Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3231303a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3231303a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          bJ6QJzgK1BogbV6NMqBKHjPeIvWMzlDgmV9B9V8egQo=
Subject key identifier:   BB:28:55:E7:58:7F:BF:1B:0B:9C:73:A9:AC:5B:59:BB:55:03:CB:82
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       1EC75FFCCFBB82FA5CCF14F86A5F19850424B045
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3231303a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 01 Aug 2025 15:06:27 +0000
ROA not before:           Fri 01 Aug 2025 15:01:27 +0000
ROA not after:            Fri 31 Jul 2026 15:06:27 +0000
asID:                     272710
IP address blocks:        2804:8774:210::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 02:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c7:5f:fc:cf:bb:82:fa:5c:cf:14:f8:6a:5f:19:85:04:24:b0:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug  1 15:01:27 2025 GMT
            Not After : Jul 31 15:06:27 2026 GMT
        Subject: CN=BB2855E7587FBF1B0B9C73A9AC5B59BB5503CB82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6c:2a:44:e1:c9:1e:f7:bd:28:71:bc:9b:03:
                    9e:67:af:4b:c9:f0:5d:40:45:01:e0:f7:c2:77:e3:
                    4d:ca:15:84:45:38:e3:0d:d1:cc:49:7c:55:01:5e:
                    87:03:90:26:6b:5d:b7:48:57:84:5e:28:c4:77:e2:
                    a6:1b:18:df:19:30:dc:bf:08:34:23:78:52:77:63:
                    f3:b6:01:76:4e:b1:70:f7:a1:02:b6:02:23:0d:e4:
                    1a:dd:00:82:02:7e:e9:65:8d:4e:7d:06:06:57:a9:
                    16:1c:03:51:ea:30:c7:64:59:98:03:6e:05:97:1f:
                    29:8e:c3:1e:1d:9f:2a:27:0f:3e:f1:b6:eb:79:a7:
                    a8:b0:8b:d2:13:0b:ce:27:55:d5:c3:79:36:e3:e1:
                    02:e4:01:db:b6:84:d2:fd:1c:8f:13:57:a5:22:6c:
                    13:eb:cf:8e:21:0a:9d:f7:45:21:c7:30:ea:22:61:
                    ce:aa:fb:d2:b7:ed:d0:a7:de:f9:b2:33:2a:51:12:
                    a6:b4:50:ea:24:c8:87:e6:a9:87:6a:dc:63:93:9b:
                    58:34:2a:63:0e:8d:cf:10:44:82:52:97:ff:0c:e8:
                    d3:67:e3:d4:c4:74:22:4f:82:7b:d7:c1:e8:2b:b7:
                    c5:a8:77:ba:15:f9:d0:c0:43:19:fe:fc:d5:b8:de:
                    6d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:28:55:E7:58:7F:BF:1B:0B:9C:73:A9:AC:5B:59:BB:55:03:CB:82
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3231303a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:210::/45

    Signature Algorithm: sha256WithRSAEncryption
         7e:f9:03:9b:e0:cf:fe:f6:02:92:bc:62:e8:7a:0d:a1:11:47:
