Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3161303a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3161303a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          Yseg3qz9vyqv7JX4OB/yOkkUL66X2B79wFuRZZtsFDI=
Subject key identifier:   F0:BF:26:85:BF:C9:AA:D4:B6:C8:B5:77:5E:F6:95:17:F5:28:E9:39
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       59E9A31B330F131808DA5436455C4D2FE49C3CC3
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3161303a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 01 Aug 2025 15:06:26 +0000
ROA not before:           Fri 01 Aug 2025 15:01:26 +0000
ROA not after:            Fri 31 Jul 2026 15:06:26 +0000
asID:                     272710
IP address blocks:        2804:8774:1a0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 06:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e9:a3:1b:33:0f:13:18:08:da:54:36:45:5c:4d:2f:e4:9c:3c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug  1 15:01:26 2025 GMT
            Not After : Jul 31 15:06:26 2026 GMT
        Subject: CN=F0BF2685BFC9AAD4B6C8B5775EF69517F528E939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:18:46:b1:81:54:6d:d1:2c:18:73:46:ed:ad:
                    f4:b6:d6:a0:93:2b:9e:af:e2:33:59:03:d5:82:5d:
                    2a:b4:76:8a:3d:49:f2:06:0c:71:42:ca:07:de:85:
                    4c:4e:21:6a:c3:32:c5:c3:95:44:2e:cb:02:f8:b9:
                    a9:1a:25:05:bd:c8:e2:f4:f4:6f:8c:f9:42:f9:ec:
                    c5:ee:a3:81:0d:6b:95:a1:af:8b:2c:9c:63:91:64:
                    27:8e:57:1d:bc:3c:c2:ad:e8:09:47:1b:ba:98:d1:
                    fa:8e:3e:2e:86:ac:4f:d0:07:b6:79:2b:1c:b2:72:
                    24:cc:b4:30:d4:61:56:e3:79:04:41:ef:43:fb:d7:
                    59:42:77:04:da:9a:33:14:3a:af:cd:26:19:f8:a9:
                    fb:2e:e0:51:c9:4b:5c:7e:6c:a2:ab:29:ab:4e:b0:
                    5f:a5:ce:26:6f:fd:2f:2a:7e:02:28:56:48:ad:5b:
                    8f:69:01:67:cf:09:20:c8:2b:a9:08:59:38:c1:9e:
                    0e:9e:12:bf:3b:fa:0a:da:e9:b4:13:3c:44:3c:1e:
                    f5:e8:6e:0f:a5:8e:68:83:e8:32:b9:d7:07:6e:85:
                    09:bc:9d:9a:42:47:0f:1f:ac:22:12:e6:46:0e:34:
                    b9:5f:f4:19:ea:d3:f8:46:2d:7f:70:42:72:1e:1a:
                    0c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BF:26:85:BF:C9:AA:D4:B6:C8:B5:77:5E:F6:95:17:F5:28:E9:39
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3161303a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:1a0::/45

    Signature Algorithm: sha256WithRSAEncryption
         6e:4e:16:5c:b5:2b:cd:f5:56:a8:1d:c9:2d:d7:6b:a0:f6:64:
         ab:70:61:d9:ba:a5:68:31:14:d3:e5:87:ea:dc:eb:57:a9:ef:
         4e:0d:23:58:8e:58:6e:d6:78:5a:c1:95:94:d5:03:94:e2:74:
         fa:71:5f:7e:4c:71:02:d3:15:f5:9b:8b:d8:0f:6a:b7:a0:f6:
         f6:5d:3a:7d:50:bd:2f:86:bb:da:d1:78:14:93:cc:a9:c5:8c:
         32:cd:95:60:3c:6e:17:b6:6a:47:78:d7:44:41:79:85:60:94:
         58:4d:50:75:d7:c0:bb:bf:40:85:64:f9:5a:24:09:7c:a8:b7:
         60:7c:d6:99:f8:06:3a:28:dc:77:9b:aa:a3:cb:50:d6:d7:32:
         fc:63:14:03:2a:88:5f:19:a3:93:de:9f:9d:88:8a:7d:e6:58:
         ea:48:c0:4a:2d:11:b3:f0:9f:d3:ba:95:ed:50:bb:aa:88:af:
         42:ba:08:47:e8:3f:72:02:d1:7f:75:47:03:85:b2:ca:9a:18:
         e4:6c:d6:53:0c:42:ec:a1:01:e4:56:b5:37:9f:b4:a3:ab:05:
         f2:1c:58:70:03:62:75:5c:e3:59:4b:7d:52:b8:13:61:3e:94:
         bb:74:f7:41:c9:db:b9:56:df:4b:61:4e:a5:af:35:a1:24:31:
         3e:e9:1f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:19:15 2025 by rpki-client