Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a613030303a3a2f33362d3336203d3e20323633333537.roa
File:                     323830343a313465343a613030303a3a2f33362d3336203d3e20323633333537.roa (raw, json)
Hash identifier:          FK8Llyw6JjjYodK97oytt/PB/onCrSzvsA41I/lu+28=
Subject key identifier:   7C:DA:6B:40:77:99:D2:59:4B:FD:34:DF:EC:DB:C9:7B:D9:95:1D:5A
Certificate issuer:       /CN=666C4396BE3D615556D2074B0E613EAF065B2878
Certificate serial:       64E6F63797D986D678A97FD99FBD09A41149DD1D
Authority key identifier: 66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a613030303a3a2f33362d3336203d3e20323633333537.roa
Signing time:             Thu 30 Oct 2025 12:09:01 +0000
ROA not before:           Thu 30 Oct 2025 12:04:01 +0000
ROA not after:            Thu 29 Oct 2026 12:09:01 +0000
asID:                     263357
IP address blocks:        2804:14e4:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl
                          rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 09:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e6:f6:37:97:d9:86:d6:78:a9:7f:d9:9f:bd:09:a4:11:49:dd:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666C4396BE3D615556D2074B0E613EAF065B2878
        Validity
            Not Before: Oct 30 12:04:01 2025 GMT
            Not After : Oct 29 12:09:01 2026 GMT
        Subject: CN=7CDA6B407799D2594BFD34DFECDBC97BD9951D5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e1:47:10:c6:9e:ce:4e:a5:05:67:62:f0:3a:
                    2c:c2:69:23:a5:6f:89:7a:71:28:cc:a8:e4:08:23:
                    d1:c8:4b:82:39:68:02:1e:a1:e8:fb:dd:a6:3e:a4:
                    15:99:cd:e5:3f:f2:ee:f0:dd:92:5e:d3:3d:55:75:
                    ce:47:4f:d4:ff:2f:92:b5:b2:18:a9:5e:10:1d:68:
                    41:cf:e1:fb:dc:f0:5f:77:f3:dd:f3:e7:07:a5:cc:
                    f2:0f:11:9e:3b:fc:7d:58:43:b9:c5:33:52:23:a9:
                    b4:08:97:9b:8f:dc:97:36:32:83:86:7b:c3:21:af:
                    77:d6:61:38:38:22:25:83:72:37:d8:01:47:18:04:
                    cb:65:92:b8:2d:86:62:55:37:c3:58:99:da:8c:60:
                    c5:29:08:94:21:a2:ab:d2:19:9c:ec:1f:34:2c:eb:
                    91:72:1d:78:87:1e:65:7e:17:b8:0c:e2:6c:c3:ad:
                    32:a9:c9:36:53:a7:d0:44:7e:30:2c:05:b0:df:ae:
                    70:79:89:5d:71:17:e8:f1:6d:a9:9d:37:17:01:ed:
                    4d:46:74:32:e8:12:bd:c5:50:7d:1c:51:14:80:17:
                    5f:40:60:1a:35:01:c7:9a:0d:0f:fe:ee:72:35:6d:
                    f8:c2:33:8d:53:16:2b:78:9b:4c:9c:6f:04:b4:81:
                    e8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DA:6B:40:77:99:D2:59:4B:FD:34:DF:EC:DB:C9:7B:D9:95:1D:5A
            X509v3 Authority Key Identifier:
                keyid:66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a613030303a3a2f33362d3336203d3e20323633333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14e4:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         11:3a:ec:6d:79:ac:69:8f:ca:ba:8f:61:6e:ad:88:00:83:11:
         8f:c7:4e:3b:69:47:c3:1a:d1:6e:1b:7f:ef:5f:6c:21:b7:46:
         23:32:92:42:4e:03:c1:14:1a:93:64:4b:d7:76:4d:ba:19:bf:
         7b:35:18:57:8f:a1:a6:7a:56:ff:81:35:d9:4e:05:01:ae:05:
         e5:43:47:21:fb:3c:eb:61:b5:f4:e0:b6:95:81:a7:b5:07:a2:
         d9:b5:63:0f:51:cf:60:eb:6b:4b:cf:92:a0:e0:ea:63:d1:83:
         db:d6:4d:45:8c:6a:39:1b:73:d0:0a:c7:d6:bb:fe:09:12:08:
         c8:7a:b6:51:a6:e0:fe:b1:15:75:96:39:a8:f1:49:7f:d7:77:
         0f:75:a8:a0:de:cc:97:d0:1f:ae:de:d9:ca:3a:92:3f:94:e5:
         4a:8d:89:e4:fd:26:1a:ad:79:f9:36:d8:cd:13:2b:e9:7a:52:
         f9:c9:d5:5a:19:2c:60:c5:e0:10:07:8f:95:50:16:16:10:2e:
         dd:d8:77:06:33:ef:ff:fa:ce:21:c6:d8:ef:79:de:dc:82:de:
         c2:64:61:b4:02:cf:c6:42:0c:5e:d0:66:a2:1f:0e:64:60:ec:
         3c:c0:11:30:b0:d1:5a:bc:30:23:5e:d2:f7:6b:92:92:3d:dd:
         5f:30:84:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:10:48 2025 by rpki-client