Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3230303a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3230303a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          2yQfOWd9G/XYgAWFRwIMF3wvZffNCbUWgy0dA2it1eM=
Subject key identifier:   5A:23:D7:A5:ED:AC:26:57:23:C2:2A:4E:DE:38:2C:1B:1E:96:B7:35
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       13B68351C9B17091A4C04B1692F9CBB73615D260
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3230303a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 01 Aug 2025 15:06:27 +0000
ROA not before:           Fri 01 Aug 2025 15:01:27 +0000
ROA not after:            Fri 31 Jul 2026 15:06:27 +0000
asID:                     272710
IP address blocks:        2804:8774:200::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 13:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b6:83:51:c9:b1:70:91:a4:c0:4b:16:92:f9:cb:b7:36:15:d2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug  1 15:01:27 2025 GMT
            Not After : Jul 31 15:06:27 2026 GMT
        Subject: CN=5A23D7A5EDAC265723C22A4EDE382C1B1E96B735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:77:d9:38:a1:c9:c0:f1:20:ba:01:ea:7d:bf:
                    59:ef:9c:d1:56:68:3d:5f:6c:6c:8d:f8:4b:d7:4e:
                    50:06:31:13:62:24:8c:64:77:a9:b8:7d:9d:2a:f6:
                    c9:01:41:58:88:60:2d:cc:c2:03:65:f6:12:63:f5:
                    63:d9:64:d2:37:b0:34:fb:46:25:ac:86:7a:44:3b:
                    30:0c:7e:51:96:77:9d:2a:89:b3:a1:12:01:37:44:
                    da:af:7e:51:11:95:45:9f:8e:1d:e7:60:25:11:a0:
                    bc:e8:39:74:de:ec:33:2a:e9:c6:2c:e4:0d:2b:bc:
                    95:f7:bf:bd:a3:a8:21:fa:3b:55:33:35:ce:be:ea:
                    cc:f4:05:e3:a0:21:92:1f:3d:8d:1f:14:4b:2b:40:
                    bc:f3:3d:5c:c4:e4:9c:de:23:05:d3:f7:02:15:65:
                    d3:f3:61:8f:b2:58:74:4f:af:27:ec:32:28:af:5f:
                    a2:bd:27:91:0a:93:d9:07:45:ef:d9:93:59:89:a4:
                    71:f5:b5:2b:c6:4c:00:a4:90:73:ac:b4:3a:e7:f5:
                    18:4f:75:2c:95:f3:3d:c3:7d:e5:0d:69:4c:a3:a4:
                    1c:09:11:e5:c0:e4:9c:b2:e3:8f:50:a6:36:22:17:
                    17:ae:e5:74:fe:4c:58:0d:03:ab:cc:cc:10:d5:b8:
                    3b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:23:D7:A5:ED:AC:26:57:23:C2:2A:4E:DE:38:2C:1B:1E:96:B7:35
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3230303a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:200::/45

    Signature Algorithm: sha256WithRSAEncryption
         8b:49:6b:ec:bc:f2:bd:be:8d:ed:a9:c6:4b:4d:60:c5:64:cb:
