Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3139383a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3139383a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          v+xR3yeo9pQtJWdRkI/g8Qa6RuG7H+zgRDH8EXFf3CM=
Subject key identifier:   CA:78:91:5E:CF:98:A7:30:25:B7:4D:EE:70:65:43:EF:E4:11:2D:5D
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       4A95D418CFC9D58F9779F663ABAA6391AD0BAC11
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3139383a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 03 Jul 2026 15:44:27 +0000
ROA not before:           Fri 03 Jul 2026 15:39:27 +0000
ROA not after:            Fri 02 Jul 2027 15:44:27 +0000
asID:                     272710
IP address blocks:        2804:8774:198::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 23:19:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:95:d4:18:cf:c9:d5:8f:97:79:f6:63:ab:aa:63:91:ad:0b:ac:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Jul  3 15:39:27 2026 GMT
            Not After : Jul  2 15:44:27 2027 GMT
        Subject: CN=CA78915ECF98A73025B74DEE706543EFE4112D5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:91:a4:be:b4:67:06:a9:ff:7a:4d:23:bd:5d:
                    3b:d4:23:68:56:ba:25:7a:d1:3e:cf:83:05:80:77:
                    12:ec:92:54:ab:70:34:7a:82:1e:4d:ed:43:06:3d:
                    c6:ca:ce:c9:99:79:ac:c4:82:9e:39:f5:3c:1d:e4:
                    f6:40:f9:3b:26:bc:36:69:54:0c:1e:94:85:70:25:
                    6f:7c:18:df:f6:b5:57:9d:e0:1f:05:04:fe:65:99:
                    5e:77:ff:1f:ad:e8:3b:c2:79:93:01:24:7d:d6:ad:
                    ae:28:7a:23:29:85:00:05:de:1e:fb:3a:3f:2f:0a:
                    ea:0b:57:ac:d0:4f:ae:36:44:8c:4b:33:82:f1:5d:
                    25:3b:27:30:72:44:7f:14:55:af:f1:b0:70:af:03:
                    5c:7a:e4:13:6d:39:51:cb:82:b6:44:a1:14:a3:fa:
                    d0:a1:5a:36:e2:28:1c:82:0b:e0:69:df:75:8c:ad:
                    70:a2:bb:48:1b:29:8a:30:d2:0f:d8:da:4b:17:52:
                    b1:c6:d9:88:ac:bf:75:b6:89:4a:b5:e2:de:fd:cc:
                    93:90:7b:09:63:25:0d:b5:6d:99:f6:97:b3:b5:eb:
                    bb:5f:38:51:b3:92:85:44:ad:3a:23:b0:ae:c5:d4:
                    e2:13:1d:e0:e8:b2:c7:0c:72:4a:38:06:02:df:d6:
                    38:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:78:91:5E:CF:98:A7:30:25:B7:4D:EE:70:65:43:EF:E4:11:2D:5D
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3139383a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:198::/45

    Signature Algorithm: sha256WithRSAEncryption
         12:16:63:22:8f:01:8f:7d:72:fa:fb:d3:50:72:da:a8:fa:91:
