Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3166383a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3166383a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          2CJKUD7xtikJm98spNehXFuQtN0C4kauUlZ49lXercs=
Subject key identifier:   AC:8C:17:B6:55:89:F9:F1:29:43:A7:41:A6:04:F6:4D:F9:48:22:10
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       10D9C8EC5FE9CC156A3B3ED3D6A21C7BB11D323E
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3166383a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 03 Jul 2026 15:44:25 +0000
ROA not before:           Fri 03 Jul 2026 15:39:25 +0000
ROA not after:            Fri 02 Jul 2027 15:44:25 +0000
asID:                     272710
IP address blocks:        2804:8774:1f8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 23:19:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d9:c8:ec:5f:e9:cc:15:6a:3b:3e:d3:d6:a2:1c:7b:b1:1d:32:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Jul  3 15:39:25 2026 GMT
            Not After : Jul  2 15:44:25 2027 GMT
        Subject: CN=AC8C17B65589F9F12943A741A604F64DF9482210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5c:19:9b:99:b6:99:01:a6:6b:9a:b2:d4:59:
                    ce:d8:17:85:8d:21:6e:4b:18:f2:f5:87:c0:e3:07:
                    ae:3b:9a:76:b4:5c:aa:73:b2:a0:08:27:e0:0a:05:
                    2c:9d:17:76:be:81:fa:e7:09:42:6c:25:50:81:44:
                    db:c3:6a:3e:24:ae:be:ef:94:da:c2:12:66:06:70:
                    9e:cd:cc:68:36:b3:df:b7:7e:6e:73:35:ed:5f:51:
                    38:c3:74:81:44:1e:7c:ab:19:b5:98:c1:dd:88:fa:
                    3f:f0:73:5e:52:54:2e:4a:42:87:ca:fd:dc:a3:18:
                    1d:be:0c:08:37:c0:a1:7d:c8:1d:61:1d:21:19:62:
                    53:ce:b7:5c:a0:ff:58:cf:89:be:b8:5d:17:f6:8e:
                    f4:6a:cd:34:f5:60:2e:33:a5:cb:a6:37:57:63:76:
                    bf:49:db:ca:14:9b:ac:81:a8:05:e5:08:22:d7:2d:
                    c8:03:a9:9c:8a:c4:f9:62:0b:cd:77:f4:aa:cf:0d:
                    b9:15:84:a5:0c:eb:c9:d4:6c:86:49:66:02:21:d0:
                    60:11:fd:2c:fc:48:5e:fc:a5:d5:59:84:bd:ae:82:
                    e3:b3:01:62:12:72:ef:e2:9e:91:5d:85:d2:5b:b0:
                    26:7e:fa:b8:7f:ff:a3:07:ab:be:5f:1e:f8:e2:52:
                    64:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8C:17:B6:55:89:F9:F1:29:43:A7:41:A6:04:F6:4D:F9:48:22:10
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3166383a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:1f8::/45

    Signature Algorithm: sha256WithRSAEncryption
         5a:7f:96:58:6f:08:f8:fb:3a:c6:a3:a8:27:0f:c0:48:75:dd:
         68:e8:3c:e3:99:07:ca:cf:30:0e:8b:19:2e:85:5e:66:f2:c6:
         a5:7c:9a:02:cd:fb:94:d1:22:b2:81:ec:a4:63:68:25:97:54:
         3b:63:0d:bf:18:49:19:08:f0:9a:88:df:75:36:e5:cc:91:93:
         fa:e7:d4:8f:a6:18:28:59:ca:3e:68:46:b9:21:50:90:d1:d5:
         1f:24:c8:c5:d6:36:3e:37:78:60:81:47:1e:b2:7f:89:ba:c0:
         85:a3:31:5f:53:61:95:16:20:a8:77:82:88:0c:b9:50:24:f5:
         7d:ba:f4:e5:9e:d1:14:2b:60:fc:9f:69:ef:ac:71:c1:32:a2:
         5c:6d:d5:fb:98:87:84:7b:e7:92:42:6b:6e:37:6d:03:a9:11:
         4b:07:be:88:2b:4c:93:42:0e:be:76:29:c1:23:dc:f0:4f:02:
         4d:a1:6a:b8:ce:1c:c1:40:5a:f3:ca:47:fd:bf:bb:72:03:b4:
         a1:14:1f:0d:46:f4:d2:ad:3d:4b:b3:30:61:b8:cc:17:3e:0b:
         ec:a3:f8:f8:ed:51:32:e8:b1:69:de:bc:7d:d4:06:37:19:88:
         bf:92:7c:38:ac:14:2a:ab:f1:fe:94:00:80:bf:9d:65:88:68:
         b2:8d:e9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:52:53 2026 by rpki-client