Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3237383a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3237383a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          nDzODV0C3lm7DePFLGIy5V+G5wUmsutL4XLGnD7SvIo=
Subject key identifier:   B9:99:20:5E:88:02:4F:4A:53:CB:B7:A3:9A:0E:45:5D:B4:0C:CA:F1
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       3814E9FAB115BB18F27998E65EAE357FC50401D6
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3237383a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 01 Aug 2025 15:06:27 +0000
ROA not before:           Fri 01 Aug 2025 15:01:27 +0000
ROA not after:            Fri 31 Jul 2026 15:06:27 +0000
asID:                     272710
IP address blocks:        2804:8774:278::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 02:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:14:e9:fa:b1:15:bb:18:f2:79:98:e6:5e:ae:35:7f:c5:04:01:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug  1 15:01:27 2025 GMT
            Not After : Jul 31 15:06:27 2026 GMT
        Subject: CN=B999205E88024F4A53CBB7A39A0E455DB40CCAF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:68:58:55:f9:df:7a:7c:7d:58:1b:46:38:c9:
                    17:9e:17:06:77:6b:cc:40:d1:8f:d5:ad:3d:c7:c8:
                    0b:33:cc:2b:91:e3:9a:fb:8a:24:a4:6c:dd:04:96:
                    70:95:64:89:40:6e:24:08:da:fc:44:89:5a:f7:1b:
                    8c:fe:20:73:29:91:7f:21:7d:3e:6e:67:e5:4e:9a:
                    a3:0d:92:2b:30:78:c7:e4:2f:06:a0:b2:f8:2a:ec:
                    85:f5:36:88:d5:4b:14:a8:68:84:63:b1:f8:19:67:
                    b9:33:0e:4b:a3:17:26:b0:9f:e5:b7:fd:ab:fa:34:
                    1c:be:09:5a:c5:63:30:ab:ca:09:4d:2a:8d:e7:b4:
                    75:02:3d:3b:57:51:db:aa:28:9c:b6:c0:75:c1:9f:
                    e2:8c:aa:fb:84:4a:be:8f:c7:c7:dd:1a:60:5e:e6:
                    64:56:f5:a2:5c:2a:cd:49:20:93:f9:25:f8:ed:dc:
                    c4:b2:2e:5a:ff:4e:ae:ee:f5:39:22:51:ae:70:44:
                    cd:c7:d2:f9:72:72:e5:8d:ac:8d:61:29:ac:e7:f3:
                    82:1c:c9:0a:e1:37:7f:7b:59:2a:56:47:3c:3c:aa:
                    66:c7:e2:6e:41:bb:99:08:54:06:ac:9a:84:0d:5a:
                    e6:08:2e:72:7c:47:25:96:4a:db:c6:58:d6:d7:fb:
                    61:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:99:20:5E:88:02:4F:4A:53:CB:B7:A3:9A:0E:45:5D:B4:0C:CA:F1
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3237383a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:278::/45

    Signature Algorithm: sha256WithRSAEncryption
         b0:09:4b:56:73:4d:a0:e1:59:c1:dd:1d:fd:91:c5:63:82:4a:
         6e:2f:cc:89:85:ee:85:7f:f6:42:9d:88:af:cb:0c:bf:d1:4c:
         8e:8b:2e:9f:09:99:27:3b:b3:1c:b4:30:16:fa:38:d5:e9:30:
         0c:fc:70:f9:db:93:70:e0:3c:d1:ba:7c:0b:e3:b5:33:67:8d:
         7f:17:b6:5a:fc:d7:59:da:81:5a:a7:5f:c0:7e:b5:da:c3:d0:
         42:da:c5:14:93:f9:8d:ae:07:ba:79:73:8a:d9:cd:6f:48:ec:
         8c:fd:02:e6:cc:d3:f5:2e:1b:a8:6e:9b:09:6f:24:95:cc:c4:
         2e:9d:a8:98:8c:ec:3e:2a:16:58:f9:bb:18:b3:24:0a:ac:c8:
         18:2b:6e:73:dc:bd:4d:05:69:18:31:b6:ac:b1:ed:ef:e2:38:
         f7:4e:89:cf:b9:b0:34:dc:98:a7:41:a7:78:be:f5:87:fd:2a:
         5e:91:86:23:00:17:96:ca:30:79:57:d8:ac:eb:3c:38:17:04:
         f0:23:88:86:81:d7:30:be:eb:41:fa:b8:02:f2:84:88:30:5d:
         17:73:67:b3:c8:b1:05:9c:b0:61:d8:ba:c9:9d:dc:83:80:66:
         e5:d0:4d:90:c4:ba:99:6b:74:e2:8a:2a:e8:b1:a4:11:82:89:
         35:18:1e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:51 2025 by rpki-client