         c4:51:8c:0f:42:e2:1e:24:30:c7:2f:22:86:07:14:75:78:62:
         f9:49:24:2e:6b:c0:28:78:7a:da:ae:4b:c2:3b:b1:2c:9b:61:
         a8:aa:4b:55:c9:ac:3b:1d:e9:15:b6:c2:c8:fd:a1:bf:bb:d1:
         ec:70:0e:3d:11:c7:29:fa:d6:d8:b2:a3:94:9b:15:96:ce:79:
         eb:2a:fe:3d:19:2e:1e:b9:3b:0c:ca:b0:40:ca:32:00:b2:94:
         c8:3c:34:7d:67:e5:c3:ef:7c:a5:49:f6:95:c2:55:75:89:76:
         f0:54:d7:63:af:bb:e4:e7:6f:b1:46:44:c6:60:3e:10:f1:12:
         9e:42:94:21:5f:6b:f9:88:fb:68:cf:01:04:52:5c:0f:40:7a:
         a3:3e:1c:7b:07:74:6b:ac:9e:f8:33:93:33:79:59:d0:ac:93:
         86:3d:6f:e0:48:ec:ba:f0:e0:8a:ae:fe:43:a9:03:e9:52:dc:
         a3:5c:e0:75:7a:9a:47:df:64:4d:e5:8a:c7:e9:55:68:bc:5d:
         a2:c0:95:b7:25:75:62:4a:f0:3f:90:a5:e1:84:04:da:44:86:
         a3:2d:f9:ed:65:b9:1e:22:ac:40:b0:69:dc:d7:53:75:da:20:
         a6:b0:f3:5e
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUSpXUGM/J1Y+XefZjq6pjka0LrBEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVEMzdFMjJFQjhFNTY2OEYwOTM1NDZFNjM0QjU1QjBB
NzgwRDI0RjAeFw0yNjA3MDMxNTM5MjdaFw0yNzA3MDIxNTQ0MjdaMDMxMTAvBgNV
BAMTKENBNzg5MTVFQ0Y5OEE3MzAyNUI3NERFRTcwNjU0M0VGRTQxMTJENUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUkaS+tGcGqf96TSO9XTvUI2hW
uiV60T7PgwWAdxLsklSrcDR6gh5N7UMGPcbKzsmZeazEgp459Twd5PZA+TsmvDZp
VAwelIVwJW98GN/2tVed4B8FBP5lmV53/x+t6DvCeZMBJH3Wra4oeiMphQAF3h77
Oj8vCuoLV6zQT642RIxLM4LxXSU7JzByRH8UVa/xsHCvA1x65BNtOVHLgrZEoRSj
+tChWjbiKByCC+Bp33WMrXCiu0gbKYow0g/Y2ksXUrHG2Yisv3W2iUq14t79zJOQ
ewljJQ21bZn2l7O167tfOFGzkoVErTojsK7F1OITHeDosscMcko4BgLf1jj3AgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUyniRXs+YpzAlt03ucGVD7+QRLV0wHwYDVR0j
BBgwFoAUtdN+IuuOVmjwk1RuY0tVsKeA0k8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkRGU3VTRU1YSnJkV0JHVnFFYmg0WlMxZHQ5bUFQRmRuUkJNVnEydUEz
ZFIvMC9CNUQzN0UyMkVCOEU1NjY4RjA5MzU0NkU2MzRCNTVCMEE3ODBEMjRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1RDM3RTIyRUI4RTU2NjhG
MDkzNTQ2RTYzNEI1NUIwQTc4MEQyNEYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZERlN1U0VNWEpyZFdCR1ZxRWJoNFpTMWR0OW1BUEZkblJCTVZxMnVBM2RSLzAv
MzIzODMwMzQzYTM4MzczNzM0M2EzMTM5MzgzYTNhMmYzNDM1MmQzNDM1MjAzZDNl
MjAzMjM3MzIzNzMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwMoBId0AZgwDQYJKoZIhvcNAQELBQAD
ggEBABIWYyKPAY99cvr701By2qj6kcRRjA9C4h4kMMcvIoYHFHV4YvlJJC5rwCh4
etquS8I7sSybYaiqS1XJrDsd6RW2wsj9ob+70exwDj0Rxyn61tiyo5SbFZbOeesq
/j0ZLh65OwzKsEDKMgCylMg8NH1n5cPvfKVJ9pXCVXWJdvBU12Ovu+Tnb7FGRMZg
PhDxEp5ClCFfa/mI+2jPAQRSXA9AeqM+HHsHdGusnvgzkzN5WdCsk4Y9b+BI7Lrw
4Iqu/kOpA+lS3KNc4HV6mkffZE3lisfpVWi8XaLAlbcldWJK8D+QpeGEBNpEhqMt
+e1luR4irECwadzXU3XaIKaw814=
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:53:35 2026 by rpki-client