Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3263303a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3263303a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          vZI64Bc6kEgbkZ+8EDUvFEs4f0D0yDr/H/a4IzhNozE=
Subject key identifier:   D1:56:C8:47:63:E7:D0:CC:83:F0:1A:5D:71:D8:F7:9F:B1:83:29:1F
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       08AEC69AB10F438BE8C28DDE03A6425724EB439A
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3263303a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 01 Aug 2025 15:06:27 +0000
ROA not before:           Fri 01 Aug 2025 15:01:27 +0000
ROA not after:            Fri 31 Jul 2026 15:06:27 +0000
asID:                     272710
IP address blocks:        2804:8774:2c0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 06:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ae:c6:9a:b1:0f:43:8b:e8:c2:8d:de:03:a6:42:57:24:eb:43:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug  1 15:01:27 2025 GMT
            Not After : Jul 31 15:06:27 2026 GMT
        Subject: CN=D156C84763E7D0CC83F01A5D71D8F79FB183291F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c4:2f:39:90:15:9e:72:10:65:63:a4:53:c3:
                    fa:68:64:d7:4b:69:11:22:7b:1c:a7:06:c9:8c:66:
                    84:ed:70:e3:6b:12:89:58:02:d8:f9:39:0f:99:c1:
                    cf:39:3a:52:4d:84:9b:e7:ee:23:ed:22:81:e5:a5:
                    5f:19:1c:d7:86:d1:4f:5f:11:47:ab:b9:8f:ce:e6:
                    f4:58:cd:eb:a0:8d:39:6a:69:da:9d:fe:5c:53:a9:
                    b7:ad:a2:f7:64:6a:71:6a:fb:8b:45:c7:ef:0e:03:
                    b7:5f:cc:16:c0:fc:c6:d2:55:7c:c2:45:4b:b7:13:
                    9b:31:9e:c4:2b:dc:c8:51:69:c5:ea:23:f4:9c:4a:
                    05:2a:57:8e:58:22:aa:1a:9c:fa:73:94:e5:59:f4:
                    01:e6:bc:71:63:74:b8:4b:9f:68:7e:e7:4c:ef:0e:
                    02:ad:1f:dd:2e:cd:da:ae:48:40:69:8b:b9:a6:a2:
                    4c:7a:d8:5c:4b:fb:24:dc:ad:03:8f:f7:cc:23:15:
                    57:1e:93:11:31:c8:38:2d:e4:06:fe:d0:12:e9:63:
                    48:3f:db:88:ad:97:93:30:6f:16:09:5e:8b:89:08:
                    f0:fd:f6:fd:06:c5:29:89:6e:13:b1:79:7a:cc:52:
                    1f:9d:e4:95:fd:e8:de:87:9d:1e:20:33:47:90:4a:
                    d3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:56:C8:47:63:E7:D0:CC:83:F0:1A:5D:71:D8:F7:9F:B1:83:29:1F
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3263303a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:2c0::/45

    Signature Algorithm: sha256WithRSAEncryption
         69:db:1d:fd:07:69:69:40:23:93:dc:53:32:ec:6d:d3:67:a3:
         65:3a:3b:de:d4:b5:14:5e:4e:ba:64:e1:5c:76:aa:67:44:c2:
         de:37:af:d7:00:c3:8e:85:0c:4f:8e:a0:4d:7b:f0:d3:2c:ec:
         c6:da:e5:13:09:e6:86:28:12:99:ad:19:c0:c1:64:86:d8:9f:
         67:6c:0e:c1:56:67:00:2e:20:86:39:4d:7e:a1:0d:4c:17:b1:
         80:e8:16:ab:4b:7b:f2:42:a9:23:26:e7:6e:ce:c1:7f:1b:9e:
         4d:2e:9c:c4:5b:2f:80:ce:75:55:fd:c2:2d:b3:cd:73:23:dc:
         bc:b4:1d:36:16:eb:eb:ab:b9:a1:5a:74:62:f5:81:8a:1a:16:
         22:cc:72:e8:7e:ea:96:5c:21:23:ef:22:47:15:e5:6a:89:c5:
         82:0a:ed:dc:69:ad:2d:0d:fb:76:54:31:c2:33:65:23:e8:ac:
         0f:6d:3d:9c:e1:ce:8b:b3:d2:43:12:66:50:d5:73:52:9a:8d:
         85:42:f4:91:80:b7:c0:a3:f5:8e:73:74:15:7a:1b:2f:a1:cb:
         ee:e7:31:da:72:1c:22:ad:d6:69:b8:e6:a0:b2:d8:fd:46:9b:
         54:2e:23:fe:ed:1a:8f:21:67:68:ed:81:41:ef:24:35:43:27:
         65:fb:ef:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:19:35 2025 by rpki-client