         1f:34:55:1b:82:0b:e1:a5:5f:4b:39:42:a8:87:1b:1b:02:b5:
         5c:66:09:ce:99:e3:94:99:26:e7:0d:53:06:48:21:15:bb:07:
         5d:bb:6c:1c:a5:6f:26:f3:50:2a:1b:c7:ae:0d:e7:48:50:f2:
         da:0c:b8:55:80:df:6b:5f:57:55:01:84:72:d8:9c:5c:a7:fb:
         0f:21:b0:a2:43:6b:75:a7:71:74:e5:3f:81:76:77:80:c3:3a:
         5b:28:fa:15:b4:d0:fc:93:02:0d:42:1a:99:e0:12:2b:cd:82:
         6f:48:4d:2a:c8:31:43:1c:23:68:c9:f0:fd:ef:c2:97:54:47:
         0d:04:aa:9a:f8:fb:bf:51:e0:c3:26:37:ba:30:6d:c6:4e:67:
         89:c8:f4:b6:2c:db:a8:a3:f6:f2:99:cd:c5:d9:f7:d5:23:b2:
         be:ec:fa:ff:d3:bb:ea:0c:2e:99:6b:34:1d:11:bd:29:69:1d:
         f9:84:14:8e:27:8e:21:95:d2:8a:7d:52:a0:be:4f:ce:fa:ce:
         38:6d:51:0b:38:a5:d1:03:6f:37:e5:65:2b:93:10:14:1f:5b:
         93:ac:5d:1b:80:dc:c4:aa:ba:7f:07:26:a5:16:9b:a1:ca:21:
         08:53:8f:fa
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUHsdf/M+7gvpczxT4al8ZhQQksEUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVEMzdFMjJFQjhFNTY2OEYwOTM1NDZFNjM0QjU1QjBB
NzgwRDI0RjAeFw0yNTA4MDExNTAxMjdaFw0yNjA3MzExNTA2MjdaMDMxMTAvBgNV
BAMTKEJCMjg1NUU3NTg3RkJGMUIwQjlDNzNBOUFDNUI1OUJCNTUwM0NCODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4bCpE4cke970ocbybA55nr0vJ
8F1ARQHg98J3403KFYRFOOMN0cxJfFUBXocDkCZrXbdIV4ReKMR34qYbGN8ZMNy/
CDQjeFJ3Y/O2AXZOsXD3oQK2AiMN5BrdAIICfulljU59BgZXqRYcA1HqMMdkWZgD
bgWXHymOwx4dnyonDz7xtut5p6iwi9ITC84nVdXDeTbj4QLkAdu2hNL9HI8TV6Ui
bBPrz44hCp33RSHHMOoiYc6q+9K37dCn3vmyMypREqa0UOokyIfmqYdq3GOTm1g0
KmMOjc8QRIJSl/8M6NNn49TEdCJPgnvXwegrt8Wod7oV+dDAQxn+/NW43m05AgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUuyhV51h/vxsLnHOprFtZu1UDy4IwHwYDVR0j
BBgwFoAUtdN+IuuOVmjwk1RuY0tVsKeA0k8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkRGU3VTRU1YSnJkV0JHVnFFYmg0WlMxZHQ5bUFQRmRuUkJNVnEydUEz
ZFIvMC9CNUQzN0UyMkVCOEU1NjY4RjA5MzU0NkU2MzRCNTVCMEE3ODBEMjRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1RDM3RTIyRUI4RTU2NjhG
MDkzNTQ2RTYzNEI1NUIwQTc4MEQyNEYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZERlN1U0VNWEpyZFdCR1ZxRWJoNFpTMWR0OW1BUEZkblJCTVZxMnVBM2RSLzAv
MzIzODMwMzQzYTM4MzczNzM0M2EzMjMxMzAzYTNhMmYzNDM1MmQzNDM1MjAzZDNl
MjAzMjM3MzIzNzMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwMoBId0AhAwDQYJKoZIhvcNAQELBQAD
ggEBAH75A5vgz/72ApK8Yuh6DaERRx80VRuCC+GlX0s5QqiHGxsCtVxmCc6Z45SZ
JucNUwZIIRW7B127bBylbybzUCobx64N50hQ8toMuFWA32tfV1UBhHLYnFyn+w8h
sKJDa3WncXTlP4F2d4DDOlso+hW00PyTAg1CGpngEivNgm9ITSrIMUMcI2jJ8P3v
wpdURw0Eqpr4+79R4MMmN7owbcZOZ4nI9LYs26ij9vKZzcXZ99Ujsr7s+v/Tu+oM
LplrNB0RvSlpHfmEFI4njiGV0op9UqC+T876zjhtUQs4pdEDbzflZSuTEBQfW5Os
XRuA3MSqun8HJqUWm6HKIQhTj/o=
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:22 2025 by rpki-client