Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a623030303a3a2f33362d3336203d3e20323633333537.roa
File:                     323830343a313465343a623030303a3a2f33362d3336203d3e20323633333537.roa (raw, json)
Hash identifier:          w2hg6/idP8kyhUqw8Mx76pDmcxAc7qsoyu/KZbRppxM=
Subject key identifier:   0A:C0:FC:7E:95:B1:7A:2E:16:6F:16:D0:46:E8:BB:E5:B0:1A:4A:41
Certificate issuer:       /CN=666C4396BE3D615556D2074B0E613EAF065B2878
Certificate serial:       28C21AAA54743CA54F3AE9A8AF088C01C2DA6101
Authority key identifier: 66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a623030303a3a2f33362d3336203d3e20323633333537.roa
Signing time:             Thu 30 Oct 2025 12:09:07 +0000
ROA not before:           Thu 30 Oct 2025 12:04:07 +0000
ROA not after:            Thu 29 Oct 2026 12:09:07 +0000
asID:                     263357
IP address blocks:        2804:14e4:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl
                          rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 09:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c2:1a:aa:54:74:3c:a5:4f:3a:e9:a8:af:08:8c:01:c2:da:61:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666C4396BE3D615556D2074B0E613EAF065B2878
        Validity
            Not Before: Oct 30 12:04:07 2025 GMT
            Not After : Oct 29 12:09:07 2026 GMT
        Subject: CN=0AC0FC7E95B17A2E166F16D046E8BBE5B01A4A41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cf:12:ea:01:92:c1:62:0d:fc:df:2d:59:ce:
                    8c:1b:50:d1:a1:a7:6c:7a:1d:e1:fb:54:9c:50:ee:
                    cf:5e:43:31:10:39:cd:90:29:89:70:e3:b5:ec:a1:
                    b3:4c:70:27:dc:88:06:b8:24:ca:d2:00:1a:5b:c3:
                    54:8a:d4:3d:f7:0f:c7:9c:72:8b:78:fb:94:35:ec:
                    d7:5a:cd:cf:b0:29:07:23:2b:d3:09:01:54:e1:3c:
                    d6:44:41:7f:03:24:bf:56:0f:3c:39:c6:f8:89:4e:
                    9a:02:ff:74:0c:7c:2b:fe:2d:3d:f8:fb:63:f3:0c:
                    a7:83:18:a8:cd:ee:1b:2b:44:19:8b:4f:7f:dc:5e:
                    97:16:dd:9a:19:ca:29:91:0b:f9:1f:9c:08:cb:fc:
                    64:a5:a3:9c:d2:e0:24:14:33:e0:c4:03:a5:f2:08:
                    83:74:bf:e4:f3:35:5f:12:42:67:48:5f:e2:c6:91:
                    db:5e:29:26:78:cf:47:65:d9:39:45:ed:81:0e:c9:
                    72:0c:23:2b:df:2f:cc:bb:16:9b:e6:e6:e7:a1:6e:
                    78:7f:1a:ce:8e:37:55:fb:ce:ef:8e:bb:4d:e9:de:
                    b3:e5:85:8b:94:62:10:0f:1d:47:9b:c7:e0:74:b6:
                    ee:51:19:7c:2a:c4:77:09:52:d3:84:9a:0e:37:bb:
                    28:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C0:FC:7E:95:B1:7A:2E:16:6F:16:D0:46:E8:BB:E5:B0:1A:4A:41
            X509v3 Authority Key Identifier:
