Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3136303a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3136303a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          dReW/og4K/MzkdZwweTl4lhLwSrdNwnX9MhxAA/KeE4=
Subject key identifier:   00:08:F7:A7:E8:75:92:90:61:C8:A3:97:CA:20:C8:B3:1A:4A:33:0B
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       5D9888A9D2E664FDEE89EE99CE5C5A20866AD2E5
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3136303a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 01 Aug 2025 15:06:26 +0000
ROA not before:           Fri 01 Aug 2025 15:01:26 +0000
ROA not after:            Fri 31 Jul 2026 15:06:26 +0000
asID:                     272710
IP address blocks:        2804:8774:160::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 13:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:98:88:a9:d2:e6:64:fd:ee:89:ee:99:ce:5c:5a:20:86:6a:d2:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug  1 15:01:26 2025 GMT
            Not After : Jul 31 15:06:26 2026 GMT
        Subject: CN=0008F7A7E875929061C8A397CA20C8B31A4A330B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:44:9f:1a:9b:d4:4c:e2:ae:54:1d:25:21:15:
                    72:b8:dd:4d:8f:07:0a:61:62:d9:67:b9:5f:4f:02:
                    8a:85:9d:81:f0:0f:28:b7:a2:5e:27:3f:e9:dc:64:
                    7f:6e:18:78:e4:e8:37:5f:61:00:29:91:2c:c6:71:
                    cb:26:af:96:7c:96:30:08:21:54:e7:b1:50:dd:31:
                    94:84:bc:64:20:bd:76:fe:c2:da:4f:07:1d:1b:c1:
                    4f:fe:5c:04:65:fe:34:1e:a2:d1:22:99:11:47:cf:
                    b4:f2:c7:3d:db:35:b4:01:87:b9:e9:d0:ec:e3:2e:
                    17:c0:36:84:4e:1e:30:98:08:84:87:2e:88:48:6d:
                    54:b3:ae:56:3e:bd:19:8c:1a:bc:57:68:08:57:11:
                    57:7e:df:d8:25:14:7f:8d:39:e1:17:9d:82:7d:fd:
                    12:39:f8:81:75:82:ff:ce:d9:e6:83:c0:9c:20:35:
                    fe:e9:ab:88:c5:bd:dc:cc:ba:55:a1:85:af:ff:87:
                    f3:6b:ba:e1:b2:ab:e5:53:f3:c8:a7:c6:00:f4:82:
                    bc:ec:45:67:82:0a:a0:f7:71:48:87:ab:6f:5b:39:
                    b8:8a:57:50:ac:39:f9:4d:81:22:7e:64:fc:e9:d7:
                    32:0f:de:c9:ab:93:93:c9:39:74:67:7d:b5:10:d3:
                    ad:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:08:F7:A7:E8:75:92:90:61:C8:A3:97:CA:20:C8:B3:1A:4A:33:0B
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3136303a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:160::/45

    Signature Algorithm: sha256WithRSAEncryption
         21:24:9c:b6:16:85:92:81:16:7f:34:ee:08:53:a3:60:9b:fd:
         f2:0a:e9:bf:36:72:dc:3a:78:80:71:11:e9:67:29:a6:8d:21:
         fa:d7:23:cc:23:a6:55:56:a5:b3:03:c2:ad:e2:2e:78:7e:d7:
         bb:a9:27:44:0f:60:51:b4:8f:b2:a9:27:61:21:ca:c9:f2:eb:
         36:f8:af:a0:80:cc:52:72:71:5b:56:2f:24:a3:5d:67:5c:ed:
         eb:a8:08:a2:48:e2:0b:db:9e:aa:b8:8d:b5:f7:cf:0d:c7:a1:
         5f:08:f6:3b:19:e6:3a:10:e6:27:3c:76:d1:1b:58:7f:e7:94:
         0e:54:f0:3b:9c:71:d0:2c:79:8d:a3:ca:ba:aa:e7:c2:0e:dc:
         d1:d8:59:28:59:f1:c9:07:69:f6:f1:9b:1e:9c:d9:5c:a5:c7:
         f6:ed:61:6e:ef:8a:91:4f:8f:e1:e3:ae:25:b1:4c:ad:ff:27:
         66:ba:60:18:af:59:b1:b5:07:5d:3f:31:d0:ea:09:4b:b6:2b:
         ea:46:25:8b:89:6d:90:b4:6c:e6:66:a8:bb:8c:fd:9e:5d:5e:
         55:d8:3f:f3:71:d8:4c:66:fb:54:8f:a9:c1:86:06:5a:57:aa:
         23:47:3d:d9:e9:19:53:05:75:2c:a3:20:13:ee:ee:e2:5d:77:
         0c:2c:31:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:52:07 2025 by rpki-client