Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/323830343a326537633a323630303a3a2f34322d3432203d3e20323635333438.roa
File:                     323830343a326537633a323630303a3a2f34322d3432203d3e20323635333438.roa (raw, json)
Hash identifier:          6OgVqDCXZ7pmnJhyb3be7d7iwwUVgEm3U/WKxrZImVY=
Subject key identifier:   88:FD:24:B4:C7:4F:A8:A3:50:08:DB:B2:C4:27:6C:38:D3:47:FE:CD
Certificate issuer:       /CN=E967E72D29BE192905C03601053878C71BB621A0
Certificate serial:       2C6FBFE9BA5438B4AE32E969D7DD052287669640
Authority key identifier: E9:67:E7:2D:29:BE:19:29:05:C0:36:01:05:38:78:C7:1B:B6:21:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E967E72D29BE192905C03601053878C71BB621A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/323830343a326537633a323630303a3a2f34322d3432203d3e20323635333438.roa
Signing time:             Tue 22 Jul 2025 16:10:41 +0000
ROA not before:           Tue 22 Jul 2025 16:05:41 +0000
ROA not after:            Tue 21 Jul 2026 16:10:41 +0000
asID:                     265348
IP address blocks:        2804:2e7c:2600::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/E967E72D29BE192905C03601053878C71BB621A0.crl
                          rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/E967E72D29BE192905C03601053878C71BB621A0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E967E72D29BE192905C03601053878C71BB621A0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 12:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:6f:bf:e9:ba:54:38:b4:ae:32:e9:69:d7:dd:05:22:87:66:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E967E72D29BE192905C03601053878C71BB621A0
        Validity
            Not Before: Jul 22 16:05:41 2025 GMT
            Not After : Jul 21 16:10:41 2026 GMT
        Subject: CN=88FD24B4C74FA8A35008DBB2C4276C38D347FECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2d:cb:fb:f6:c0:b3:3a:96:b4:d1:24:be:62:
                    dd:72:27:43:2b:f0:70:62:86:4d:31:a7:16:50:00:
                    8a:58:46:cf:99:f8:4f:b1:d8:3f:9c:aa:1c:53:7a:
                    07:85:a6:4f:f9:d1:01:22:10:fb:ea:d0:db:d4:8d:
                    9c:a1:e9:d3:af:da:01:db:e1:1e:c8:2e:99:df:ae:
                    fb:59:8d:40:2a:e6:99:3e:76:db:33:90:70:89:06:
                    f2:9b:38:3a:6c:18:43:5e:9f:d3:be:25:81:57:89:
                    b2:6b:57:af:ab:aa:4a:fd:80:30:7a:79:f7:d0:25:
                    7b:54:52:0f:43:f6:43:53:a1:51:a2:47:aa:21:e1:
                    7b:28:2b:e6:f6:38:aa:d3:f5:c4:1a:91:5c:5d:eb:
                    29:e0:53:7c:71:67:ae:3d:2f:fb:49:1d:1d:42:fb:
                    28:89:88:42:2c:f5:d4:dd:0a:62:57:7d:8a:e7:61:
                    28:64:82:6f:87:a4:22:d6:12:10:e9:af:41:cd:9c:
                    cf:f1:44:89:43:95:9b:02:84:45:99:66:7d:1c:df:
                    d2:93:d5:63:49:92:d2:3e:e0:e4:1d:f6:bd:e5:0e:
                    6f:dc:e9:a4:94:e0:ac:55:80:bc:e2:83:d3:5e:26:
                    a1:d5:23:90:21:b2:6e:0a:16:32:42:87:30:1a:a8:
                    fd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FD:24:B4:C7:4F:A8:A3:50:08:DB:B2:C4:27:6C:38:D3:47:FE:CD
            X509v3 Authority Key Identifier:
