Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a353030303a3a2f33362d3336203d3e20323633333537.roa
File:                     323830343a313465343a353030303a3a2f33362d3336203d3e20323633333537.roa (raw, json)
Hash identifier:          Ieac3MdMHl0gyDMLS8eXI0y7c7h8SbU0ElkPGmLqTKM=
Subject key identifier:   D2:44:C5:32:23:CF:D5:2D:CC:50:E6:F5:45:CA:31:F5:C1:84:42:9B
Certificate issuer:       /CN=666C4396BE3D615556D2074B0E613EAF065B2878
Certificate serial:       6457EB422F670B89B16AEA1DBB09FDA7713BE591
Authority key identifier: 66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a353030303a3a2f33362d3336203d3e20323633333537.roa
Signing time:             Thu 30 Oct 2025 12:08:33 +0000
ROA not before:           Thu 30 Oct 2025 12:03:33 +0000
ROA not after:            Thu 29 Oct 2026 12:08:33 +0000
asID:                     263357
IP address blocks:        2804:14e4:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl
                          rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 09:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:57:eb:42:2f:67:0b:89:b1:6a:ea:1d:bb:09:fd:a7:71:3b:e5:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666C4396BE3D615556D2074B0E613EAF065B2878
        Validity
            Not Before: Oct 30 12:03:33 2025 GMT
            Not After : Oct 29 12:08:33 2026 GMT
        Subject: CN=D244C53223CFD52DCC50E6F545CA31F5C184429B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fa:97:e3:91:7a:4e:c5:46:05:1b:6e:e6:e6:
                    a5:b3:10:dc:44:17:81:ea:9f:f6:be:71:0b:b8:76:
                    e2:69:87:3a:2a:85:9f:1f:a4:41:38:17:2a:82:13:
                    d2:60:49:1f:8d:ee:6b:9c:a8:ac:da:3a:c9:4f:a9:
                    21:82:61:1d:10:40:a4:24:dd:aa:00:29:e5:42:60:
                    fa:17:87:11:64:8b:f2:54:f9:6c:d4:21:0f:b6:30:
                    e6:be:aa:69:ac:51:d8:22:b0:45:f7:4a:34:47:3a:
                    ec:12:dd:33:21:c1:4d:49:da:8b:36:f7:03:21:7d:
                    01:c5:01:8d:3b:49:5d:dd:59:6c:57:ff:e5:b9:1a:
                    86:d3:2c:11:e4:77:6b:32:fa:53:9c:b1:7a:98:a8:
                    a2:3f:9e:c5:8c:f0:89:62:6b:50:7e:3d:a9:db:7f:
                    36:78:05:c1:eb:5f:58:68:e4:3e:d7:1e:ea:a5:14:
                    e2:f9:a0:71:9b:50:91:e9:1a:47:2c:3f:c8:0e:66:
                    4a:71:54:70:87:fd:1b:ff:cf:e9:12:6f:1a:93:78:
                    8c:bb:78:d1:0e:dc:e2:7e:4e:ff:90:93:58:4e:4f:
                    f3:36:bf:83:64:b0:38:33:be:f5:e9:86:f9:2e:74:
                    76:c3:58:97:da:9f:3b:0a:86:1a:48:be:9e:4d:e6:
                    a3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:44:C5:32:23:CF:D5:2D:CC:50:E6:F5:45:CA:31:F5:C1:84:42:9B
            X509v3 Authority Key Identifier:
                keyid:66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a353030303a3a2f33362d3336203d3e20323633333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14e4:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8a:da:e1:76:23:9d:1c:95:ff:7e:c5:5d:c1:16:c8:eb:73:3c:
         a8:e0:46:ef:7d:c4:c4:77:a8:6b:0c:0c:01:43:93:0a:f6:f4:
         41:1f:0d:3f:f5:a3:2d:4e:75:0e:f4:3f:c7:6b:d9:fd:58:f8:
         45:46:60:28:63:65:35:71:96:c1:3f:c7:75:18:0f:2f:fa:30:
         df:9b:20:2a:b3:5d:86:2e:2f:8c:a2:46:e9:01:eb:c4:a4:cc:
         69:50:7f:f7:79:fc:0b:d2:57:83:9a:15:01:e6:49:fa:3a:c2:
         f1:56:1d:f8:5f:f9:57:0f:ba:a8:3d:07:4c:1a:ac:33:29:4a:
         39:29:d9:5b:38:4a:1e:eb:11:19:eb:d3:20:aa:ad:92:dd:68:
         9c:b3:bd:82:34:7d:77:c2:84:01:40:55:4c:24:47:0a:bd:55:
         e3:34:f8:c2:48:f1:c7:23:d4:d7:01:91:7a:d2:3e:4e:1b:9f:
         b8:8e:ec:cb:35:50:a4:27:39:bc:45:5b:03:5e:74:08:5a:17:
         a7:ba:de:e1:1d:f4:0e:a1:32:ca:5a:56:05:c3:d4:35:7b:10:
         32:60:ac:1a:18:d5:41:fd:11:19:1c:87:dc:c1:a8:1f:e1:28:
         b4:20:39:1a:2e:4e:3f:76:87:ce:b7:51:76:4b:d8:4e:0c:86:
         10:3a:5f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:10:50 2025 by rpki-client