Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/323830343a326637633a3a2f33352d3335203d3e20323634383934.roa
File:                     323830343a326637633a3a2f33352d3335203d3e20323634383934.roa (raw, json)
Hash identifier:          WItSAVxxJud7NogNMuEIhSy8RX0GaouYknkQOT/SQ4c=
Subject key identifier:   0F:61:AE:53:71:EB:B8:B7:77:8B:66:8F:13:92:DD:F4:DE:88:2E:32
Certificate issuer:       /CN=5534C39A465F9E5D47762E20F30C75897285DDAF
Certificate serial:       5467E843B99BD7677B67A8F0B3ACED1C51C6EAE5
Authority key identifier: 55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/323830343a326637633a3a2f33352d3335203d3e20323634383934.roa
Signing time:             Sat 31 Oct 2026 20:11:11 +0000
ROA not before:           Sat 31 Oct 2026 20:06:11 +0000
ROA not after:            Sat 30 Oct 2027 20:11:11 +0000
asID:                     264894
IP address blocks:        2804:2f7c::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl
                          rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 19:03:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:67:e8:43:b9:9b:d7:67:7b:67:a8:f0:b3:ac:ed:1c:51:c6:ea:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5534C39A465F9E5D47762E20F30C75897285DDAF
        Validity
            Not Before: Oct 31 20:06:11 2026 GMT
            Not After : Oct 30 20:11:11 2027 GMT
        Subject: CN=0F61AE5371EBB8B7778B668F1392DDF4DE882E32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:14:85:bd:17:53:12:0a:89:62:3c:d0:8e:17:
                    b3:85:18:e3:f8:61:51:20:03:5b:57:85:25:75:30:
                    e5:b1:7d:27:1d:f2:c4:95:a8:58:35:01:10:af:cf:
                    db:51:d9:b0:2f:fc:01:4c:f9:3d:a4:88:53:f3:cf:
                    26:ab:d3:58:71:87:09:b6:2b:0c:af:da:0f:32:ea:
                    b8:3b:7f:92:30:f2:31:9b:e8:06:8c:bb:d9:fe:90:
                    7e:05:39:02:8c:e3:fe:44:ca:a4:9c:4a:80:35:38:
                    59:fa:11:9d:5f:8a:65:a1:bd:d4:32:7c:bb:0a:73:
                    80:67:6f:b7:fb:c6:e1:12:f8:02:e1:a7:85:8b:d6:
                    f1:96:9f:76:bf:fd:db:98:f9:4d:33:f4:cf:29:84:
                    cc:ba:66:5d:94:1a:e9:58:a5:e6:22:b0:47:3d:13:
                    b0:8e:0c:53:b2:2d:bd:05:d1:08:7b:0d:99:ba:f3:
                    d3:83:e1:4c:03:06:ae:fb:0e:4e:8e:65:70:08:79:
                    b6:f2:80:b1:84:a8:47:8a:d5:83:68:5b:57:82:c4:
                    73:8f:bf:3f:3f:01:69:92:10:ca:81:be:48:5b:f4:
                    69:f3:c2:74:46:31:5a:bf:c3:87:40:33:32:1f:bc:
                    64:0f:74:9f:13:bf:da:82:f1:7c:c3:6c:0a:2b:ca:
                    1f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:61:AE:53:71:EB:B8:B7:77:8B:66:8F:13:92:DD:F4:DE:88:2E:32
            X509v3 Authority Key Identifier:
