Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a343030303a3a2f33362d3336203d3e20323633333537.roa
File:                     323830343a313465343a343030303a3a2f33362d3336203d3e20323633333537.roa (raw, json)
Hash identifier:          eO9IvTraQE4OtEE3qcKqOtRu9t0ahHD2ToMuyAGVTFc=
Subject key identifier:   9C:25:0F:44:5C:3A:B7:52:5E:1A:33:A9:1D:3D:50:10:D2:B2:1F:8C
Certificate issuer:       /CN=666C4396BE3D615556D2074B0E613EAF065B2878
Certificate serial:       6C70D65D172E8B2CFB15683351DFA7947A2D7254
Authority key identifier: 66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a343030303a3a2f33362d3336203d3e20323633333537.roa
Signing time:             Thu 30 Oct 2025 12:08:27 +0000
ROA not before:           Thu 30 Oct 2025 12:03:27 +0000
ROA not after:            Thu 29 Oct 2026 12:08:27 +0000
asID:                     263357
IP address blocks:        2804:14e4:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl
                          rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 09:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:70:d6:5d:17:2e:8b:2c:fb:15:68:33:51:df:a7:94:7a:2d:72:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666C4396BE3D615556D2074B0E613EAF065B2878
        Validity
            Not Before: Oct 30 12:03:27 2025 GMT
            Not After : Oct 29 12:08:27 2026 GMT
        Subject: CN=9C250F445C3AB7525E1A33A91D3D5010D2B21F8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:06:4b:0c:b4:ae:e4:ef:87:01:dd:c9:77:1a:
                    e9:a9:69:15:c3:7f:50:e5:2a:38:68:e8:2f:2e:23:
                    42:58:0e:42:f5:2e:31:e9:91:1c:b8:5e:36:86:2c:
                    f3:fd:8d:a9:6f:32:94:92:4b:8f:1b:86:eb:52:b2:
                    da:a6:04:09:b2:02:c0:d8:ff:91:a8:f2:f4:89:b3:
                    b1:30:aa:80:7a:bf:11:db:17:af:5f:fd:7b:bc:32:
                    51:69:c9:2e:4d:a4:f8:08:ba:77:d5:70:44:58:c3:
                    dc:bf:7b:a6:c8:0e:63:0b:f9:e6:4e:41:22:21:ce:
                    a2:b4:e4:30:f4:bf:47:55:67:f6:6f:e9:94:7f:06:
                    23:5e:08:2d:12:20:36:43:74:76:f5:ed:33:0f:89:
                    77:51:bd:4c:a9:c6:2f:a5:e7:55:fe:e0:55:9a:19:
                    fd:33:4f:10:ca:91:46:6a:cb:2a:07:6e:99:c1:b2:
                    41:20:3d:41:74:fa:46:65:fe:0e:7e:46:9a:a2:f6:
                    c6:52:dd:ad:87:3f:4d:22:cc:b5:1c:a2:74:7f:09:
                    90:4d:e0:6f:f1:4f:e1:4e:3c:ba:1d:ed:4b:56:9e:
                    1d:7b:e7:4f:0e:ae:fc:a8:4f:0e:a8:bf:4d:c7:c6:
                    d8:12:d6:f0:8b:4a:ec:75:47:d3:e3:e1:d5:71:d5:
                    9b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:25:0F:44:5C:3A:B7:52:5E:1A:33:A9:1D:3D:50:10:D2:B2:1F:8C
            X509v3 Authority Key Identifier:
                keyid:66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a343030303a3a2f33362d3336203d3e20323633333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14e4:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         34:8d:10:8c:d1:10:36:c8:10:ee:45:67:03:af:c8:2c:0f:67:
         a4:cf:b3:3c:28:a7:81:ab:ec:24:03:57:cd:a8:bc:fd:a9:ef:
         97:46:7c:be:48:26:0e:e2:fe:27:15:68:00:c2:d9:f2:58:58:
         e1:30:9b:2b:cc:a7:3b:aa:9d:d0:64:17:fa:a4:a2:b7:be:22:
         ee:f8:92:da:a7:0c:6c:1a:22:60:aa:de:21:d6:0c:d9:7b:4a:
         9b:f5:a1:03:28:d4:6a:ff:e2:eb:9c:19:65:50:e3:51:7b:3f:
         e3:0f:94:2a:d8:d5:1d:76:b5:2c:29:b0:6e:ee:f7:2d:75:7f:
         f1:8a:e8:14:bd:19:9b:be:53:b7:93:fb:7d:3e:1e:04:84:85:
         21:5c:0b:b0:d1:6b:8d:ec:ba:e2:eb:46:16:f7:47:bc:55:fb:
         25:e4:de:d9:30:f0:a1:29:76:c3:e4:67:ac:f9:4c:9b:94:21:
         65:15:19:45:1b:19:87:5d:85:71:4d:ac:47:7b:70:2e:1a:cf:
         d7:7c:13:8c:5c:25:36:09:b3:5c:02:b3:10:1d:2f:d1:1d:b9:
         00:42:99:46:d6:40:76:8c:46:05:f3:8f:0c:e6:ca:73:6e:2a:
         c8:da:4c:ed:3c:3e:1d:c4:b9:76:8b:5e:1b:f7:0a:e6:ec:bd:
         57:49:6a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:10:49 2025 by rpki-client