                keyid:E9:67:E7:2D:29:BE:19:29:05:C0:36:01:05:38:78:C7:1B:B6:21:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/E967E72D29BE192905C03601053878C71BB621A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E967E72D29BE192905C03601053878C71BB621A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/323830343a326537633a323630303a3a2f34322d3432203d3e20323635333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e7c:2600::/42

    Signature Algorithm: sha256WithRSAEncryption
         2c:9f:98:b3:9b:7c:8a:c5:91:c0:37:d6:df:0a:04:6d:45:ce:
         62:59:84:df:c2:7e:bf:ac:f9:01:48:b1:6b:08:03:b6:30:d3:
         a3:fc:35:e9:c1:6e:4f:44:ae:12:86:ee:20:d6:ec:5d:35:15:
         fa:b3:0e:09:75:d7:37:f1:2d:2b:5f:88:7c:52:5a:d2:fd:02:
         bd:7e:fc:f2:c7:d3:2d:19:bc:ee:4c:b3:3f:3c:ce:cb:21:12:
         63:23:d4:45:ce:65:49:e7:3a:16:e9:a1:3a:34:c4:86:8e:8c:
         88:72:05:3f:07:a9:9a:c2:d2:0e:7d:cf:5e:df:27:41:98:12:
         ff:3a:90:45:99:7a:11:00:64:7e:dd:fe:89:f3:ab:a5:a4:94:
         02:53:63:ed:1f:91:84:ad:66:e3:5a:59:3c:69:31:fc:b8:bb:
         e3:97:71:22:38:8b:60:2b:6f:d4:95:34:aa:91:78:1d:8b:32:
         34:47:42:6e:ea:3e:d8:29:66:aa:6f:43:eb:54:60:a1:c9:53:
         95:08:c3:f1:8e:f8:85:28:75:df:02:79:f7:38:d3:e1:a1:60:
         b2:51:fc:1c:71:55:0d:cf:51:cf:fa:ed:e4:e4:34:db:83:62:
         be:14:20:57:00:e4:17:aa:56:95:cb:93:6d:a8:26:08:c9:8d:
         43:36:45:b1
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIULG+/6bpUOLSuMulp190FIodmlkAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk2N0U3MkQyOUJFMTkyOTA1QzAzNjAxMDUzODc4Qzcx
QkI2MjFBMDAeFw0yNTA3MjIxNjA1NDFaFw0yNjA3MjExNjEwNDFaMDMxMTAvBgNV
BAMTKDg4RkQyNEI0Qzc0RkE4QTM1MDA4REJCMkM0Mjc2QzM4RDM0N0ZFQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Lcv79sCzOpa00SS+Yt1yJ0Mr
8HBihk0xpxZQAIpYRs+Z+E+x2D+cqhxTegeFpk/50QEiEPvq0NvUjZyh6dOv2gHb
4R7ILpnfrvtZjUAq5pk+dtszkHCJBvKbODpsGENen9O+JYFXibJrV6+rqkr9gDB6
effQJXtUUg9D9kNToVGiR6oh4XsoK+b2OKrT9cQakVxd6yngU3xxZ649L/tJHR1C
+yiJiEIs9dTdCmJXfYrnYShkgm+HpCLWEhDpr0HNnM/xRIlDlZsChEWZZn0c39KT
1WNJktI+4OQd9r3lDm/c6aSU4KxVgLzig9NeJqHVI5Ahsm4KFjJChzAaqP11AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUiP0ktMdPqKNQCNuyxCdsONNH/s0wHwYDVR0j
BBgwFoAU6WfnLSm+GSkFwDYBBTh4xxu2IaAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnBoelRHQzZLWjZnRE5tbWpDcTdzMllpbUtVZFlvZWJpVndxaDFiU2NW
blAvMC9FOTY3RTcyRDI5QkUxOTI5MDVDMDM2MDEwNTM4NzhDNzFCQjYyMUEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U5NjdFNzJEMjlCRTE5Mjkw
NUMwMzYwMTA1Mzg3OEM3MUJCNjIxQTAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZwaHpUR0M2S1o2Z0RObW1qQ3E3czJZaW1LVWRZb2ViaVZ3cWgxYlNjVm5QLzAv
MzIzODMwMzQzYTMyNjUzNzYzM2EzMjM2MzAzMDNhM2EyZjM0MzIyZDM0MzIyMDNk
M2UyMDMyMzYzNTMzMzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBigELnwmADANBgkqhkiG9w0BAQsF
AAOCAQEALJ+Ys5t8isWRwDfW3woEbUXOYlmE38J+v6z5AUixawgDtjDTo/w16cFu
T0SuEobuINbsXTUV+rMOCXXXN/EtK1+IfFJa0v0CvX788sfTLRm87kyzPzzOyyES
YyPURc5lSec6FumhOjTEho6MiHIFPwepmsLSDn3PXt8nQZgS/zqQRZl6EQBkft3+
ifOrpaSUAlNj7R+RhK1m41pZPGkx/Li745dxIjiLYCtv1JU0qpF4HYsyNEdCbuo+
2Clmqm9D61RgoclTlQjD8Y74hSh13wJ59zjT4aFgslH8HHFVDc9Rz/rt5OQ024Ni
vhQgVwDkF6pWlcuTbagmCMmNQzZFsQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 21:00:55 2025 by rpki-client