Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3137303a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3137303a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          1GKxxo/NDv+qfHR2GKUZHJL9AorYdNgXZ6xyKKTc4Sg=
Subject key identifier:   03:51:7D:27:27:54:1E:49:3E:CA:50:B6:6F:98:E2:07:0E:FC:0D:F9
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       13BA6F1FC7A88E292AAACBA514837007FF427E34
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3137303a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 03 Jul 2026 15:44:26 +0000
ROA not before:           Fri 03 Jul 2026 15:39:26 +0000
ROA not after:            Fri 02 Jul 2027 15:44:26 +0000
asID:                     272710
IP address blocks:        2804:8774:170::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 13:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ba:6f:1f:c7:a8:8e:29:2a:aa:cb:a5:14:83:70:07:ff:42:7e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Jul  3 15:39:26 2026 GMT
            Not After : Jul  2 15:44:26 2027 GMT
        Subject: CN=03517D2727541E493ECA50B66F98E2070EFC0DF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7a:3e:44:5c:3e:fe:45:6d:25:04:ac:f1:1c:
                    5d:be:86:89:93:b8:1f:9d:77:ad:01:65:6b:1e:2d:
                    13:a5:67:55:f8:8d:b0:3e:d3:9d:b7:42:45:00:af:
                    08:7c:94:51:c8:44:41:f7:5a:6a:55:aa:16:84:79:
                    1b:cf:38:b6:24:a5:52:b9:2c:1e:27:2e:79:e1:a8:
                    d2:7a:76:2a:83:4b:35:cb:ad:2c:1d:a4:ce:41:39:
                    32:cd:03:28:a6:05:3a:fc:13:35:0a:05:aa:af:d5:
                    9e:4e:aa:78:84:e7:d1:ab:8c:13:6c:fc:db:1a:c1:
                    14:80:ad:bc:9a:75:00:13:ff:65:0b:85:64:62:af:
                    f7:69:2f:06:16:cd:3e:58:75:1b:02:6c:77:7d:38:
                    81:e4:98:f8:e6:62:85:02:08:5b:b0:ff:3d:c4:fd:
                    6a:85:53:cd:b2:f4:83:d1:ab:c4:5a:50:23:80:50:
                    4d:ab:1f:c5:7f:0a:81:86:30:35:0e:d6:d6:12:79:
                    11:ad:65:b3:fb:02:b1:10:e1:4e:5e:77:97:60:0b:
                    08:2e:0a:ec:9b:87:24:36:f1:44:63:9c:a5:77:4d:
                    1c:aa:04:ce:99:25:59:cd:31:61:56:5d:12:82:52:
                    8d:3b:a5:90:f6:6d:c4:b5:cf:b6:6a:58:2f:76:ec:
                    5b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:51:7D:27:27:54:1E:49:3E:CA:50:B6:6F:98:E2:07:0E:FC:0D:F9
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3137303a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:170::/45

    Signature Algorithm: sha256WithRSAEncryption
         9e:77:bc:8c:66:85:f0:da:7e:00:1b:f4:21:14:b7:7c:93:40:
         c3:40:ab:f8:be:95:d5:00:21:96:28:e6:a2:cb:07:e8:74:7d:
         e7:3e:83:f0:04:7a:70:45:d5:3f:09:0e:0d:b8:c9:4c:e8:13:
         47:d4:b9:64:3f:c8:f1:05:4f:48:9a:aa:ad:b0:e8:ca:38:6d:
         41:22:eb:0e:b1:eb:ea:7c:af:82:b7:a9:13:a3:a3:0f:7a:7b:
         4a:be:8f:6d:61:86:af:69:a5:c2:0d:a4:20:56:e9:98:00:ed:
         0f:31:97:74:c9:45:87:d7:3c:29:11:04:bf:85:2a:f0:78:48:
         b0:c8:50:04:ed:7e:b2:cd:b7:8a:ed:d8:33:fd:2d:e9:a9:d0:
         5f:3a:e6:f4:89:e4:b8:1a:5b:b8:74:50:af:b2:83:f6:fc:44:
         5e:42:e5:25:cc:58:12:7c:47:7a:e9:d6:b2:94:93:c5:64:de:
         46:fd:4b:b6:34:11:8a:38:78:e9:fa:24:78:d5:e2:58:fc:c7:
         5d:c9:6a:e8:0e:a5:c0:05:a4:68:b8:8f:ad:18:67:ee:6e:f5:
         a3:12:71:cc:b6:00:ee:2b:11:90:8f:a0:ee:0d:b0:a0:34:52:
         91:f5:71:82:92:a7:43:13:d7:ec:c7:4b:e1:e5:6f:1a:fb:94:
         5c:bb:ec:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:28:14 2026 by rpki-client