Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3130383a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3130383a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          DV2sqlGCeodmBMcTRkz6m1zDfl31ms0Le1O3KZkRH8A=
Subject key identifier:   C9:F7:4F:0B:83:7B:87:5E:D5:89:AA:74:EC:40:0C:7B:84:3C:55:3C
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       213E5D729D4612507F57BC54C906675968C078D1
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3130383a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 03 Jul 2026 15:44:26 +0000
ROA not before:           Fri 03 Jul 2026 15:39:26 +0000
ROA not after:            Fri 02 Jul 2027 15:44:26 +0000
asID:                     272710
IP address blocks:        2804:8774:108::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 26 Jul 2026 00:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:3e:5d:72:9d:46:12:50:7f:57:bc:54:c9:06:67:59:68:c0:78:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Jul  3 15:39:26 2026 GMT
            Not After : Jul  2 15:44:26 2027 GMT
        Subject: CN=C9F74F0B837B875ED589AA74EC400C7B843C553C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:74:9b:af:c8:d1:72:15:9c:12:21:8e:f1:52:
                    ac:0e:b0:0e:92:69:d9:b8:a4:a9:ff:18:35:0a:50:
                    7a:7f:a9:ea:a9:b5:25:86:d3:48:42:75:01:d0:bd:
                    9c:7a:7e:63:79:4b:bf:8f:0f:9b:5e:9d:1b:9f:41:
                    a8:90:ce:c8:c6:4a:34:81:4b:b5:91:d8:8a:fa:e1:
                    4f:a1:9d:27:f1:0c:28:cf:b6:c4:8a:a6:5a:3c:f1:
                    9c:5c:74:5e:a5:2f:e2:af:92:b9:6c:7d:66:7c:db:
                    f3:4c:ba:32:c2:1c:50:fb:b0:ac:0b:f0:73:ae:55:
                    89:7b:ec:02:46:01:99:9d:ba:f5:35:6a:b3:f2:d4:
                    80:70:ed:75:2f:68:64:b3:3b:8b:d1:87:cb:e8:dd:
                    45:db:d1:64:b8:f8:a0:90:32:42:2f:3a:1b:6b:9d:
                    a9:0c:84:79:57:22:7e:3b:0f:fa:88:5b:17:01:b6:
                    1d:cd:be:70:55:c1:ad:2b:fb:da:77:6d:af:5c:b7:
                    d3:46:17:f3:11:17:ff:80:b6:77:a2:10:4b:6e:e5:
                    62:88:89:d9:13:e2:b6:9d:fc:92:44:a1:76:5c:e2:
                    d2:5a:6b:35:39:04:e0:88:92:e7:1f:1c:e8:29:4e:
                    e4:4e:e7:df:2e:db:eb:57:d9:bc:98:ab:34:4a:90:
                    0a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F7:4F:0B:83:7B:87:5E:D5:89:AA:74:EC:40:0C:7B:84:3C:55:3C
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3130383a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:108::/45

    Signature Algorithm: sha256WithRSAEncryption
         c5:eb:0a:56:85:c5:12:2b:1f:b1:8d:9d:42:56:3e:54:99:f4:
         f5:e5:ef:c9:7c:79:1b:22:6c:17:19:29:1a:91:7f:c2:0c:d5:
         bb:12:a6:ed:9e:ea:b3:8e:1e:45:91:1d:8c:00:fd:93:b4:be:
         9a:ae:13:e1:57:0f:0b:a4:2c:be:f5:f9:1f:e7:68:28:85:00:
         1c:7d:24:c0:2e:f3:8b:d8:f9:c5:cc:c5:5c:b5:6b:34:9f:89:
         56:e6:42:9c:83:1a:21:5c:b9:ae:06:48:aa:01:d8:2f:dd:0b:
         b5:81:f4:9c:b1:36:a6:20:a9:26:a2:5b:c2:b4:45:8d:33:4b:
         1a:84:c4:a5:4b:c1:60:9b:1e:cd:15:55:73:44:77:06:d1:63:
         2b:ee:aa:29:92:e3:f3:e2:b0:52:4d:70:44:e9:6a:e9:c3:5b:
         bd:a8:87:d7:cf:b8:54:22:7e:67:63:2d:e5:c9:90:77:dd:89:
         d6:58:14:09:3f:e7:05:6b:4f:c4:83:69:e7:3f:be:20:c1:05:
         97:87:7e:a9:62:20:7d:55:0d:6a:a5:0b:98:29:cc:84:f6:3e:
         9f:b5:db:29:c1:e4:6f:bf:9a:bd:19:6b:b2:a6:41:dc:2a:35:
         a0:85:60:12:b0:44:bc:6d:df:7e:a3:79:3d:43:df:14:24:b3:
         e0:00:88:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:43:46 2026 by rpki-client