Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3138383a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3138383a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          Un4JIbsgnFHTLkzYqt0Js1UIUKn2yqVzKTjQhaPMPxk=
Subject key identifier:   52:E8:2D:2A:9E:0F:A5:BA:3B:B1:DA:68:FB:39:AA:6B:64:96:67:4E
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       2EBE4C65CD35F8AD1E3B4005A4702016CCA4EE73
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3138383a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 01 Aug 2025 15:06:27 +0000
ROA not before:           Fri 01 Aug 2025 15:01:27 +0000
ROA not after:            Fri 31 Jul 2026 15:06:27 +0000
asID:                     272710
IP address blocks:        2804:8774:188::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 06:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:be:4c:65:cd:35:f8:ad:1e:3b:40:05:a4:70:20:16:cc:a4:ee:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug  1 15:01:27 2025 GMT
            Not After : Jul 31 15:06:27 2026 GMT
        Subject: CN=52E82D2A9E0FA5BA3BB1DA68FB39AA6B6496674E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4f:d8:04:cc:eb:50:ce:f0:97:ca:d4:c5:43:
                    e9:d7:a9:81:a2:28:6a:e7:6c:e9:e6:77:be:22:5d:
                    2d:bf:46:2a:ad:5a:c7:c2:46:5e:3c:04:4d:5f:b0:
                    50:32:76:8d:52:a5:59:51:83:56:aa:81:d1:ee:95:
                    e3:f8:d0:c0:2e:33:07:7c:64:16:0d:13:04:86:0b:
                    b1:da:46:ff:c1:08:53:c1:ac:5b:36:b6:a4:1c:25:
                    fc:46:e1:31:b8:06:d1:b2:17:f7:fc:2f:8f:f9:47:
                    e6:d2:c9:8a:93:ed:71:e6:4a:b3:0f:85:51:4c:c4:
                    58:e2:1e:ff:eb:57:02:ef:32:70:fa:77:62:ef:6d:
                    e5:f2:1b:75:3a:dc:ef:c0:f9:39:95:d2:48:a7:18:
                    91:5a:fa:9b:f6:8f:58:d9:1a:7b:a2:3b:a3:05:80:
                    d8:40:d2:77:3c:91:b2:89:50:fb:b1:c3:c5:f5:84:
                    bf:18:ab:4d:ac:36:46:d6:ad:cc:68:49:34:1c:54:
                    d3:b7:31:f8:8d:4f:59:fd:a7:d8:9a:9a:99:be:b8:
                    a5:5f:45:bc:ce:10:5f:ea:e5:a0:33:20:e7:58:f9:
                    12:54:b3:54:cf:ce:63:cc:69:14:6c:79:31:1e:f8:
                    09:15:57:b6:c8:9f:0c:aa:12:75:94:74:8f:f5:d5:
                    7c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E8:2D:2A:9E:0F:A5:BA:3B:B1:DA:68:FB:39:AA:6B:64:96:67:4E
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3138383a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:188::/45

    Signature Algorithm: sha256WithRSAEncryption
         5b:18:3d:1e:c2:6b:31:79:be:5a:9f:a0:ec:39:ef:4d:a4:cf:
