Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3139303a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3139303a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          zwlt87HIn9Uq/Gegu8W3AISq0QpKv/WNKfGn0+rleOE=
Subject key identifier:   94:3E:F0:58:AB:11:E2:56:D1:E3:BE:9A:72:3D:21:F8:18:25:DB:15
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       7D248DE98568FA392226402B8CEC8D2A70317556
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3139303a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 01 Aug 2025 15:06:27 +0000
ROA not before:           Fri 01 Aug 2025 15:01:27 +0000
ROA not after:            Fri 31 Jul 2026 15:06:27 +0000
asID:                     272710
IP address blocks:        2804:8774:190::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 06:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:24:8d:e9:85:68:fa:39:22:26:40:2b:8c:ec:8d:2a:70:31:75:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug  1 15:01:27 2025 GMT
            Not After : Jul 31 15:06:27 2026 GMT
        Subject: CN=943EF058AB11E256D1E3BE9A723D21F81825DB15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5d:8e:44:82:23:44:dc:8e:6f:c4:15:a4:f9:
                    60:38:1b:3e:1b:07:00:85:90:56:eb:4d:be:7b:e5:
                    55:ec:89:0f:01:93:3b:55:08:c5:97:ef:6e:3c:a3:
                    23:83:83:60:49:c7:9a:e5:5e:8b:cf:64:9c:aa:f9:
                    63:db:75:1f:78:73:3e:1a:9e:e1:bd:f6:1e:39:82:
                    d4:c1:84:1f:c3:63:bc:c6:b5:fa:e2:a4:61:69:0d:
                    d6:9b:30:b1:b0:09:cc:6a:d6:1f:58:3e:62:51:81:
                    c4:9d:db:f8:2b:52:90:6e:7e:e3:e1:a2:b1:e5:fa:
                    49:05:d8:9c:c6:c5:ed:da:72:26:8a:49:44:20:47:
                    48:bf:69:e4:ec:a3:16:bb:d1:86:34:53:6f:31:2e:
                    7d:a9:13:b1:6a:f7:73:75:91:56:63:aa:14:9a:3c:
                    fe:23:bf:c4:ba:ca:0c:60:6c:7c:94:3f:b9:e4:2c:
                    a0:8d:9b:1d:4f:b0:44:df:18:d9:f6:19:dc:5b:16:
                    2e:c0:6d:f0:79:ab:ac:62:1f:ec:27:bd:73:7f:7e:
                    15:75:0b:78:b0:5a:db:d9:b8:5c:c3:fa:16:1b:49:
                    a0:64:2c:23:71:70:0a:2e:6a:f3:7b:47:ac:b5:9b:
                    8d:46:0f:9f:f2:64:fe:38:e9:51:ee:51:5c:23:fe:
                    2e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:3E:F0:58:AB:11:E2:56:D1:E3:BE:9A:72:3D:21:F8:18:25:DB:15
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3139303a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:190::/45

    Signature Algorithm: sha256WithRSAEncryption
         99:b5:46:11:fd:93:10:12:58:12:ba:c0:7a:17:17:69:bf:d5:
         a3:5c:39:04:d9:3b:50:8f:cd:28:22:c2:9f:12:16:e0:9d:92:
         00:04:bf:03:98:2f:bc:5a:54:b4:97:6c:49:a8:25:d4:b7:2f:
         f8:de:3c:43:9f:40:ab:d4:6f:b4:4b:55:2f:13:59:14:f2:de:
         df:25:5c:29:75:23:7a:0e:8f:94:62:2e:6a:03:f4:9b:b2:80:
         99:38:07:52:e0:bc:65:c0:2d:fc:b2:ba:8f:00:95:95:50:94:
         27:dc:cd:84:65:b7:3c:68:81:f5:7b:92:b4:46:d3:ae:4b:c5:
         1e:25:ba:f7:50:c3:21:51:ff:80:d4:61:28:f9:2f:ed:ea:a8:
         63:60:7b:14:94:bf:bc:14:d9:31:02:c6:ae:76:22:b0:2f:b1:
         57:4a:f4:62:4b:b0:66:9e:bc:26:f8:85:e5:f6:3f:81:28:1f:
         50:19:fc:40:75:34:25:35:49:f6:b2:be:81:7e:0f:79:de:82:
         09:76:df:b4:db:f4:14:ae:dd:6d:2c:31:54:7c:62:e9:db:bd:
         5d:66:d2:68:89:97:df:d9:08:12:2c:8d:c6:ff:64:09:d9:62:
         3b:30:13:ae:2f:60:a0:b0:79:b6:e5:9b:4a:47:84:6e:11:ed:
         83:99:9f:fb
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUfSSN6YVo+jkiJkArjOyNKnAxdVYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVEMzdFMjJFQjhFNTY2OEYwOTM1NDZFNjM0QjU1QjBB
NzgwRDI0RjAeFw0yNTA4MDExNTAxMjdaFw0yNjA3MzExNTA2MjdaMDMxMTAvBgNV
BAMTKDk0M0VGMDU4QUIxMUUyNTZEMUUzQkU5QTcyM0QyMUY4MTgyNURCMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjXY5EgiNE3I5vxBWk+WA4Gz4b
BwCFkFbrTb575VXsiQ8BkztVCMWX7248oyODg2BJx5rlXovPZJyq+WPbdR94cz4a
nuG99h45gtTBhB/DY7zGtfripGFpDdabMLGwCcxq1h9YPmJRgcSd2/grUpBufuPh
orHl+kkF2JzGxe3aciaKSUQgR0i/aeTsoxa70YY0U28xLn2pE7Fq93N1kVZjqhSa
PP4jv8S6ygxgbHyUP7nkLKCNmx1PsETfGNn2GdxbFi7AbfB5q6xiH+wnvXN/fhV1
C3iwWtvZuFzD+hYbSaBkLCNxcAouavN7R6y1m41GD5/yZP446VHuUVwj/i4XAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUlD7wWKsR4lbR476acj0h+Bgl2xUwHwYDVR0j
BBgwFoAUtdN+IuuOVmjwk1RuY0tVsKeA0k8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkRGU3VTRU1YSnJkV0JHVnFFYmg0WlMxZHQ5bUFQRmRuUkJNVnEydUEz
ZFIvMC9CNUQzN0UyMkVCOEU1NjY4RjA5MzU0NkU2MzRCNTVCMEE3ODBEMjRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1RDM3RTIyRUI4RTU2NjhG
MDkzNTQ2RTYzNEI1NUIwQTc4MEQyNEYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZERlN1U0VNWEpyZFdCR1ZxRWJoNFpTMWR0OW1BUEZkblJCTVZxMnVBM2RSLzAv
MzIzODMwMzQzYTM4MzczNzM0M2EzMTM5MzAzYTNhMmYzNDM1MmQzNDM1MjAzZDNl
MjAzMjM3MzIzNzMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwMoBId0AZAwDQYJKoZIhvcNAQELBQAD
ggEBAJm1RhH9kxASWBK6wHoXF2m/1aNcOQTZO1CPzSgiwp8SFuCdkgAEvwOYL7xa
VLSXbEmoJdS3L/jePEOfQKvUb7RLVS8TWRTy3t8lXCl1I3oOj5RiLmoD9JuygJk4
B1LgvGXALfyyuo8AlZVQlCfczYRltzxogfV7krRG065LxR4luvdQwyFR/4DUYSj5
L+3qqGNgexSUv7wU2TECxq52IrAvsVdK9GJLsGaevCb4heX2P4EoH1AZ/EB1NCU1
SfayvoF+D3neggl237Tb9BSu3W0sMVR8YunbvV1m0miJl9/ZCBIsjcb/ZAnZYjsw
E64vYKCwebblm0pHhG4R7YOZn/s=
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:23:37 2025 by rpki-client