         d1:dc:dc:8a:ad:0e:be:34:cc:23:de:05:68:ea:d0:2c:18:d6:
         53:4e:03:57:af:2a:b0:cb:1a:ba:f0:43:10:2e:f1:98:6b:51:
         46:7e:3a:2a:c7:b9:5b:66:1e:6b:c7:22:cb:7c:e4:c4:a7:33:
         3c:9c:c6:b5:0a:6f:78:13:2c:da:a9:cf:2b:af:0a:a0:4a:3a:
         39:f7:8d:b5:18:42:a5:c0:eb:2d:be:11:32:13:b4:08:15:d9:
         67:d1:f2:dd:73:a0:90:5d:00:9e:e4:16:7c:75:fe:1a:fa:25:
         a0:04:b7:1f:54:67:b0:09:aa:b7:7b:b5:40:7b:e1:27:a9:75:
         88:42:0a:f1:f4:84:b4:70:56:70:63:8d:c8:c2:92:c3:14:c5:
         a5:99:ea:0e:6d:68:4d:1d:4f:c5:c9:ff:20:9b:c8:d2:56:ba:
         33:ad:1e:9e:06:69:c1:da:05:3b:0a:cc:3a:12:e8:48:fb:3c:
         f1:26:b6:b8:f9:b8:9c:63:89:ea:ce:6a:a1:67:73:33:26:6c:
         01:63:fb:91:b1:93:2d:e7:21:53:d5:54:a8:eb:85:b5:be:8f:
         c7:74:58:f0:a5:98:02:0b:5d:d8:b9:5b:c9:6e:d3:35:e8:31:
         9b:9a:dd:58
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUE7aDUcmxcJGkwEsWkvnLtzYV0mAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVEMzdFMjJFQjhFNTY2OEYwOTM1NDZFNjM0QjU1QjBB
NzgwRDI0RjAeFw0yNTA4MDExNTAxMjdaFw0yNjA3MzExNTA2MjdaMDMxMTAvBgNV
BAMTKDVBMjNEN0E1RURBQzI2NTcyM0MyMkE0RURFMzgyQzFCMUU5NkI3MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrd9k4ocnA8SC6Aep9v1nvnNFW
aD1fbGyN+EvXTlAGMRNiJIxkd6m4fZ0q9skBQViIYC3MwgNl9hJj9WPZZNI3sDT7
RiWshnpEOzAMflGWd50qibOhEgE3RNqvflERlUWfjh3nYCURoLzoOXTe7DMq6cYs
5A0rvJX3v72jqCH6O1UzNc6+6sz0BeOgIZIfPY0fFEsrQLzzPVzE5JzeIwXT9wIV
ZdPzYY+yWHRPryfsMiivX6K9J5EKk9kHRe/Zk1mJpHH1tSvGTACkkHOstDrn9RhP
dSyV8z3DfeUNaUyjpBwJEeXA5Jyy449QpjYiFxeu5XT+TFgNA6vMzBDVuDt5AgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUWiPXpe2sJlcjwipO3jgsGx6WtzUwHwYDVR0j
BBgwFoAUtdN+IuuOVmjwk1RuY0tVsKeA0k8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkRGU3VTRU1YSnJkV0JHVnFFYmg0WlMxZHQ5bUFQRmRuUkJNVnEydUEz
ZFIvMC9CNUQzN0UyMkVCOEU1NjY4RjA5MzU0NkU2MzRCNTVCMEE3ODBEMjRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1RDM3RTIyRUI4RTU2NjhG
MDkzNTQ2RTYzNEI1NUIwQTc4MEQyNEYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZERlN1U0VNWEpyZFdCR1ZxRWJoNFpTMWR0OW1BUEZkblJCTVZxMnVBM2RSLzAv
MzIzODMwMzQzYTM4MzczNzM0M2EzMjMwMzAzYTNhMmYzNDM1MmQzNDM1MjAzZDNl
MjAzMjM3MzIzNzMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwMoBId0AgAwDQYJKoZIhvcNAQELBQAD
ggEBAItJa+y88r2+je2pxktNYMVky9Hc3IqtDr40zCPeBWjq0CwY1lNOA1evKrDL
GrrwQxAu8ZhrUUZ+OirHuVtmHmvHIst85MSnMzycxrUKb3gTLNqpzyuvCqBKOjn3
jbUYQqXA6y2+ETITtAgV2WfR8t1zoJBdAJ7kFnx1/hr6JaAEtx9UZ7AJqrd7tUB7
4SepdYhCCvH0hLRwVnBjjcjCksMUxaWZ6g5taE0dT8XJ/yCbyNJWujOtHp4GacHa
BTsKzDoS6Ej7PPEmtrj5uJxjierOaqFnczMmbAFj+5Gxky3nIVPVVKjrhbW+j8d0
WPClmAILXdi5W8lu0zXoMZua3Vg=
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:37:04 2025 by rpki-client