Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a333030303a3a2f33362d3336203d3e20323633333537.roa
File:                     323830343a313465343a333030303a3a2f33362d3336203d3e20323633333537.roa (raw, json)
Hash identifier:          udfYG3G6sx+0vCmkOzB+ZpWuIoCouwQM6XizY/bvoTk=
Subject key identifier:   B5:FD:36:3B:38:86:C9:F8:98:DE:E0:90:96:A3:7D:D5:A3:EE:06:FA
Certificate issuer:       /CN=666C4396BE3D615556D2074B0E613EAF065B2878
Certificate serial:       17683BF79C01D95704F036EAE564104092E97D4E
Authority key identifier: 66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a333030303a3a2f33362d3336203d3e20323633333537.roa
Signing time:             Thu 30 Oct 2025 12:08:19 +0000
ROA not before:           Thu 30 Oct 2025 12:03:19 +0000
ROA not after:            Thu 29 Oct 2026 12:08:19 +0000
asID:                     263357
IP address blocks:        2804:14e4:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl
                          rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 09:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:68:3b:f7:9c:01:d9:57:04:f0:36:ea:e5:64:10:40:92:e9:7d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666C4396BE3D615556D2074B0E613EAF065B2878
        Validity
            Not Before: Oct 30 12:03:19 2025 GMT
            Not After : Oct 29 12:08:19 2026 GMT
        Subject: CN=B5FD363B3886C9F898DEE09096A37DD5A3EE06FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:be:39:0e:fb:da:2b:27:d8:2d:65:39:4a:72:
                    30:c0:da:1b:dc:e9:b5:ac:af:1d:cc:9d:dd:c4:7f:
                    8a:24:af:a5:70:f2:48:22:3c:60:3f:71:28:64:55:
                    25:58:24:62:62:9f:47:04:eb:80:1f:88:2c:04:98:
                    0f:21:b7:1a:2f:62:89:e3:0c:02:0d:fe:53:31:bb:
                    da:48:da:13:05:82:f0:cf:44:1a:01:1b:a9:14:e0:
                    68:4e:cf:66:7b:76:83:0e:f7:16:27:f2:7d:14:92:
                    a7:b9:54:ca:5b:a2:28:6f:09:6c:a4:3e:f5:c3:a2:
                    b6:6b:7c:33:21:30:30:a7:24:ea:9a:06:fc:d8:86:
                    5d:a7:50:53:84:34:10:15:47:9b:87:07:e4:23:9d:
                    3c:20:63:86:d6:6e:70:88:a8:cc:8f:58:f0:d6:47:
                    16:15:3e:b3:33:6e:c3:3e:e0:03:0f:87:81:1f:e7:
                    04:c7:c9:15:06:48:de:98:4d:c1:8e:c5:33:8c:05:
                    4e:5f:80:44:5a:5b:6c:f3:e3:67:43:cc:db:7b:33:
                    78:10:d0:17:ba:e6:60:7c:2a:8e:35:fa:38:72:04:
                    57:ef:af:72:96:14:54:bf:12:f6:e2:71:a3:5c:24:
                    3a:9c:e4:47:3d:6c:72:4d:c8:68:be:44:8b:f5:6b:
                    eb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FD:36:3B:38:86:C9:F8:98:DE:E0:90:96:A3:7D:D5:A3:EE:06:FA
            X509v3 Authority Key Identifier:
                keyid:66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a333030303a3a2f33362d3336203d3e20323633333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14e4:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8b:2d:99:b3:17:ab:9a:e3:6c:32:76:a9:fe:88:ec:b1:98:ef:
         40:4e:98:dd:55:ee:df:b5:a8:ea:77:38:db:eb:da:95:52:d3:
         f7:41:99:2d:59:71:a9:c8:48:df:38:33:e2:6b:68:d6:e5:c3:
         93:a1:82:a9:09:7f:36:9a:93:47:73:dc:0b:48:45:04:4e:6f:
         d6:87:29:2f:b7:be:34:15:13:d0:f4:b1:94:11:49:c0:be:14:
         97:35:35:ef:78:dc:bf:e9:dc:8e:32:19:e5:fe:e9:e6:58:ce:
         98:e3:4f:94:c6:86:dc:6f:c9:0a:25:59:4b:df:40:80:83:d2:
         9c:b3:0d:0a:ff:02:ca:16:64:f9:c9:17:5d:78:5c:c3:c9:dc:
         8b:9e:c9:0a:e8:aa:91:30:b4:17:fc:e5:48:e4:e1:28:53:11:
         f5:a7:ca:42:09:17:e3:c3:39:60:88:9a:91:76:3f:4e:20:a2:
         64:5e:0e:1c:04:2f:25:d8:54:16:b7:b6:9e:6a:d9:d7:b7:9f:
         7b:f1:54:fd:5a:a3:fd:16:e1:76:1d:3e:be:e7:83:77:4c:eb:
         95:49:63:7f:0a:53:06:2c:fc:81:11:ca:e5:35:5c:c6:5a:cc:
         27:a6:a5:2e:83:8d:4a:80:40:0a:c7:be:28:40:65:39:6d:cd:
         d4:91:7d:a0
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUF2g795wB2VcE8Dbq5WQQQJLpfU4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY2QzQzOTZCRTNENjE1NTU2RDIwNzRCMEU2MTNFQUYw
NjVCMjg3ODAeFw0yNTEwMzAxMjAzMTlaFw0yNjEwMjkxMjA4MTlaMDMxMTAvBgNV
BAMTKEI1RkQzNjNCMzg4NkM5Rjg5OERFRTA5MDk2QTM3REQ1QTNFRTA2RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAvjkO+9orJ9gtZTlKcjDA2hvc
6bWsrx3Mnd3Ef4okr6Vw8kgiPGA/cShkVSVYJGJin0cE64AfiCwEmA8htxovYonj
DAIN/lMxu9pI2hMFgvDPRBoBG6kU4GhOz2Z7doMO9xYn8n0Ukqe5VMpboihvCWyk
PvXDorZrfDMhMDCnJOqaBvzYhl2nUFOENBAVR5uHB+QjnTwgY4bWbnCIqMyPWPDW
RxYVPrMzbsM+4AMPh4Ef5wTHyRUGSN6YTcGOxTOMBU5fgERaW2zz42dDzNt7M3gQ
0Be65mB8Ko41+jhyBFfvr3KWFFS/EvbicaNcJDqc5Ec9bHJNyGi+RIv1a+t5AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUtf02OziGyfiY3uCQlqN91aPuBvowHwYDVR0j
BBgwFoAUZmxDlr49YVVW0gdLDmE+rwZbKHgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlpRYzRjbWt3WjRuMWtwa2VpVUNqb1NUN3hWWHo1d0ZEaFZUbkZ6SlBW
RmkvMC82NjZDNDM5NkJFM0Q2MTU1NTZEMjA3NEIwRTYxM0VBRjA2NUIyODc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2NkM0Mzk2QkUzRDYxNTU1
NkQyMDc0QjBFNjEzRUFGMDY1QjI4NzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZaUWM0Y21rd1o0bjFrcGtlaVVDam9TVDd4Vlh6NXdGRGhWVG5GekpQVkZpLzAv
MzIzODMwMzQzYTMxMzQ2NTM0M2EzMzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzMzMzMzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEFOQwMA0GCSqGSIb3DQEBCwUA
A4IBAQCLLZmzF6ua42wydqn+iOyxmO9ATpjdVe7ftajqdzjb69qVUtP3QZktWXGp
yEjfODPia2jW5cOToYKpCX82mpNHc9wLSEUETm/Whykvt740FRPQ9LGUEUnAvhSX
NTXveNy/6dyOMhnl/unmWM6Y40+Uxobcb8kKJVlL30CAg9Kcsw0K/wLKFmT5yRdd
eFzDydyLnskK6KqRMLQX/OVI5OEoUxH1p8pCCRfjwzlgiJqRdj9OIKJkXg4cBC8l
2FQWt7aeatnXt5978VT9WqP9FuF2HT6+54N3TOuVSWN/ClMGLPyBEcrlNVzGWswn
pqUug41KgEAKx74oQGU5bc3UkX2g
-----END CERTIFICATE-----
Generated at Mon Nov 3 19:10:54 2025 by rpki-client