Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3630303a3a2f34302d3430203d3e20323732373130.roa
File:                     323830343a383737343a3630303a3a2f34302d3430203d3e20323732373130.roa (raw, json)
Hash identifier:          fct6uO13lOw9n4Z13H/3voTsxB3DiHbQcfDi0mwxZ30=
Subject key identifier:   7B:E5:5C:28:8C:FD:DA:03:E2:6A:E8:19:BC:77:A4:0C:41:A9:93:C3
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       0DB45F14FBE3EBE65D0F252C9BD7FE8A11DFEDB2
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3630303a3a2f34302d3430203d3e20323732373130.roa
Signing time:             Fri 03 Jul 2026 15:44:26 +0000
ROA not before:           Fri 03 Jul 2026 15:39:26 +0000
ROA not after:            Fri 02 Jul 2027 15:44:26 +0000
asID:                     272710
IP address blocks:        2804:8774:600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 26 Jul 2026 00:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b4:5f:14:fb:e3:eb:e6:5d:0f:25:2c:9b:d7:fe:8a:11:df:ed:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Jul  3 15:39:26 2026 GMT
            Not After : Jul  2 15:44:26 2027 GMT
        Subject: CN=7BE55C288CFDDA03E26AE819BC77A40C41A993C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:97:89:2c:d4:49:ef:e5:c8:81:72:65:7a:6b:
                    64:4e:89:d0:8d:a0:10:4d:1f:5f:a9:cb:dd:da:7c:
                    1b:c4:42:c4:42:f4:79:57:c7:6e:c5:10:79:2e:f3:
                    5c:dc:dd:77:cb:fd:e0:ee:d0:1b:ff:e7:fc:e5:57:
                    3c:ca:23:93:53:ab:75:dd:4e:d3:35:7a:31:b3:16:
                    4f:25:0c:80:eb:b9:f6:8c:f1:5c:cb:96:09:62:76:
                    cc:bc:1e:da:69:ac:09:96:3b:33:a7:ef:63:0b:36:
                    d5:5d:03:91:06:51:b1:88:5b:f9:77:e4:67:d5:24:
                    32:17:10:59:2a:93:2f:45:fd:e7:71:fc:32:72:af:
                    08:6b:c0:aa:d4:be:cb:bb:07:81:9e:2c:e3:9a:6e:
                    c7:64:ac:87:9f:bd:71:6c:3d:42:5b:4b:66:7c:fe:
                    1d:e1:19:05:0c:fc:09:29:f3:01:6f:cf:5e:35:9d:
                    8e:42:25:71:ce:b2:bd:69:c6:10:ab:b6:07:10:ec:
                    41:cc:35:e9:bc:ac:ae:48:a6:d2:41:69:23:3b:a3:
                    6b:95:ad:13:eb:ac:5c:eb:18:57:8b:26:18:fe:3c:
                    86:7d:b2:ac:e8:18:f4:f0:67:65:ad:5e:81:ab:8a:
                    9c:3c:56:d8:f3:02:c2:30:aa:ea:70:09:58:cf:5f:
                    e0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E5:5C:28:8C:FD:DA:03:E2:6A:E8:19:BC:77:A4:0C:41:A9:93:C3
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3630303a3a2f34302d3430203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:31:27:1c:85:27:79:0c:61:b4:6b:9e:70:95:c9:59:90:25:
         45:b7:59:d9:f7:af:23:b9:d5:8f:c5:48:70:2e:6d:11:a0:20:
         63:62:4d:01:31:3e:b8:d4:cd:0e:9b:94:7a:de:1a:9b:58:11:
         79:d6:d0:40:92:af:cf:d2:87:20:ff:3f:85:d8:1d:a5:74:27:
         d6:bd:03:db:7d:d3:31:53:c6:09:32:e7:41:1c:22:4b:7b:a9:
         f2:a4:23:5d:ce:11:55:59:9b:d6:a4:c8:e3:a6:51:19:4b:2d:
         24:89:02:3b:ad:10:7a:06:92:13:a4:4f:ef:0e:43:f6:d2:d2:
         84:5d:cb:35:92:7c:e0:ac:2b:ea:9d:3e:14:74:4a:7e:24:9f:
         e5:2a:62:1e:3d:ef:dd:2a:29:1f:cb:7d:72:df:a7:82:23:3a:
         a4:aa:87:83:25:1d:4e:eb:27:4a:07:17:32:f0:3e:73:6b:1a:
         d3:d9:c5:85:54:8f:f8:12:61:ae:a7:ba:d9:00:0f:38:b1:cd:
         62:42:50:4c:19:3e:b0:d9:de:f0:52:eb:39:c1:33:dc:80:87:
         c2:eb:40:c0:11:79:1e:db:99:c2:d4:20:8f:c4:b8:57:72:fa:
         33:38:86:9a:d7:61:38:de:f6:50:97:76:f5:64:26:39:28:83:
         5b:11:9c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:05:43 2026 by rpki-client