Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/323830343a333434383a3a2f33322d313238203d3e20323635343437.roa
File:                     323830343a333434383a3a2f33322d313238203d3e20323635343437.roa (raw, json)
Hash identifier:          sn7r6w0kUIfjLSCTgGW3Xv4D2iUXjxn1Vul04R0Mx14=
Subject key identifier:   C0:01:12:05:4A:52:75:43:6C:51:C3:0F:C7:55:B7:99:33:B6:50:2E
Certificate issuer:       /CN=FCCA57D4980B85B26F304690E0624598D83FB794
Certificate serial:       5345F1DC6D8271764922F66058691E4558EDBA64
Authority key identifier: FC:CA:57:D4:98:0B:85:B2:6F:30:46:90:E0:62:45:98:D8:3F:B7:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCCA57D4980B85B26F304690E0624598D83FB794.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/323830343a333434383a3a2f33322d313238203d3e20323635343437.roa
Signing time:             Wed 19 Aug 2026 14:50:04 +0000
ROA not before:           Wed 19 Aug 2026 14:45:04 +0000
ROA not after:            Wed 18 Aug 2027 14:50:04 +0000
asID:                     265447
IP address blocks:        2804:3448::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/FCCA57D4980B85B26F304690E0624598D83FB794.crl
                          rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/FCCA57D4980B85B26F304690E0624598D83FB794.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCCA57D4980B85B26F304690E0624598D83FB794.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:45:f1:dc:6d:82:71:76:49:22:f6:60:58:69:1e:45:58:ed:ba:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCCA57D4980B85B26F304690E0624598D83FB794
        Validity
            Not Before: Aug 19 14:45:04 2026 GMT
            Not After : Aug 18 14:50:04 2027 GMT
        Subject: CN=C00112054A5275436C51C30FC755B79933B6502E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ba:47:61:d4:e4:b0:d0:2b:75:e3:d7:59:7d:
                    f5:3b:1d:67:d1:ed:c5:26:db:f1:e4:50:48:52:9b:
                    d2:bd:4b:2f:82:32:38:a5:d8:a2:2c:94:e8:03:df:
                    fe:5f:6c:06:74:9a:94:e3:94:5e:44:f6:24:4a:bc:
                    4d:0a:68:44:1a:cc:37:e2:11:58:7b:68:49:92:2c:
                    33:20:e6:79:c4:b0:1a:fd:70:56:77:0c:3b:00:aa:
                    d4:fb:f2:c2:91:46:fc:26:e5:f1:ba:7f:33:bb:94:
                    57:67:2e:06:ea:bf:b8:19:28:97:13:26:73:b6:fd:
                    18:ab:23:39:69:65:30:09:ab:c9:38:34:ca:10:c1:
                    7d:59:ce:ea:9f:05:ed:ad:26:16:69:4c:4d:d2:f8:
                    af:67:af:4d:12:44:49:75:b1:bf:35:72:e4:dd:f9:
                    c4:57:8a:46:54:75:34:2c:0f:71:d1:a2:de:6a:0d:
                    f4:02:f9:9d:f2:d0:23:ed:c7:dc:e1:a3:e6:ff:20:
                    14:7c:f7:32:2f:4a:cd:85:66:6d:f7:fc:eb:6b:60:
                    16:d1:fa:8c:ee:15:62:0f:f9:7c:b3:01:ec:2f:ae:
                    b9:e0:cd:07:9e:ba:60:d4:87:4a:a1:ba:bc:9a:ce:
                    04:2b:ba:b0:74:1f:0a:ca:39:95:56:d5:06:82:af:
                    2a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:01:12:05:4A:52:75:43:6C:51:C3:0F:C7:55:B7:99:33:B6:50:2E
            X509v3 Authority Key Identifier:
                keyid:FC:CA:57:D4:98:0B:85:B2:6F:30:46:90:E0:62:45:98:D8:3F:B7:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/FCCA57D4980B85B26F304690E0624598D83FB794.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCCA57D4980B85B26F304690E0624598D83FB794.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/323830343a333434383a3a2f33322d313238203d3e20323635343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3448::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:ab:9a:ab:85:fb:d9:a2:4a:90:28:6d:d6:79:36:ec:c7:17:
         b1:41:e0:83:85:06:7d:df:c0:c8:39:d7:bc:db:55:40:03:67:
         ad:95:2e:f3:c6:25:ff:00:31:00:7a:29:49:27:63:87:b7:b3:
         40:7f:a0:51:e1:96:e5:fc:d3:6a:c8:ee:e3:02:f2:66:59:b7:
         6b:35:c6:4c:d4:38:5c:a9:61:2f:7d:e9:df:c0:03:df:b5:8c:
         f5:34:0a:c0:04:93:a1:91:4e:ef:10:0a:fa:02:2f:25:36:e2:
         17:e5:22:45:86:39:37:2d:2d:e3:b7:4a:51:e5:c5:a1:cb:bb:
         5a:f8:4c:e8:7f:39:15:dc:4b:40:90:9a:56:7f:7c:ee:35:55:
         26:29:05:24:6c:be:bb:f4:ee:ea:92:d9:44:54:d5:9c:98:d1:
         3d:97:35:95:db:f1:7e:f5:b6:14:38:48:7f:12:e2:10:bc:00:
         88:68:d9:d4:be:8b:70:ab:a7:7b:de:c6:ae:ee:48:ba:90:1c:
         e7:14:e9:27:f0:67:b2:75:39:c9:82:44:df:7f:5c:0d:db:80:
         6e:e1:ee:3c:4b:11:95:55:43:65:ae:a5:43:fb:12:fd:10:3c:
         bb:97:0a:8e:c5:19:a1:e5:b1:df:73:a9:da:93:89:2d:99:79:
         38:8b:47:9e
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUU0Xx3G2CcXZJIvZgWGkeRVjtumQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkNDQTU3RDQ5ODBCODVCMjZGMzA0NjkwRTA2MjQ1OThE
ODNGQjc5NDAeFw0yNjA4MTkxNDQ1MDRaFw0yNzA4MTgxNDUwMDRaMDMxMTAvBgNV
BAMTKEMwMDExMjA1NEE1Mjc1NDM2QzUxQzMwRkM3NTVCNzk5MzNCNjUwMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDukdh1OSw0Ct149dZffU7HWfR
7cUm2/HkUEhSm9K9Sy+CMjil2KIslOgD3/5fbAZ0mpTjlF5E9iRKvE0KaEQazDfi
EVh7aEmSLDMg5nnEsBr9cFZ3DDsAqtT78sKRRvwm5fG6fzO7lFdnLgbqv7gZKJcT
JnO2/RirIzlpZTAJq8k4NMoQwX1ZzuqfBe2tJhZpTE3S+K9nr00SREl1sb81cuTd
+cRXikZUdTQsD3HRot5qDfQC+Z3y0CPtx9zho+b/IBR89zIvSs2FZm33/OtrYBbR
+ozuFWIP+XyzAewvrrngzQeeumDUh0qhuryazgQrurB0HwrKOZVW1QaCryr3AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUwAESBUpSdUNsUcMPx1W3mTO2UC4wHwYDVR0j
BBgwFoAU/MpX1JgLhbJvMEaQ4GJFmNg/t5QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFNZS2tLSkhLMmpCYVFRTWRWZFc5cm4zcnZWeDlmc04xaTJzbWZlWExi
RXcvMC9GQ0NBNTdENDk4MEI4NUIyNkYzMDQ2OTBFMDYyNDU5OEQ4M0ZCNzk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZDQ0E1N0Q0OTgwQjg1QjI2
RjMwNDY5MEUwNjI0NTk4RDgzRkI3OTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RTWUtrS0pISzJqQmFRUU1kVmRXOXJuM3J2Vng5ZnNOMWkyc21mZVhMYkV3LzAv
MzIzODMwMzQzYTMzMzQzNDM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzUzNDM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDRIMA0GCSqGSIb3DQEBCwUAA4IBAQB6q5qr
hfvZokqQKG3WeTbsxxexQeCDhQZ938DIOde821VAA2etlS7zxiX/ADEAeilJJ2OH
t7NAf6BR4Zbl/NNqyO7jAvJmWbdrNcZM1DhcqWEvfenfwAPftYz1NArABJOhkU7v
EAr6Ai8lNuIX5SJFhjk3LS3jt0pR5cWhy7ta+EzofzkV3EtAkJpWf3zuNVUmKQUk
bL679O7qktlEVNWcmNE9lzWV2/F+9bYUOEh/EuIQvACIaNnUvotwq6d73sau7ki6
kBznFOkn8GeydTnJgkTff1wN24Bu4e48SxGVVUNlrqVD+xL9EDy7lwqOxRmh5bHf
c6nak4ktmXk4i0ee
-----END CERTIFICATE-----
Generated at Mon Aug 24 18:57:38 2026 by rpki-client