Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3265303a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3265303a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          k8W0LG+x3Ltt5jJwiPH7YxL5264foFZdp+Oi6Qfzop4=
Subject key identifier:   12:BD:C9:79:4D:AC:6E:38:DB:A0:DA:17:DE:D9:8C:D9:27:BD:BF:23
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       44FCD83D293EB94D037283DCBB08ABD19F0C5BBE
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3265303a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 03 Jul 2026 15:44:27 +0000
ROA not before:           Fri 03 Jul 2026 15:39:27 +0000
ROA not after:            Fri 02 Jul 2027 15:44:27 +0000
asID:                     272710
IP address blocks:        2804:8774:2e0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 26 Jul 2026 00:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:fc:d8:3d:29:3e:b9:4d:03:72:83:dc:bb:08:ab:d1:9f:0c:5b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Jul  3 15:39:27 2026 GMT
            Not After : Jul  2 15:44:27 2027 GMT
        Subject: CN=12BDC9794DAC6E38DBA0DA17DED98CD927BDBF23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ef:66:dd:57:0c:b8:c4:c3:0f:df:da:03:a1:
                    35:31:cd:f2:07:51:be:c3:67:0a:88:14:f9:47:47:
                    c5:00:95:d5:2d:16:1a:fa:5a:af:93:d5:7f:4f:6b:
                    9a:9b:e1:b1:a1:f0:e1:98:c4:46:11:6a:1a:3a:2d:
                    c4:e5:c2:bd:d5:12:59:31:c5:7c:ee:21:3f:0d:bf:
                    ec:c4:7c:0b:8d:ee:68:1b:41:c5:f7:07:c4:74:ce:
                    f5:af:ae:01:a7:a6:a3:0e:c1:68:29:ad:e8:df:c5:
                    7f:dc:d3:e9:f5:74:82:fc:cc:98:8b:23:03:62:14:
                    44:37:92:82:48:51:4c:72:0c:ca:ce:6f:ed:f3:81:
                    e0:de:20:9e:29:a6:60:75:7c:98:fa:b9:ac:4a:41:
                    9b:0d:71:ba:30:d1:7d:84:d1:7d:23:2a:bf:8d:01:
                    75:bf:bc:5d:2d:05:77:8a:29:46:61:6d:8b:77:e7:
                    94:06:b5:65:86:4b:0b:d7:84:35:2f:da:2b:d3:fd:
                    95:4b:6d:36:1b:fc:cc:29:49:7d:73:ed:0f:2b:f3:
                    24:2a:b8:72:2a:e2:16:e1:57:1f:a5:09:7d:42:bf:
                    e4:f2:60:64:e3:11:c1:cd:65:34:e7:42:63:bb:01:
                    4e:fc:07:27:26:b5:b0:93:33:7f:f4:69:a1:59:5a:
                    21:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BD:C9:79:4D:AC:6E:38:DB:A0:DA:17:DE:D9:8C:D9:27:BD:BF:23
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3265303a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:2e0::/45

    Signature Algorithm: sha256WithRSAEncryption
         4e:0d:23:ed:cd:4e:18:1f:ee:07:6a:ca:20:13:e7:83:5e:4b:
