Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a666630303a3a2f34302d3430203d3e20323732373130.roa
File:                     323830343a383737343a666630303a3a2f34302d3430203d3e20323732373130.roa (raw, json)
Hash identifier:          S6yDiF0xxnWUDpbfgW5qTbKMQyyuJmCaBt4hcAPMmbA=
Subject key identifier:   D4:2A:6C:F9:24:9D:D5:29:1B:A9:07:FA:C3:39:AA:98:0B:8A:83:6F
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       5424E88926B92B31AE930AEC277DEE564DB6947B
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a666630303a3a2f34302d3430203d3e20323732373130.roa
Signing time:             Fri 01 Aug 2025 15:06:26 +0000
ROA not before:           Fri 01 Aug 2025 15:01:26 +0000
ROA not after:            Fri 31 Jul 2026 15:06:26 +0000
asID:                     272710
IP address blocks:        2804:8774:ff00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 13:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:24:e8:89:26:b9:2b:31:ae:93:0a:ec:27:7d:ee:56:4d:b6:94:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug  1 15:01:26 2025 GMT
            Not After : Jul 31 15:06:26 2026 GMT
        Subject: CN=D42A6CF9249DD5291BA907FAC339AA980B8A836F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0a:6f:5a:af:a5:cf:99:fc:24:5e:b2:7a:3e:
                    4f:3f:e4:90:88:3b:7f:e8:b7:10:36:99:2d:f1:59:
                    7a:a4:c7:f0:ad:23:e7:a7:76:c0:31:aa:03:32:5a:
                    b7:2a:61:37:fc:2d:f9:8f:ba:c6:cd:05:d8:06:03:
                    e6:39:ce:5a:26:ca:63:ee:94:5c:f6:0e:1e:77:8d:
                    1c:cb:4a:85:13:0f:e8:48:aa:37:e5:70:56:ad:a6:
                    6a:1b:3e:8a:e9:39:27:9b:42:ac:65:dc:eb:15:d0:
                    11:51:b8:43:e7:e8:a2:2c:11:38:7b:56:ad:b5:b9:
                    4b:eb:9a:12:89:b8:e0:46:c8:ae:8f:2b:89:8e:39:
                    db:88:e6:b3:f2:1b:9d:f1:60:5f:5e:7d:8b:70:07:
                    51:ca:75:ed:82:98:33:f6:4f:d9:20:6d:76:72:22:
                    ed:3a:ce:f4:f1:f4:d5:9e:c6:5b:92:7c:e2:b3:98:
                    0d:65:03:75:58:86:a1:58:f4:df:53:63:b2:3f:08:
                    63:88:7b:3f:85:fc:29:83:ca:c4:1b:2d:eb:a6:d2:
                    3d:f5:51:a1:24:8c:09:85:f3:32:bc:8f:5a:1d:f3:
                    a4:79:54:25:3e:ae:e1:b8:45:d8:87:df:19:aa:92:
                    3a:27:e7:d0:ec:a7:3c:95:bd:79:3a:74:05:9b:63:
                    7d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2A:6C:F9:24:9D:D5:29:1B:A9:07:FA:C3:39:AA:98:0B:8A:83:6F
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a666630303a3a2f34302d3430203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         1d:bf:ea:9b:79:dc:c0:0d:e8:7f:58:68:17:02:4b:26:6b:25:
         69:3f:ed:e9:e9:de:dd:70:ff:aa:36:d4:3e:1b:fd:eb:27:b6:
         43:eb:a8:6c:6c:04:8b:64:91:c0:5d:04:a9:80:cb:53:0c:ba:
         5f:3c:25:44:bc:d6:74:e9:0f:b3:57:77:35:5a:1e:46:dd:8b:
         20:66:10:6e:7c:e3:76:c2:78:52:10:e7:d4:0a:e3:51:c7:b0:
         1e:7c:1d:98:57:03:ba:f5:ef:fc:f7:24:e4:05:64:6b:c8:ed:
         13:da:e1:35:26:5a:b4:cc:01:00:bf:c0:27:db:5f:0f:8b:88:
         89:6a:be:e5:35:0f:1d:4e:41:31:f9:60:8e:18:e2:76:28:e2:
         4a:37:7c:84:55:99:5d:ef:79:05:7f:31:a2:b2:18:33:11:63:
         99:e1:e0:fb:53:b6:a8:e2:e7:82:f4:8c:00:2a:21:6b:6b:8e:
         c9:53:b9:c2:4c:fc:a3:14:d8:c1:6d:67:01:f9:dd:f6:4e:1c:
         f6:7c:52:b4:7b:0c:46:25:89:52:22:75:32:f6:d4:65:e7:62:
         6a:cb:ab:ac:ad:87:96:7b:a1:31:72:f9:6b:a4:7f:55:77:55:
         db:d3:d8:43:f3:10:74:c4:18:39:e5:de:d0:51:f9:c7:5d:d8:
         38:5e:d7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:36:46 2025 by rpki-client