         31:88:05:14:4b:7c:0a:9e:15:5e:88:99:23:27:f8:c7:3c:b3:
         08:00:d9:6d:8f:92:b5:3c:5c:4f:f6:99:e1:16:43:e4:63:80:
         9f:42:3c:17:5d:dc:e3:3f:c5:27:bd:e2:82:53:70:54:a0:53:
         be:d6:4f:1a:77:b5:f5:b8:25:30:00:75:ed:ea:34:ff:f9:d6:
         73:28:0a:8e:82:79:89:74:bd:f3:1e:62:75:25:f3:2c:d3:5f:
         ea:d2:90:ba:bf:2a:03:c1:11:a7:28:9f:5b:5b:f3:13:98:45:
         08:8f:00:95:8f:c8:10:05:62:94:f0:31:b4:f9:1c:54:39:3e:
         48:2d:76:1e:ad:21:9a:98:84:fc:f0:29:42:db:60:ff:71:e2:
         33:2c:48:ab:4c:1a:da:bc:55:28:ee:cd:7d:10:52:a4:c9:c1:
         07:e6:a2:7f:f4:d4:ea:95:54:08:ef:ac:80:69:bd:6d:e2:61:
         37:67:f7:be:97:fe:0c:1f:61:85:85:85:99:ac:33:74:43:fd:
         18:07:4b:36:0b:07:07:db:6d:9f:23:95:e1:77:b2:5c:1a:38:
         a8:a4:53:63:93:b8:be:07:57:9c:49:dc:35:a2:97:db:ca:e0:
         a9:7f:c1:ed
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIULr5MZc01+K0eO0AFpHAgFsyk7nMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVEMzdFMjJFQjhFNTY2OEYwOTM1NDZFNjM0QjU1QjBB
NzgwRDI0RjAeFw0yNTA4MDExNTAxMjdaFw0yNjA3MzExNTA2MjdaMDMxMTAvBgNV
BAMTKDUyRTgyRDJBOUUwRkE1QkEzQkIxREE2OEZCMzlBQTZCNjQ5NjY3NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMT9gEzOtQzvCXytTFQ+nXqYGi
KGrnbOnmd74iXS2/RiqtWsfCRl48BE1fsFAydo1SpVlRg1aqgdHuleP40MAuMwd8
ZBYNEwSGC7HaRv/BCFPBrFs2tqQcJfxG4TG4BtGyF/f8L4/5R+bSyYqT7XHmSrMP
hVFMxFjiHv/rVwLvMnD6d2LvbeXyG3U63O/A+TmV0kinGJFa+pv2j1jZGnuiO6MF
gNhA0nc8kbKJUPuxw8X1hL8Yq02sNkbWrcxoSTQcVNO3MfiNT1n9p9iampm+uKVf
RbzOEF/q5aAzIOdY+RJUs1TPzmPMaRRseTEe+AkVV7bInwyqEnWUdI/11XwjAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUUugtKp4Ppbo7sdpo+zmqa2SWZ04wHwYDVR0j
BBgwFoAUtdN+IuuOVmjwk1RuY0tVsKeA0k8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkRGU3VTRU1YSnJkV0JHVnFFYmg0WlMxZHQ5bUFQRmRuUkJNVnEydUEz
ZFIvMC9CNUQzN0UyMkVCOEU1NjY4RjA5MzU0NkU2MzRCNTVCMEE3ODBEMjRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1RDM3RTIyRUI4RTU2NjhG
MDkzNTQ2RTYzNEI1NUIwQTc4MEQyNEYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZERlN1U0VNWEpyZFdCR1ZxRWJoNFpTMWR0OW1BUEZkblJCTVZxMnVBM2RSLzAv
MzIzODMwMzQzYTM4MzczNzM0M2EzMTM4MzgzYTNhMmYzNDM1MmQzNDM1MjAzZDNl
MjAzMjM3MzIzNzMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwMoBId0AYgwDQYJKoZIhvcNAQELBQAD
ggEBAFsYPR7CazF5vlqfoOw5702kzzGIBRRLfAqeFV6ImSMn+Mc8swgA2W2PkrU8
XE/2meEWQ+RjgJ9CPBdd3OM/xSe94oJTcFSgU77WTxp3tfW4JTAAde3qNP/51nMo
Co6CeYl0vfMeYnUl8yzTX+rSkLq/KgPBEacon1tb8xOYRQiPAJWPyBAFYpTwMbT5
HFQ5Pkgtdh6tIZqYhPzwKULbYP9x4jMsSKtMGtq8VSjuzX0QUqTJwQfmon/01OqV
VAjvrIBpvW3iYTdn976X/gwfYYWFhZmsM3RD/RgHSzYLBwfbbZ8jleF3slwaOKik
U2OTuL4HV5xJ3DWil9vK4Kl/we0=
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:20:04 2025 by rpki-client