Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3139383a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3139383a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          ZVNtC4Mafd2CdvgId21GJr28lo9cwYZAUSwp2C+gHyk=
Subject key identifier:   C9:7A:59:33:6A:2D:61:E0:31:8C:42:39:A1:95:2B:E8:04:AD:90:30
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       73DB7C95C5F9B003C19B1898E9B2A43758A30FA2
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3139383a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 01 Aug 2025 15:06:26 +0000
ROA not before:           Fri 01 Aug 2025 15:01:26 +0000
ROA not after:            Fri 31 Jul 2026 15:06:26 +0000
asID:                     272710
IP address blocks:        2804:8774:198::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 06:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:db:7c:95:c5:f9:b0:03:c1:9b:18:98:e9:b2:a4:37:58:a3:0f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug  1 15:01:26 2025 GMT
            Not After : Jul 31 15:06:26 2026 GMT
        Subject: CN=C97A59336A2D61E0318C4239A1952BE804AD9030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bf:26:86:6d:03:f9:29:fc:fd:26:a7:b5:59:
                    7d:99:b8:09:3a:b3:5f:01:e0:32:79:03:73:3c:51:
                    75:9e:64:69:1f:f6:a9:43:86:09:ae:72:17:2e:d0:
                    d7:9a:a5:3d:fe:36:2c:8a:22:22:44:57:52:df:b8:
                    fb:d9:a8:29:11:03:03:66:6c:ef:7f:5b:ca:3e:23:
                    bb:82:e1:a2:73:a4:cd:7e:12:46:1f:fd:3b:c2:0c:
                    20:b5:de:f5:de:d7:97:f0:ef:f3:42:86:3a:50:3b:
                    7b:65:44:cf:74:cb:cf:37:86:61:a3:f6:d5:a5:e9:
                    93:47:e3:58:9e:95:df:56:ca:8e:84:99:4a:93:bc:
                    20:45:04:13:ea:d4:19:84:d4:dc:77:77:15:df:23:
                    d7:e7:54:d1:9c:8f:d3:cd:4d:6c:88:4a:c6:63:aa:
                    23:b8:53:8b:17:21:e9:ac:08:c2:53:d0:9e:90:8e:
                    50:96:e4:9c:6c:32:03:5d:33:2e:a7:6d:4e:27:d8:
                    77:c9:0e:94:c7:dc:71:21:e6:aa:55:89:a1:fc:79:
                    cf:df:f4:15:b2:30:d8:f2:f6:66:d4:5b:9b:04:ae:
                    5b:c9:24:d4:3e:d6:3d:af:04:02:60:f0:a2:af:c5:
                    16:5d:90:c7:f5:99:8e:97:a4:f5:1b:97:dc:db:de:
                    e1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7A:59:33:6A:2D:61:E0:31:8C:42:39:A1:95:2B:E8:04:AD:90:30
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3139383a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:198::/45

    Signature Algorithm: sha256WithRSAEncryption
         52:df:94:04:38:4c:9a:71:63:ae:9c:ec:22:34:88:5a:d9:2f:
