Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3132303a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3132303a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          qO7rZIBzv7tvFrzeijfyOGLtnjmav3ZzkRX5D6kc6+s=
Subject key identifier:   F4:21:42:61:EB:74:E2:0B:C9:94:1E:D4:95:7B:ED:D6:2E:E0:2F:C9
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       7FF6C154A7D2E5C5EED4C9D264FC8228FC8A04E5
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3132303a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 03 Jul 2026 15:44:26 +0000
ROA not before:           Fri 03 Jul 2026 15:39:26 +0000
ROA not after:            Fri 02 Jul 2027 15:44:26 +0000
asID:                     272710
IP address blocks:        2804:8774:120::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 13:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f6:c1:54:a7:d2:e5:c5:ee:d4:c9:d2:64:fc:82:28:fc:8a:04:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Jul  3 15:39:26 2026 GMT
            Not After : Jul  2 15:44:26 2027 GMT
        Subject: CN=F4214261EB74E20BC9941ED4957BEDD62EE02FC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:04:5d:6c:ed:40:50:ac:5e:3f:3c:2c:8a:e4:
                    b5:e1:6a:e5:34:a8:29:6a:b0:ef:a7:a6:5a:df:c1:
                    17:54:3c:32:10:41:42:ea:79:2f:83:27:42:bc:28:
                    c7:87:f1:79:ab:b8:72:51:70:53:fe:6a:8b:3c:60:
                    e2:7a:fb:8c:0e:6a:fe:cf:ad:72:01:31:0e:e4:fe:
                    66:c3:d5:09:79:a2:26:6b:ee:af:14:b2:0c:bb:d9:
                    28:79:2e:75:9f:0c:6f:5e:2f:99:bc:b4:92:ca:0f:
                    eb:ca:90:76:e5:c5:d2:b4:1c:21:2d:a1:88:87:ff:
                    03:7c:63:bc:62:dc:05:c3:24:e6:dd:48:3a:e6:c1:
                    43:6d:57:3a:78:01:27:ab:3e:2a:60:1b:30:b6:20:
                    05:55:3b:50:f7:2b:a2:6a:5b:06:b3:cb:f1:5d:6a:
                    3e:bd:c0:dd:0d:3e:1d:51:a1:ba:19:d8:b4:31:e0:
                    af:e7:c8:f9:c6:79:ba:48:15:5a:f5:f2:84:31:b0:
                    0f:59:80:54:d0:95:e1:2a:9f:87:86:cf:5d:6c:62:
                    1d:3e:04:b1:84:95:0b:27:0d:c1:98:5a:8d:fc:1c:
                    54:8a:4a:94:bc:4e:86:6e:67:12:dc:40:84:78:f9:
                    f1:5f:34:61:e1:08:df:0f:a7:96:45:42:26:ef:d2:
                    67:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:21:42:61:EB:74:E2:0B:C9:94:1E:D4:95:7B:ED:D6:2E:E0:2F:C9
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3132303a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:120::/45

    Signature Algorithm: sha256WithRSAEncryption
         96:80:a4:82:c6:bf:c7:0d:a7:91:d9:8c:45:21:fe:eb:f2:85:
         ea:dc:34:23:7a:f6:25:f3:25:4b:57:e6:e2:10:bc:9e:bc:84:
         20:b9:76:05:94:6a:f5:dc:3a:81:15:a4:51:51:30:30:9b:09:
         bb:03:40:f1:0b:d1:8e:be:d3:db:32:c6:9d:3d:4d:cc:07:87:
         e0:e1:d0:32:94:4b:af:46:a3:2b:4f:dd:58:28:1e:23:6f:d0:
         28:d8:2e:6d:b2:ae:00:7f:77:c8:ed:88:98:52:88:90:2c:cf:
         a1:15:3d:8e:78:35:81:2e:02:a4:af:ed:e5:42:fd:67:56:54:
         81:73:2b:fc:06:6f:ab:56:4f:db:9a:fd:94:9c:4c:88:f4:52:
         e3:3b:2f:bd:83:b4:1e:5e:1b:5b:8a:0a:46:16:c1:70:93:90:
         c5:84:ac:ae:7c:1c:ae:b9:b3:84:ec:21:eb:05:ca:2a:2f:69:
         c6:95:3d:c6:d5:37:91:07:ac:35:fe:50:d7:d9:41:e3:ab:b5:
         82:67:a0:b3:06:c4:d6:d8:55:f9:fe:75:29:a4:f5:2c:ce:39:
         fb:85:e8:8c:16:a4:43:d7:88:9e:4a:0a:68:b1:a7:b7:33:f4:
         3f:94:91:e6:79:3a:78:ed:e9:67:f3:5c:24:43:aa:7a:8e:46:
         2c:8b:76:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:56 2026 by rpki-client