Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3a2f33322d3438203d3e20323732373130.roa
File:                     323830343a383737343a3a2f33322d3438203d3e20323732373130.roa (raw, json)
Hash identifier:          QMRhzm1xkrrQNm23LspwS7kVymOtvBFCF4/tlh+cP3U=
Subject key identifier:   F8:19:0F:15:84:62:3F:DC:66:C1:2D:3A:8C:62:AE:F5:78:DC:AD:F1
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       1461980E0253308EAD3F0735D61CC9330973DD18
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3a2f33322d3438203d3e20323732373130.roa
Signing time:             Fri 22 Aug 2025 22:06:32 +0000
ROA not before:           Fri 22 Aug 2025 22:01:32 +0000
ROA not after:            Fri 21 Aug 2026 22:06:32 +0000
asID:                     272710
IP address blocks:        2804:8774::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 17:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:61:98:0e:02:53:30:8e:ad:3f:07:35:d6:1c:c9:33:09:73:dd:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 22 22:01:32 2025 GMT
            Not After : Aug 21 22:06:32 2026 GMT
        Subject: CN=F8190F1584623FDC66C12D3A8C62AEF578DCADF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c1:94:ec:95:ea:ab:ff:36:41:00:c2:cf:20:
                    e6:88:d0:26:ad:44:6e:d1:ec:6b:b6:52:7a:31:0a:
                    07:26:84:04:c2:c2:7b:36:de:c4:74:bb:23:eb:03:
                    ef:5e:58:81:83:59:5e:14:9e:81:17:04:9c:de:00:
                    d8:f9:be:be:51:68:73:47:93:61:45:25:c1:e1:35:
                    78:3b:c9:6e:e8:59:d3:c8:7a:43:ad:47:83:d5:d6:
                    15:40:a9:5b:8a:4c:67:62:ac:73:e7:3c:17:74:6b:
                    b0:48:95:b9:be:f5:a5:cd:28:49:90:87:65:60:c9:
                    20:ef:08:29:02:29:ea:87:d7:c3:18:0f:76:6d:4f:
                    44:02:8d:d7:57:8a:d6:32:0d:e7:1f:f4:1f:c6:f4:
                    fc:be:8e:f9:30:29:3e:72:f6:a5:6d:6f:21:ba:5b:
                    4e:dc:18:11:64:65:a1:de:9e:52:d1:a2:0a:82:41:
                    fe:8c:82:49:87:a5:c4:9d:52:63:16:31:49:24:66:
                    84:5d:9d:4e:a4:1c:ae:77:6c:db:a7:b5:61:3a:33:
                    5e:5b:71:11:10:1f:fe:e3:c4:9f:31:f1:56:3e:6e:
                    e3:9e:31:d2:d3:e3:0f:e4:2e:44:26:cf:84:d0:b6:
                    22:b1:2b:da:c1:68:65:c2:9a:30:3d:fd:5f:45:f1:
                    e4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:19:0F:15:84:62:3F:DC:66:C1:2D:3A:8C:62:AE:F5:78:DC:AD:F1
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3a2f33322d3438203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:23:47:75:3e:86:58:03:ba:a2:f1:f1:79:c7:8b:f3:c8:f8:
         a5:a8:7e:e0:39:c5:95:aa:66:5e:a4:f0:56:0f:ec:f0:c2:5d:
         80:d8:f5:91:49:5a:72:bf:cd:2c:72:e8:e5:7f:01:81:ca:be:
         05:56:15:74:95:44:39:18:a2:ed:2a:6d:c1:bb:10:1f:ea:81:
         9e:0d:aa:9c:50:12:63:09:13:a9:23:a2:ef:b1:82:dd:6f:ba:
         aa:fc:e7:c5:b4:af:1e:2c:c7:c2:f6:d8:4d:a9:df:2a:ae:5b:
         0b:9b:56:24:74:d5:3d:a0:a8:08:ec:23:b1:e3:b3:e0:77:0e:
         35:89:ab:b4:0b:50:77:f6:d1:ee:44:92:bc:f4:59:b0:98:75:
         e4:96:6b:61:71:87:62:7b:a8:93:6d:02:e2:57:e8:68:a0:88:
         31:c5:1d:79:d1:0d:fe:db:fc:28:37:c3:96:27:ca:36:8c:2e:
         0d:67:d7:69:4e:0b:fa:7c:5d:ea:08:89:5f:94:d1:ad:5c:ec:
         d5:00:85:dc:88:0e:53:4d:48:12:ec:09:52:3a:1a:23:57:b1:
         9e:82:a1:8b:4a:12:67:3b:20:0b:c6:5f:d0:11:c6:3d:9b:a9:
         ca:33:cc:5e:05:91:e9:fd:1f:b7:ec:9b:7d:b0:23:59:a6:0f:
         6b:7b:91:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:06:01 2025 by rpki-client