Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3930303a3a2f34302d3430203d3e20323732373130.roa
File:                     323830343a383737343a3930303a3a2f34302d3430203d3e20323732373130.roa (raw, json)
Hash identifier:          PCobnX9jsguRZx4fT3vSNfOz7zf6f10TyBlBheV8jcw=
Subject key identifier:   B6:35:7E:69:6F:09:5E:F0:70:2D:98:E3:2C:42:76:11:65:52:3C:29
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       72B92F69B2A9DBF811A32239A0EE7D6CC5B572CC
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3930303a3a2f34302d3430203d3e20323732373130.roa
Signing time:             Fri 01 Aug 2025 15:06:25 +0000
ROA not before:           Fri 01 Aug 2025 15:01:25 +0000
ROA not after:            Fri 31 Jul 2026 15:06:25 +0000
asID:                     272710
IP address blocks:        2804:8774:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 06:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:b9:2f:69:b2:a9:db:f8:11:a3:22:39:a0:ee:7d:6c:c5:b5:72:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug  1 15:01:25 2025 GMT
            Not After : Jul 31 15:06:25 2026 GMT
        Subject: CN=B6357E696F095EF0702D98E32C42761165523C29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8e:58:57:17:0c:27:cc:b9:a0:3b:99:af:24:
                    4c:d0:20:2d:9b:99:23:ed:6f:39:db:e1:f5:b3:96:
                    44:ff:d9:da:f7:9c:57:69:9f:cb:f5:d3:54:49:87:
                    7c:cb:e1:e8:b2:57:fd:69:97:54:01:ae:df:ea:ca:
                    b5:b1:d1:06:8a:2d:f4:59:46:e7:0f:2d:d3:ea:12:
                    eb:a0:93:60:21:f7:e7:8a:81:ae:f0:4e:bb:52:33:
                    14:62:66:d4:05:ab:56:26:bb:80:3a:21:c9:51:09:
                    7e:df:81:bc:31:24:82:5c:d4:32:42:87:fe:a3:69:
                    6d:9e:c1:96:97:e8:36:be:05:26:84:04:0f:ea:36:
                    e3:15:1b:db:4b:a3:70:43:6c:f3:59:cc:cf:0a:2d:
                    ac:34:7d:12:28:49:b6:57:5e:2f:18:2a:90:bb:1e:
                    6b:be:ab:26:8f:ea:8c:7b:f7:0d:27:3d:31:99:31:
                    19:7d:77:f0:a1:a5:18:b1:1f:a5:f5:a7:f0:a8:2d:
                    11:fd:07:a6:38:2b:50:ee:8d:75:9d:60:4d:c8:d0:
                    88:e4:94:0f:eb:e5:9a:01:29:34:6a:a9:c1:c3:f3:
                    ff:b4:69:77:61:7a:94:a4:47:34:73:f8:80:53:0c:
                    d5:a2:89:c2:36:a1:44:2a:aa:4c:eb:14:11:c4:2a:
                    55:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:35:7E:69:6F:09:5E:F0:70:2D:98:E3:2C:42:76:11:65:52:3C:29
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3930303a3a2f34302d3430203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         39:da:b7:c2:a1:f4:b5:38:da:a7:6d:66:22:cf:b4:6d:29:62:
         19:3d:4b:d1:45:2b:2d:76:ed:fd:41:fa:c7:1f:21:8e:43:43:
         39:ab:5c:5e:be:59:21:97:1a:59:cd:e3:c8:3e:c9:54:7a:b1:
         89:bf:00:c0:4b:4f:ad:01:6a:13:45:87:7e:45:4e:bb:5e:59:
         f0:f8:c2:7f:87:fe:4b:14:cc:88:f9:fe:46:50:e5:05:f5:77:
         47:2f:a2:ce:5e:df:62:9d:38:93:be:3c:df:04:cd:8f:bc:ab:
         47:73:49:65:87:6e:c3:2a:fc:aa:a3:a7:7a:40:47:55:ad:4b:
         01:fb:c4:eb:02:1a:e7:fd:00:65:ee:fc:e8:75:5f:73:7e:eb:
         eb:57:f7:37:5c:1d:2d:a1:dc:57:e8:9a:e1:ab:60:5d:85:67:
         02:3c:22:08:da:a8:4d:3e:ff:fd:fb:27:05:31:2b:a5:30:84:
         81:3f:f4:5e:29:d7:84:75:b3:75:52:e6:6c:95:54:be:8e:1c:
         ec:06:91:cf:cf:a6:0f:c3:01:1f:7f:82:cb:81:87:5a:44:29:
         ce:fb:9e:12:81:a7:14:b8:8c:87:3b:85:27:52:41:4d:f7:7d:
         48:22:e5:83:66:50:c1:c6:b8:42:41:c2:57:c2:8f:16:4a:51:
         3a:99:c4:94
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcrkvabKp2/gRoyI5oO59bMW1cswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVEMzdFMjJFQjhFNTY2OEYwOTM1NDZFNjM0QjU1QjBB
NzgwRDI0RjAeFw0yNTA4MDExNTAxMjVaFw0yNjA3MzExNTA2MjVaMDMxMTAvBgNV
BAMTKEI2MzU3RTY5NkYwOTVFRjA3MDJEOThFMzJDNDI3NjExNjU1MjNDMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTjlhXFwwnzLmgO5mvJEzQIC2b
mSPtbznb4fWzlkT/2dr3nFdpn8v101RJh3zL4eiyV/1pl1QBrt/qyrWx0QaKLfRZ
RucPLdPqEuugk2Ah9+eKga7wTrtSMxRiZtQFq1Ymu4A6IclRCX7fgbwxJIJc1DJC
h/6jaW2ewZaX6Da+BSaEBA/qNuMVG9tLo3BDbPNZzM8KLaw0fRIoSbZXXi8YKpC7
Hmu+qyaP6ox79w0nPTGZMRl9d/ChpRixH6X1p/CoLRH9B6Y4K1DujXWdYE3I0Ijk
lA/r5ZoBKTRqqcHD8/+0aXdhepSkRzRz+IBTDNWiicI2oUQqqkzrFBHEKlU1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUtjV+aW8JXvBwLZjjLEJ2EWVSPCkwHwYDVR0j
BBgwFoAUtdN+IuuOVmjwk1RuY0tVsKeA0k8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkRGU3VTRU1YSnJkV0JHVnFFYmg0WlMxZHQ5bUFQRmRuUkJNVnEydUEz
ZFIvMC9CNUQzN0UyMkVCOEU1NjY4RjA5MzU0NkU2MzRCNTVCMEE3ODBEMjRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1RDM3RTIyRUI4RTU2NjhG
MDkzNTQ2RTYzNEI1NUIwQTc4MEQyNEYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZERlN1U0VNWEpyZFdCR1ZxRWJoNFpTMWR0OW1BUEZkblJCTVZxMnVBM2RSLzAv
MzIzODMwMzQzYTM4MzczNzM0M2EzOTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM3MzIzNzMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBId0CTANBgkqhkiG9w0BAQsFAAOC
AQEAOdq3wqH0tTjap21mIs+0bSliGT1L0UUrLXbt/UH6xx8hjkNDOatcXr5ZIZca
Wc3jyD7JVHqxib8AwEtPrQFqE0WHfkVOu15Z8PjCf4f+SxTMiPn+RlDlBfV3Ry+i
zl7fYp04k7483wTNj7yrR3NJZYduwyr8qqOnekBHVa1LAfvE6wIa5/0AZe786HVf
c37r61f3N1wdLaHcV+ia4atgXYVnAjwiCNqoTT7//fsnBTErpTCEgT/0XinXhHWz
dVLmbJVUvo4c7AaRz8+mD8MBH3+Cy4GHWkQpzvueEoGnFLiMhzuFJ1JBTfd9SCLl
g2ZQwca4QkHCV8KPFkpROpnElA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:19:20 2025 by rpki-client