Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a363030303a3a2f33362d3336203d3e20323633333537.roa
File:                     323830343a313465343a363030303a3a2f33362d3336203d3e20323633333537.roa (raw, json)
Hash identifier:          gCZ/Nbqn39bfv2O0XbyHxXpmxsL37/C9G0mYgUZEyOA=
Subject key identifier:   3E:01:EC:A4:48:3A:64:62:6B:D4:4C:47:C9:C4:F4:A6:A9:AE:F2:89
Certificate issuer:       /CN=666C4396BE3D615556D2074B0E613EAF065B2878
Certificate serial:       1B667E41F4CCB1D568B88F3693027CF7E68885FC
Authority key identifier: 66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a363030303a3a2f33362d3336203d3e20323633333537.roa
Signing time:             Thu 30 Oct 2025 12:08:39 +0000
ROA not before:           Thu 30 Oct 2025 12:03:39 +0000
ROA not after:            Thu 29 Oct 2026 12:08:39 +0000
asID:                     263357
IP address blocks:        2804:14e4:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl
                          rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 09:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:66:7e:41:f4:cc:b1:d5:68:b8:8f:36:93:02:7c:f7:e6:88:85:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666C4396BE3D615556D2074B0E613EAF065B2878
        Validity
            Not Before: Oct 30 12:03:39 2025 GMT
            Not After : Oct 29 12:08:39 2026 GMT
        Subject: CN=3E01ECA4483A64626BD44C47C9C4F4A6A9AEF289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8d:02:86:cc:f9:d8:d1:a2:53:4c:20:62:78:
                    ff:e9:65:f4:c7:43:9c:0d:14:98:31:5a:70:3e:e5:
                    8e:99:12:67:14:7e:55:6a:b4:f9:58:52:e9:ca:a8:
                    05:10:05:77:93:f3:65:21:10:33:81:6f:80:76:e2:
                    43:90:ad:79:5b:53:42:d7:9d:2b:e4:f7:66:60:bb:
                    10:09:d9:ff:5d:45:fb:10:03:42:9c:6e:f4:aa:5b:
                    f7:f5:91:9b:b1:b5:ae:72:51:b6:d8:dc:83:42:e7:
                    c7:5b:a5:d5:24:75:f4:4f:e9:9a:66:19:30:c4:05:
                    66:74:f3:aa:0a:38:53:52:6d:8b:54:a8:3b:95:59:
                    61:ee:81:25:97:ca:bc:06:9f:4d:e0:45:b5:91:b5:
                    cc:99:65:7e:af:de:53:16:67:37:31:23:f8:d5:2b:
                    fd:eb:f7:16:e4:46:3e:15:9b:19:3d:b2:fd:1f:47:
                    0a:7b:d5:71:d4:be:b2:71:78:77:84:a8:20:87:53:
                    fa:dc:1d:8d:37:d8:14:19:57:8c:20:a9:4e:08:2f:
                    b8:6e:e8:87:2e:12:cc:42:f8:35:14:56:8c:ee:66:
                    18:fd:e2:13:e9:b3:3a:eb:e8:62:0c:1c:a6:e6:18:
                    ed:0f:db:09:64:20:d6:c2:58:f0:38:07:2b:11:fd:
                    a8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:01:EC:A4:48:3A:64:62:6B:D4:4C:47:C9:C4:F4:A6:A9:AE:F2:89
            X509v3 Authority Key Identifier:
