Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3134303a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3134303a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          sZF8qVNyaJ9seXFvOk0/Ag45qVB/gxr9yr7gaEW5R2s=
Subject key identifier:   98:C1:48:E9:C1:23:E4:2B:E5:ED:C7:A3:24:06:9B:C6:A8:2A:6E:A7
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       5D04D59CBF645445273EFF4028FAD506F1B34E50
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3134303a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 03 Jul 2026 15:44:26 +0000
ROA not before:           Fri 03 Jul 2026 15:39:26 +0000
ROA not after:            Fri 02 Jul 2027 15:44:26 +0000
asID:                     272710
IP address blocks:        2804:8774:140::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 23:19:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:04:d5:9c:bf:64:54:45:27:3e:ff:40:28:fa:d5:06:f1:b3:4e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Jul  3 15:39:26 2026 GMT
            Not After : Jul  2 15:44:26 2027 GMT
        Subject: CN=98C148E9C123E42BE5EDC7A324069BC6A82A6EA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:43:26:86:d8:a4:63:11:d0:bc:66:e6:40:ea:
                    5c:1f:bc:c2:00:ff:cd:cc:0f:a6:d4:0d:9c:11:8f:
                    86:b0:b7:1e:44:4c:c8:73:8b:a7:e2:db:df:a1:45:
                    e4:44:dc:b6:ba:73:ff:00:05:39:6d:ff:68:38:89:
                    c4:0a:57:96:20:f9:50:5a:34:56:9c:d4:c1:1d:e5:
                    82:01:e4:24:91:18:9c:40:1a:92:f8:aa:93:0a:40:
                    86:bb:4b:d5:ce:5d:b6:8f:ac:e3:fe:08:bb:24:ab:
                    ec:b6:62:73:02:3f:ac:e1:0f:24:19:24:64:5c:95:
                    bd:0a:a9:c5:99:1a:b1:70:93:e7:7b:71:7f:b9:16:
                    49:d0:0c:0a:18:13:66:a0:ab:8d:75:1d:5d:14:0d:
                    11:ad:41:2f:b9:4d:6b:f4:7d:73:88:94:bf:5e:8a:
                    b1:a8:c6:d8:1f:06:9c:1e:f6:39:7b:c7:2d:9c:96:
                    f4:48:16:51:dd:24:4f:1d:68:11:66:80:20:6d:a5:
                    ab:3e:f5:53:c8:62:ee:09:8e:3a:93:ea:cf:3c:c7:
                    d3:4c:84:68:8e:33:5b:4d:88:0e:71:4f:97:5d:5b:
                    d6:3c:eb:69:86:8d:9d:9a:65:a8:54:3d:53:41:77:
                    f0:f1:d2:2d:6f:13:d4:a6:31:f8:66:2d:dc:52:6f:
                    7f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C1:48:E9:C1:23:E4:2B:E5:ED:C7:A3:24:06:9B:C6:A8:2A:6E:A7
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3134303a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:140::/45

    Signature Algorithm: sha256WithRSAEncryption
         2f:5b:2c:9f:00:80:1b:44:1a:42:d8:d7:15:60:a8:a9:a0:5b:
         f6:3d:95:df:cb:ef:0a:5f:69:67:72:a3:07:5c:63:55:ed:f9:
         9a:98:2c:a3:b4:6d:f8:c1:69:41:c0:81:97:b3:46:0e:9f:17:
         90:34:e6:ac:7e:d7:5b:b6:05:d6:5b:1c:02:80:85:75:04:21:
         1a:42:c8:da:07:f4:07:df:15:78:c7:2b:1d:5f:91:02:e3:94:
         1b:c9:f5:1f:c1:29:37:61:14:e7:d5:fe:55:eb:d8:00:8a:61:
         2f:ca:aa:34:8d:20:78:7b:c3:a7:ad:3a:3e:48:1a:1c:3d:5f:
         eb:fa:d7:4d:3d:7d:5c:98:3d:a2:8c:dd:be:fb:e7:a0:79:e8:
         1b:f7:10:1e:fb:2c:2d:cf:44:d6:6b:cc:66:e2:79:ca:a5:47:
         b2:30:fa:17:cf:99:3c:d6:a5:e2:0a:aa:b1:ff:30:de:49:c6:
         be:4f:ff:4e:61:fd:b3:24:f2:c3:86:0b:21:9c:9c:92:c4:2c:
         21:0a:59:62:35:bb:33:44:7a:92:68:5b:6f:2f:0b:68:41:46:
         0d:7a:fc:b9:48:c9:e3:fc:50:7c:7d:b7:ab:31:a5:f2:c9:00:
         38:ef:e1:63:b2:8d:65:2c:58:e1:2e:d7:a4:20:b1:ed:fa:88:
         dd:8a:05:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:53:48 2026 by rpki-client