Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/323830343a326537633a323430303a3a2f34322d3432203d3e20323635333438.roa
File:                     323830343a326537633a323430303a3a2f34322d3432203d3e20323635333438.roa (raw, json)
Hash identifier:          S0Z1b+z2OxTRDx8mqlcTyIU32RwSGiswPsxcDnmab+Y=
Subject key identifier:   EB:DF:A8:E4:83:D0:1F:1F:B1:4A:8A:A0:B5:7C:49:01:2A:C0:55:88
Certificate issuer:       /CN=E967E72D29BE192905C03601053878C71BB621A0
Certificate serial:       4E6665E027868946664D8237C93375F54CEEA151
Authority key identifier: E9:67:E7:2D:29:BE:19:29:05:C0:36:01:05:38:78:C7:1B:B6:21:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E967E72D29BE192905C03601053878C71BB621A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/323830343a326537633a323430303a3a2f34322d3432203d3e20323635333438.roa
Signing time:             Tue 22 Jul 2025 16:10:27 +0000
ROA not before:           Tue 22 Jul 2025 16:05:27 +0000
ROA not after:            Tue 21 Jul 2026 16:10:27 +0000
asID:                     265348
IP address blocks:        2804:2e7c:2400::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/E967E72D29BE192905C03601053878C71BB621A0.crl
                          rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/E967E72D29BE192905C03601053878C71BB621A0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E967E72D29BE192905C03601053878C71BB621A0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 12:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:66:65:e0:27:86:89:46:66:4d:82:37:c9:33:75:f5:4c:ee:a1:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E967E72D29BE192905C03601053878C71BB621A0
        Validity
            Not Before: Jul 22 16:05:27 2025 GMT
            Not After : Jul 21 16:10:27 2026 GMT
        Subject: CN=EBDFA8E483D01F1FB14A8AA0B57C49012AC05588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:57:7c:d1:cb:2a:dc:e9:c8:20:5d:22:09:84:
                    16:2f:b5:c1:de:48:97:1b:b9:7f:c2:67:ce:cd:4e:
                    59:6d:fc:1e:75:36:fc:2a:54:34:e9:82:81:20:99:
                    e2:34:cd:80:89:f7:91:af:84:c1:cc:ca:d6:95:c9:
                    a7:7e:85:71:75:08:50:49:55:90:11:3f:9a:80:74:
                    05:d8:18:d1:a9:95:f6:1d:c0:6d:c8:c4:3c:fc:ca:
                    ca:d6:03:07:2d:dd:4b:bc:57:a4:6d:67:b8:ad:81:
                    ac:ab:3d:46:4b:1f:3a:7b:ed:0a:9f:e6:f1:75:6b:
                    1b:45:61:c9:98:8a:2f:be:4f:5a:41:63:69:a5:2b:
                    b7:5e:3f:f3:16:8e:20:14:f9:72:da:0e:56:e0:66:
                    58:32:59:e4:a3:b6:33:73:25:fc:06:21:77:0f:34:
                    29:89:b2:14:89:8e:13:0b:65:e8:0f:a2:4a:89:49:
                    4e:b2:7d:9c:d3:13:84:91:31:98:ef:38:0c:90:83:
                    2a:f8:99:08:1a:b7:df:39:3a:09:0f:76:ac:13:1e:
                    71:87:07:f5:3a:9b:f6:7a:34:6c:d3:5a:dd:9a:8c:
                    c9:d4:3e:e5:76:ab:5a:ed:25:40:cc:03:89:40:b8:
                    97:e3:37:08:86:28:44:5f:39:f1:09:29:c1:78:a3:
                    4f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DF:A8:E4:83:D0:1F:1F:B1:4A:8A:A0:B5:7C:49:01:2A:C0:55:88
            X509v3 Authority Key Identifier:
                keyid:E9:67:E7:2D:29:BE:19:29:05:C0:36:01:05:38:78:C7:1B:B6:21:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/E967E72D29BE192905C03601053878C71BB621A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E967E72D29BE192905C03601053878C71BB621A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/323830343a326537633a323430303a3a2f34322d3432203d3e20323635333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e7c:2400::/42

    Signature Algorithm: sha256WithRSAEncryption
         64:bc:b9:b5:4e:44:78:d8:0c:65:52:f0:63:b0:71:58:24:0b:
         ff:a9:f5:d2:eb:6c:41:cd:27:e5:fa:62:12:f0:55:e9:11:02:
         7a:9f:8a:d4:90:10:fb:35:7d:97:5b:c5:93:d6:fd:47:72:5f:
         3c:37:82:eb:d5:e7:a8:e8:3e:0e:84:28:84:19:5a:29:f9:57:
         f1:ae:20:44:08:f1:a8:07:68:0d:3a:5b:db:64:31:4e:86:14:
         14:2e:20:26:be:7c:69:a1:90:4f:3b:33:63:73:1e:78:94:fc:
         95:59:ae:c3:5a:ab:86:2a:4b:5f:6c:41:db:e1:e0:e4:53:fc:
         df:bc:fe:e9:96:51:b4:70:73:6c:77:22:38:14:19:90:7c:73:
         a3:d4:fd:89:69:83:b6:0e:4c:d6:39:08:02:cf:af:38:b0:b1:
         64:db:85:c2:5a:0d:ec:f4:b8:70:3d:aa:c8:88:de:c1:9b:f7:
         bd:59:0b:58:5f:4f:67:8d:a4:af:56:3e:d8:64:26:0d:dd:ff:
         42:18:63:8b:44:49:32:4f:29:da:88:a0:f5:8f:28:dd:ea:0d:
         e0:21:f4:5a:b4:a6:17:e8:ed:cb:79:b8:c1:8c:73:8e:89:36:
         88:4e:90:4b:75:f8:ed:93:d4:40:f5:c5:75:64:a9:0e:49:0c:
         6f:09:29:33
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUTmZl4CeGiUZmTYI3yTN19UzuoVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk2N0U3MkQyOUJFMTkyOTA1QzAzNjAxMDUzODc4Qzcx
QkI2MjFBMDAeFw0yNTA3MjIxNjA1MjdaFw0yNjA3MjExNjEwMjdaMDMxMTAvBgNV
BAMTKEVCREZBOEU0ODNEMDFGMUZCMTRBOEFBMEI1N0M0OTAxMkFDMDU1ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyV3zRyyrc6cggXSIJhBYvtcHe
SJcbuX/CZ87NTllt/B51NvwqVDTpgoEgmeI0zYCJ95GvhMHMytaVyad+hXF1CFBJ
VZARP5qAdAXYGNGplfYdwG3IxDz8ysrWAwct3Uu8V6RtZ7itgayrPUZLHzp77Qqf
5vF1axtFYcmYii++T1pBY2mlK7deP/MWjiAU+XLaDlbgZlgyWeSjtjNzJfwGIXcP
NCmJshSJjhMLZegPokqJSU6yfZzTE4SRMZjvOAyQgyr4mQgat985OgkPdqwTHnGH
B/U6m/Z6NGzTWt2ajMnUPuV2q1rtJUDMA4lAuJfjNwiGKERfOfEJKcF4o0/XAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQU69+o5IPQHx+xSoqgtXxJASrAVYgwHwYDVR0j
BBgwFoAU6WfnLSm+GSkFwDYBBTh4xxu2IaAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnBoelRHQzZLWjZnRE5tbWpDcTdzMllpbUtVZFlvZWJpVndxaDFiU2NW
blAvMC9FOTY3RTcyRDI5QkUxOTI5MDVDMDM2MDEwNTM4NzhDNzFCQjYyMUEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U5NjdFNzJEMjlCRTE5Mjkw
NUMwMzYwMTA1Mzg3OEM3MUJCNjIxQTAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZwaHpUR0M2S1o2Z0RObW1qQ3E3czJZaW1LVWRZb2ViaVZ3cWgxYlNjVm5QLzAv
MzIzODMwMzQzYTMyNjUzNzYzM2EzMjM0MzAzMDNhM2EyZjM0MzIyZDM0MzIyMDNk
M2UyMDMyMzYzNTMzMzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBigELnwkADANBgkqhkiG9w0BAQsF
AAOCAQEAZLy5tU5EeNgMZVLwY7BxWCQL/6n10utsQc0n5fpiEvBV6RECep+K1JAQ
+zV9l1vFk9b9R3JfPDeC69XnqOg+DoQohBlaKflX8a4gRAjxqAdoDTpb22QxToYU
FC4gJr58aaGQTzszY3MeeJT8lVmuw1qrhipLX2xB2+Hg5FP837z+6ZZRtHBzbHci
OBQZkHxzo9T9iWmDtg5M1jkIAs+vOLCxZNuFwloN7PS4cD2qyIjewZv3vVkLWF9P
Z42kr1Y+2GQmDd3/Qhhji0RJMk8p2oig9Y8o3eoN4CH0WrSmF+jty3m4wYxzjok2
iE6QS3X47ZPUQPXFdWSpDkkMbwkpMw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 21:01:16 2025 by rpki-client