                keyid:66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a363030303a3a2f33362d3336203d3e20323633333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14e4:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         09:97:50:6a:d9:50:75:fd:73:76:4d:75:27:26:5d:67:fb:c5:
         20:d1:44:32:6b:19:80:24:b9:af:03:f6:0f:68:9e:62:8b:bd:
         af:80:dc:03:77:6d:38:c5:a4:d8:b5:b5:b5:73:d5:b0:d5:2a:
         75:b3:94:7f:27:c0:6d:ff:d1:3a:13:68:37:f6:d8:fe:ce:d7:
         91:19:5e:d5:16:f4:78:2c:24:16:b8:1e:e8:e8:27:00:d8:57:
         1e:29:23:a6:66:b1:8b:89:40:3e:dc:11:5a:69:41:3d:2c:d7:
         3e:60:af:e8:64:98:d6:74:78:5e:4b:d2:65:b3:66:f8:52:44:
         c6:f9:34:fb:a3:39:24:82:98:8d:f9:c5:a6:21:74:50:64:56:
         b7:8a:19:60:6c:c1:24:a0:99:49:c1:0f:f3:39:36:79:d5:54:
         9f:2d:10:20:32:e6:4f:70:69:29:20:d9:f4:c9:8e:8e:57:4d:
         94:c3:16:c3:7b:da:2c:ea:91:c5:bb:2c:07:66:7c:71:bf:41:
         6b:f2:68:bc:2d:14:3b:b3:4e:e3:ef:84:e1:70:46:d2:d1:f5:
         68:93:69:95:1e:e5:b2:5b:85:11:be:cf:cc:2c:d9:52:bd:6d:
         28:a8:b4:86:07:39:8e:fc:49:54:b2:27:e3:89:bb:20:54:43:
         72:dd:25:67
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUG2Z+QfTMsdVouI82kwJ89+aIhfwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY2QzQzOTZCRTNENjE1NTU2RDIwNzRCMEU2MTNFQUYw
NjVCMjg3ODAeFw0yNTEwMzAxMjAzMzlaFw0yNjEwMjkxMjA4MzlaMDMxMTAvBgNV
BAMTKDNFMDFFQ0E0NDgzQTY0NjI2QkQ0NEM0N0M5QzRGNEE2QTlBRUYyODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDjQKGzPnY0aJTTCBieP/pZfTH
Q5wNFJgxWnA+5Y6ZEmcUflVqtPlYUunKqAUQBXeT82UhEDOBb4B24kOQrXlbU0LX
nSvk92ZguxAJ2f9dRfsQA0KcbvSqW/f1kZuxta5yUbbY3INC58dbpdUkdfRP6Zpm
GTDEBWZ086oKOFNSbYtUqDuVWWHugSWXyrwGn03gRbWRtcyZZX6v3lMWZzcxI/jV
K/3r9xbkRj4Vmxk9sv0fRwp71XHUvrJxeHeEqCCHU/rcHY032BQZV4wgqU4IL7hu
6IcuEsxC+DUUVozuZhj94hPpszrr6GIMHKbmGO0P2wlkINbCWPA4BysR/ahvAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUPgHspEg6ZGJr1ExHycT0pqmu8okwHwYDVR0j
BBgwFoAUZmxDlr49YVVW0gdLDmE+rwZbKHgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlpRYzRjbWt3WjRuMWtwa2VpVUNqb1NUN3hWWHo1d0ZEaFZUbkZ6SlBW
RmkvMC82NjZDNDM5NkJFM0Q2MTU1NTZEMjA3NEIwRTYxM0VBRjA2NUIyODc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2NkM0Mzk2QkUzRDYxNTU1
NkQyMDc0QjBFNjEzRUFGMDY1QjI4NzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZaUWM0Y21rd1o0bjFrcGtlaVVDam9TVDd4Vlh6NXdGRGhWVG5GekpQVkZpLzAv
MzIzODMwMzQzYTMxMzQ2NTM0M2EzNjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzMzMzMzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEFORgMA0GCSqGSIb3DQEBCwUA
A4IBAQAJl1Bq2VB1/XN2TXUnJl1n+8Ug0UQyaxmAJLmvA/YPaJ5ii72vgNwDd204
xaTYtbW1c9Ww1Sp1s5R/J8Bt/9E6E2g39tj+zteRGV7VFvR4LCQWuB7o6CcA2Fce
KSOmZrGLiUA+3BFaaUE9LNc+YK/oZJjWdHheS9Jls2b4UkTG+TT7ozkkgpiN+cWm
IXRQZFa3ihlgbMEkoJlJwQ/zOTZ51VSfLRAgMuZPcGkpINn0yY6OV02UwxbDe9os
6pHFuywHZnxxv0Fr8mi8LRQ7s07j74ThcEbS0fVok2mVHuWyW4URvs/MLNlSvW0o
qLSGBzmO/ElUsifjibsgVENy3SVn
-----END CERTIFICATE-----
Generated at Mon Nov 3 19:10:51 2025 by rpki-client