         de:21:95:16:d4:8b:43:1b:1e:ee:62:74:02:b5:f1:d8:a3:34:
         1d:5e:79:7c:33:fd:b5:60:52:b7:f5:00:67:a3:2f:10:fa:5b:
         12:c2:60:5d:cd:0a:64:5f:05:2e:c0:71:74:63:e3:b0:41:13:
         82:4d:97:4b:99:1f:1f:97:3c:84:44:b5:b2:6a:08:a4:8e:d1:
         fd:9b:9a:70:fa:41:ed:41:cd:60:05:a8:b8:52:e5:fa:90:42:
         45:79:41:30:6d:c0:e9:16:42:0b:2c:58:65:0d:59:c6:fc:52:
         cf:c6:20:b3:e4:4f:dd:ba:16:f5:51:e4:60:89:ea:fb:1a:92:
         91:35:97:eb:2a:36:2f:f8:24:96:68:c8:e5:49:d3:56:ae:09:
         3b:52:47:b8:00:da:d8:33:cf:f4:c5:73:8e:64:37:28:b8:94:
         66:fa:5e:dc:af:a8:ab:4a:71:2c:81:5b:d5:12:0c:4e:26:fa:
         45:29:51:dc:0c:58:ae:27:ec:0d:65:26:38:32:e8:b8:aa:d1:
         59:86:cb:a9:a9:cd:f6:4f:59:01:c2:65:1c:54:5d:d5:1b:81:
         96:d1:94:87:f9:83:d3:65:b0:89:65:59:e8:2b:6a:a6:ff:1b:
         02:78:17:04
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUc9t8lcX5sAPBmxiY6bKkN1ijD6IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVEMzdFMjJFQjhFNTY2OEYwOTM1NDZFNjM0QjU1QjBB
NzgwRDI0RjAeFw0yNTA4MDExNTAxMjZaFw0yNjA3MzExNTA2MjZaMDMxMTAvBgNV
BAMTKEM5N0E1OTMzNkEyRDYxRTAzMThDNDIzOUExOTUyQkU4MDRBRDkwMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6vyaGbQP5Kfz9Jqe1WX2ZuAk6
s18B4DJ5A3M8UXWeZGkf9qlDhgmuchcu0NeapT3+NiyKIiJEV1LfuPvZqCkRAwNm
bO9/W8o+I7uC4aJzpM1+EkYf/TvCDCC13vXe15fw7/NChjpQO3tlRM90y883hmGj
9tWl6ZNH41ield9Wyo6EmUqTvCBFBBPq1BmE1Nx3dxXfI9fnVNGcj9PNTWyISsZj
qiO4U4sXIemsCMJT0J6QjlCW5JxsMgNdMy6nbU4n2HfJDpTH3HEh5qpViaH8ec/f
9BWyMNjy9mbUW5sErlvJJNQ+1j2vBAJg8KKvxRZdkMf1mY6XpPUbl9zb3uE9AgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUyXpZM2otYeAxjEI5oZUr6AStkDAwHwYDVR0j
BBgwFoAUtdN+IuuOVmjwk1RuY0tVsKeA0k8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkRGU3VTRU1YSnJkV0JHVnFFYmg0WlMxZHQ5bUFQRmRuUkJNVnEydUEz
ZFIvMC9CNUQzN0UyMkVCOEU1NjY4RjA5MzU0NkU2MzRCNTVCMEE3ODBEMjRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1RDM3RTIyRUI4RTU2NjhG
MDkzNTQ2RTYzNEI1NUIwQTc4MEQyNEYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZERlN1U0VNWEpyZFdCR1ZxRWJoNFpTMWR0OW1BUEZkblJCTVZxMnVBM2RSLzAv
MzIzODMwMzQzYTM4MzczNzM0M2EzMTM5MzgzYTNhMmYzNDM1MmQzNDM1MjAzZDNl
MjAzMjM3MzIzNzMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwMoBId0AZgwDQYJKoZIhvcNAQELBQAD
ggEBAFLflAQ4TJpxY66c7CI0iFrZL94hlRbUi0MbHu5idAK18dijNB1eeXwz/bVg
Urf1AGejLxD6WxLCYF3NCmRfBS7AcXRj47BBE4JNl0uZHx+XPIREtbJqCKSO0f2b
mnD6Qe1BzWAFqLhS5fqQQkV5QTBtwOkWQgssWGUNWcb8Us/GILPkT926FvVR5GCJ
6vsakpE1l+sqNi/4JJZoyOVJ01auCTtSR7gA2tgzz/TFc45kNyi4lGb6XtyvqKtK
cSyBW9USDE4m+kUpUdwMWK4n7A1lJjgy6Liq0VmGy6mpzfZPWQHCZRxUXdUbgZbR
lIf5g9NlsIllWegraqb/GwJ4FwQ=
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:24:19 2025 by rpki-client