         b1:da:4a:36:a8:dc:cc:a3:b7:ed:42:50:86:a2:14:b1:08:86:
         4e:3a:d9:15:20:a4:a8:d0:b5:c3:31:0f:b9:bc:bc:c3:1b:dd:
         1e:97:bc:35:f8:93:16:2e:ef:03:93:0d:e2:44:8a:9b:f8:62:
         a6:4e:e6:0c:34:82:65:aa:a4:22:c4:e8:3c:11:84:65:29:5b:
         b5:05:c8:22:c8:8f:e1:74:8e:d7:12:a4:97:b5:8d:46:c1:ad:
         4d:4e:ce:1f:09:56:d7:04:28:58:5f:3c:cc:83:20:3e:00:5d:
         b4:8e:d8:69:f2:aa:1d:2f:4f:64:b6:1c:cd:e6:36:b5:90:29:
         48:f3:d6:e7:03:12:33:dd:82:9f:3e:6a:bf:a7:74:bb:04:0b:
         16:fb:d4:62:9e:5d:4e:a6:38:bc:d2:39:be:87:dc:55:55:da:
         7a:7a:48:f4:80:17:f5:e9:5a:10:4d:33:76:68:31:4b:81:c7:
         bf:ce:2d:d0:3e:d8:83:84:38:78:54:ab:14:ce:f2:7e:36:ad:
         6b:b3:30:f7:ba:88:dd:fb:02:37:04:ca:17:11:6a:40:0c:30:
         8d:8f:83:1a:3e:03:53:45:64:ea:a2:a4:b4:d3:ef:ed:e5:5a:
         54:2e:34:58
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIURPzYPSk+uU0DcoPcuwir0Z8MW74wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVEMzdFMjJFQjhFNTY2OEYwOTM1NDZFNjM0QjU1QjBB
NzgwRDI0RjAeFw0yNjA3MDMxNTM5MjdaFw0yNzA3MDIxNTQ0MjdaMDMxMTAvBgNV
BAMTKDEyQkRDOTc5NERBQzZFMzhEQkEwREExN0RFRDk4Q0Q5MjdCREJGMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC072bdVwy4xMMP39oDoTUxzfIH
Ub7DZwqIFPlHR8UAldUtFhr6Wq+T1X9Pa5qb4bGh8OGYxEYRaho6LcTlwr3VElkx
xXzuIT8Nv+zEfAuN7mgbQcX3B8R0zvWvrgGnpqMOwWgprejfxX/c0+n1dIL8zJiL
IwNiFEQ3koJIUUxyDMrOb+3zgeDeIJ4ppmB1fJj6uaxKQZsNcbow0X2E0X0jKr+N
AXW/vF0tBXeKKUZhbYt355QGtWWGSwvXhDUv2ivT/ZVLbTYb/MwpSX1z7Q8r8yQq
uHIq4hbhVx+lCX1Cv+TyYGTjEcHNZTTnQmO7AU78BycmtbCTM3/0aaFZWiEzAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUEr3JeU2sbjjboNoX3tmM2Se9vyMwHwYDVR0j
BBgwFoAUtdN+IuuOVmjwk1RuY0tVsKeA0k8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkRGU3VTRU1YSnJkV0JHVnFFYmg0WlMxZHQ5bUFQRmRuUkJNVnEydUEz
ZFIvMC9CNUQzN0UyMkVCOEU1NjY4RjA5MzU0NkU2MzRCNTVCMEE3ODBEMjRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1RDM3RTIyRUI4RTU2NjhG
MDkzNTQ2RTYzNEI1NUIwQTc4MEQyNEYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZERlN1U0VNWEpyZFdCR1ZxRWJoNFpTMWR0OW1BUEZkblJCTVZxMnVBM2RSLzAv
MzIzODMwMzQzYTM4MzczNzM0M2EzMjY1MzAzYTNhMmYzNDM1MmQzNDM1MjAzZDNl
MjAzMjM3MzIzNzMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwMoBId0AuAwDQYJKoZIhvcNAQELBQAD
ggEBAE4NI+3NThgf7gdqyiAT54NeS7HaSjao3Myjt+1CUIaiFLEIhk462RUgpKjQ
tcMxD7m8vMMb3R6XvDX4kxYu7wOTDeJEipv4YqZO5gw0gmWqpCLE6DwRhGUpW7UF
yCLIj+F0jtcSpJe1jUbBrU1Ozh8JVtcEKFhfPMyDID4AXbSO2Gnyqh0vT2S2HM3m
NrWQKUjz1ucDEjPdgp8+ar+ndLsECxb71GKeXU6mOLzSOb6H3FVV2np6SPSAF/Xp
WhBNM3ZoMUuBx7/OLdA+2IOEOHhUqxTO8n42rWuzMPe6iN37AjcEyhcRakAMMI2P
gxo+A1NFZOqipLTT7+3lWlQuNFg=
-----END CERTIFICATE-----
Generated at Sat Jul 25 01:43:49 2026 by rpki-client