                keyid:66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a623030303a3a2f33362d3336203d3e20323633333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14e4:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0d:54:0b:3f:ad:3d:29:3e:e8:11:77:49:55:de:e4:6f:97:d6:
         d2:cf:98:c0:89:73:d4:b6:51:26:3b:73:21:ab:a7:6f:24:b8:
         68:43:b7:14:6a:84:87:00:aa:c3:14:0c:33:22:8e:de:65:b5:
         56:a5:38:31:f4:d6:2a:ae:40:3b:d6:91:c8:fc:a0:dd:8f:5e:
         09:99:02:14:a4:93:7f:03:a1:f2:bc:01:d8:43:cc:d2:a7:3f:
         22:b1:ae:31:b3:84:83:fa:d6:ca:4d:01:13:2e:10:c2:ad:48:
         08:04:7b:e3:42:b8:49:8e:3b:02:18:70:3f:c1:73:57:9e:61:
         77:7a:96:83:39:be:da:59:aa:5b:4d:bb:e8:a4:e5:9f:91:af:
         a1:22:84:ab:42:f8:7e:bd:93:bd:2c:31:83:c8:44:87:da:f5:
         2c:7c:ce:a8:53:78:95:bc:b8:54:b7:b8:dc:e6:bb:7e:13:64:
         5e:ad:39:f3:8c:03:46:e8:e9:59:64:b5:04:2a:63:86:36:04:
         e9:23:e8:d3:5a:7f:b1:e9:e0:d2:a5:b2:b1:55:b6:27:1c:b3:
         18:8c:10:e0:80:ea:b9:8f:f3:da:54:33:40:ec:e2:f7:15:94:
         ac:0d:57:1c:27:0e:d7:1b:c3:ba:54:ea:9b:0f:e2:3e:5b:96:
         8e:49:65:88
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUKMIaqlR0PKVPOumorwiMAcLaYQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY2QzQzOTZCRTNENjE1NTU2RDIwNzRCMEU2MTNFQUYw
NjVCMjg3ODAeFw0yNTEwMzAxMjA0MDdaFw0yNjEwMjkxMjA5MDdaMDMxMTAvBgNV
BAMTKDBBQzBGQzdFOTVCMTdBMkUxNjZGMTZEMDQ2RThCQkU1QjAxQTRBNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVzxLqAZLBYg383y1ZzowbUNGh
p2x6HeH7VJxQ7s9eQzEQOc2QKYlw47XsobNMcCfciAa4JMrSABpbw1SK1D33D8ec
cot4+5Q17Ndazc+wKQcjK9MJAVThPNZEQX8DJL9WDzw5xviJTpoC/3QMfCv+LT34
+2PzDKeDGKjN7hsrRBmLT3/cXpcW3ZoZyimRC/kfnAjL/GSlo5zS4CQUM+DEA6Xy
CIN0v+TzNV8SQmdIX+LGkdteKSZ4z0dl2TlF7YEOyXIMIyvfL8y7Fpvm5uehbnh/
Gs6ON1X7zu+Ou03p3rPlhYuUYhAPHUebx+B0tu5RGXwqxHcJUtOEmg43uyhVAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUCsD8fpWxei4WbxbQRui75bAaSkEwHwYDVR0j
BBgwFoAUZmxDlr49YVVW0gdLDmE+rwZbKHgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlpRYzRjbWt3WjRuMWtwa2VpVUNqb1NUN3hWWHo1d0ZEaFZUbkZ6SlBW
RmkvMC82NjZDNDM5NkJFM0Q2MTU1NTZEMjA3NEIwRTYxM0VBRjA2NUIyODc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2NkM0Mzk2QkUzRDYxNTU1
NkQyMDc0QjBFNjEzRUFGMDY1QjI4NzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZaUWM0Y21rd1o0bjFrcGtlaVVDam9TVDd4Vlh6NXdGRGhWVG5GekpQVkZpLzAv
MzIzODMwMzQzYTMxMzQ2NTM0M2E2MjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzMzMzMzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEFOSwMA0GCSqGSIb3DQEBCwUA
A4IBAQANVAs/rT0pPugRd0lV3uRvl9bSz5jAiXPUtlEmO3Mhq6dvJLhoQ7cUaoSH
AKrDFAwzIo7eZbVWpTgx9NYqrkA71pHI/KDdj14JmQIUpJN/A6HyvAHYQ8zSpz8i
sa4xs4SD+tbKTQETLhDCrUgIBHvjQrhJjjsCGHA/wXNXnmF3epaDOb7aWapbTbvo
pOWfka+hIoSrQvh+vZO9LDGDyESH2vUsfM6oU3iVvLhUt7jc5rt+E2RerTnzjANG
6OlZZLUEKmOGNgTpI+jTWn+x6eDSpbKxVbYnHLMYjBDggOq5j/PaVDNA7OL3FZSs
DVccJw7XG8O6VOqbD+I+W5aOSWWI
-----END CERTIFICATE-----
Generated at Mon Nov 3 19:10:48 2025 by rpki-client