExNTAxMjdaFw0yNjA3MzExNTA2MjdaMDMxMTAvBgNV
BAMTKDFCREVDNzEyODdFQTM2RkFDOUE5QjlFQkYzQTM3NjI0QjNDRUJCNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOznqv7CgFHZKykSvhJQD7HiJ1
ZeB2kZ9a22hnvjhMOb7fz2QNmxbED38+GGPacpopy23CJT3h3waWpz7DXzeRtRBV
e+RvzS+EO4oa+Q0XmbvrMfd1oWrirvHJVwm93SDv34iGRbMlFZwODKf7ee58ccxp
B7ZYd3+x7zTOVxgeizSjf+HpS3rcaWeIDdf8scK/TtBz2/sX0SfTn3WXM4G92xLr
w8c4YMRzoOvtnuvrUjm10w8PC8vFNXee7DEYHvtYy7FDFQSX3Rb2IDVVT25zQL35
+a2Z9apMEaISlC7smYPtHsuotf/p9OXp+sm3aXKd5QTLADccX67QJpTUFnsTAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUG97HEofqNvrJqbnr86N2JLPOu0cwHwYDVR0j
BBgwFoAUtdN+IuuOVmjwk1RuY0tVsKeA0k8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkRGU3VTRU1YSnJkV0JHVnFFYmg0WlMxZHQ5bUFQRmRuUkJNVnEydUEz
ZFIvMC9CNUQzN0UyMkVCOEU1NjY4RjA5MzU0NkU2MzRCNTVCMEE3ODBEMjRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1RDM3RTIyRUI4RTU2NjhG
MDkzNTQ2RTYzNEI1NUIwQTc4MEQyNEYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZERlN1U0VNWEpyZFdCR1ZxRWJoNFpTMWR0OW1BUEZkblJCTVZxMnVBM2RSLzAv
MzIzODMwMzQzYTM4MzczNzM0M2EzMTM1MzgzYTNhMmYzNDM1MmQzNDM1MjAzZDNl
MjAzMjM3MzIzNzMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwMoBId0AVgwDQYJKoZIhvcNAQELBQAD
ggEBAHM0crbWVQpoY8NdAiVm/9r+CW1eF6HIZatkLySzHUbidZQcrxfwtmCZQtqj
7DZoNWBam2gDP1/G8O6G5x2FHxdqOjXSDt1C0o+jpScRv48DecCf1jaDO0o15yiC
W42PGJTYh5ebKpnNdIxlQHplDgV4l/PAhPbUq3vDHvc1GRhlB9b0+zAZVhNHhezR
u/tNDuq+FXnza/yDl21buVnC/Aed7U62SdQO8tBKwPjBt2ONa54mFbTVfW+ra27V
L0+ffdrNmWlomTMjxS+POHhIkbiKBXomVphiTUBuWl+SY/FDuR2akSZOUdDq/4OQ
IrdpVslz45T1ZuT1J/GqFlSV6uA=
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:19:13 2025 by rpki-client