                keyid:55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/323830343a326637633a3a2f33352d3335203d3e20323634383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f7c::/35

    Signature Algorithm: sha256WithRSAEncryption
         d0:04:f8:e7:78:b1:dc:47:c2:5a:3b:3e:b5:15:5d:13:50:8e:
         42:03:fe:fb:be:a4:81:10:f8:84:71:43:15:6e:37:dc:be:7e:
         99:6c:ed:6a:cb:1a:a3:f3:ff:ba:bd:20:91:40:f6:98:a3:46:
         75:a9:3b:80:9f:7c:61:70:71:8e:62:db:8a:87:a3:61:6e:fe:
         e0:b4:c8:fa:a8:3c:ba:6c:a2:1a:b5:c2:5e:00:0a:6b:03:13:
         0a:b2:44:d1:d3:2b:53:d4:1d:42:aa:96:9b:3c:5a:83:f8:70:
         8e:e9:b4:a1:f5:e9:35:17:10:f7:89:c2:62:42:99:ae:85:70:
         11:48:69:91:43:40:9e:58:95:95:e6:a9:bc:74:5e:aa:1d:dd:
         8c:56:2b:7b:09:73:3d:37:ba:21:32:73:df:53:f0:9f:35:da:
         82:6c:83:26:8d:a3:be:b8:80:89:71:27:96:1f:2e:5f:3a:2f:
         ab:51:9f:28:6b:a2:b8:60:7e:b2:0b:8f:50:bc:f6:dd:b7:af:
         e2:3a:8d:2f:f3:5a:f6:32:dc:81:9b:75:a2:21:d0:12:c1:28:
         40:97:12:c4:2f:07:30:be:e5:db:11:60:44:e0:17:ab:bc:20:
         eb:20:43:a8:3e:6d:0a:92:df:85:94:8a:c7:75:3f:0b:97:5a:
         a9:3a:44:4f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVGfoQ7mb12d7Z6jws6ztHFHG6uUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTUzNEMzOUE0NjVGOUU1RDQ3NzYyRTIwRjMwQzc1ODk3
Mjg1RERBRjAeFw0yNjEwMzEyMDA2MTFaFw0yNzEwMzAyMDExMTFaMDMxMTAvBgNV
BAMTKDBGNjFBRTUzNzFFQkI4Qjc3NzhCNjY4RjEzOTJEREY0REU4ODJFMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIFIW9F1MSColiPNCOF7OFGOP4
YVEgA1tXhSV1MOWxfScd8sSVqFg1ARCvz9tR2bAv/AFM+T2kiFPzzyar01hxhwm2
Kwyv2g8y6rg7f5Iw8jGb6AaMu9n+kH4FOQKM4/5EyqScSoA1OFn6EZ1fimWhvdQy
fLsKc4Bnb7f7xuES+ALhp4WL1vGWn3a//duY+U0z9M8phMy6Zl2UGulYpeYisEc9
E7CODFOyLb0F0Qh7DZm689OD4UwDBq77Dk6OZXAIebbygLGEqEeK1YNoW1eCxHOP
vz8/AWmSEMqBvkhb9GnzwnRGMVq/w4dAMzIfvGQPdJ8Tv9qC8XzDbAoryh8LAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUD2GuU3HruLd3i2aPE5Ld9N6ILjIwHwYDVR0j
BBgwFoAUVTTDmkZfnl1Hdi4g8wx1iXKF3a8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlpHN2Zab054ZWFhcGVHWWdpVVQzV01iMTRGRG9xUm54d3VKektuN2Q0
MkgvMS81NTM0QzM5QTQ2NUY5RTVENDc3NjJFMjBGMzBDNzU4OTcyODVEREFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU1MzRDMzlBNDY1RjlFNUQ0
Nzc2MkUyMEYzMEM3NTg5NzI4NUREQUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZaRzdmWm9OeGVhYXBlR1lnaVVUM1dNYjE0RkRvcVJueHd1SnpLbjdkNDJILzEv
MzIzODMwMzQzYTMyNjYzNzYzM2EzYTJmMzMzNTJkMzMzNTIwM2QzZTIwMzIzNjM0
MzgzOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYFKAQvfAAwDQYJKoZIhvcNAQELBQADggEBANAE+Od4
sdxHwlo7PrUVXRNQjkID/vu+pIEQ+IRxQxVuN9y+fpls7WrLGqPz/7q9IJFA9pij
RnWpO4CffGFwcY5i24qHo2Fu/uC0yPqoPLpsohq1wl4ACmsDEwqyRNHTK1PUHUKq
lps8WoP4cI7ptKH16TUXEPeJwmJCma6FcBFIaZFDQJ5YlZXmqbx0Xqod3YxWK3sJ
cz03uiEyc99T8J812oJsgyaNo764gIlxJ5YfLl86L6tRnyhrorhgfrILj1C89t23
r+I6jS/zWvYy3IGbdaIh0BLBKECXEsQvBzC+5dsRYETgF6u8IOsgQ6g+bQqS34WU
isd1PwuXWqk6RE8=
-----END CERTIFICATE-----