Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a653030303a3a2f33362d3336203d3e20323633333537.roa
File:                     323830343a313465343a653030303a3a2f33362d3336203d3e20323633333537.roa (raw, json)
Hash identifier:          duqWWNWaoU2dUfiLc9s3Ri5lOKPIVeCeut0ZzZgragk=
Subject key identifier:   46:26:ED:4C:E7:12:07:E3:E5:FF:4A:7A:DF:BC:45:C5:C8:B7:BF:A9
Certificate issuer:       /CN=666C4396BE3D615556D2074B0E613EAF065B2878
Certificate serial:       53ED2FC1FF07CA69C26575D4191CF0F2FCD35CCD
Authority key identifier: 66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a653030303a3a2f33362d3336203d3e20323633333537.roa
Signing time:             Thu 30 Oct 2025 12:09:24 +0000
ROA not before:           Thu 30 Oct 2025 12:04:24 +0000
ROA not after:            Thu 29 Oct 2026 12:09:24 +0000
asID:                     263357
IP address blocks:        2804:14e4:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl
                          rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 09:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ed:2f:c1:ff:07:ca:69:c2:65:75:d4:19:1c:f0:f2:fc:d3:5c:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666C4396BE3D615556D2074B0E613EAF065B2878
        Validity
            Not Before: Oct 30 12:04:24 2025 GMT
            Not After : Oct 29 12:09:24 2026 GMT
        Subject: CN=4626ED4CE71207E3E5FF4A7ADFBC45C5C8B7BFA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b7:0f:26:68:e4:12:76:a2:8f:d8:24:0a:14:
                    ee:13:95:9d:5e:21:52:3a:76:15:0a:40:e2:37:55:
                    ce:1c:33:78:f2:8e:0f:47:e7:04:9a:e0:8f:47:70:
                    a5:dd:b8:05:90:c1:f0:61:d4:25:90:43:29:84:82:
                    6d:ee:b6:b0:a4:bb:cc:a7:90:fc:4a:52:5b:3f:51:
                    f4:ef:54:98:d8:9b:8d:1b:65:25:5f:ba:2e:55:2f:
                    3c:ba:2d:c8:bd:65:27:cd:ed:7a:7f:df:b5:76:f3:
                    bc:5c:57:51:33:54:ef:88:94:7d:b6:41:7d:4f:ea:
                    bd:f8:8b:12:9f:82:ee:86:52:29:98:bc:49:3c:22:
                    b4:83:7d:56:fb:34:fb:b7:81:0b:74:39:9e:03:ad:
                    30:fd:41:dc:6d:1b:10:65:1b:bf:3b:0e:41:19:62:
                    2e:be:5d:0a:f5:8a:a3:ae:cb:00:55:b6:4a:9e:c4:
                    00:f8:e1:ea:28:8b:5e:50:bc:9f:a6:59:92:3b:a2:
                    2d:f4:a4:2a:fa:00:6c:c9:a4:b5:b1:7a:86:e9:31:
                    ca:0b:42:38:93:41:20:cc:e1:17:67:26:1e:39:a6:
                    e4:be:c0:0f:a3:e0:39:46:14:2e:60:b4:46:e1:7a:
                    66:6d:ad:dd:ec:d5:4d:f6:98:8f:a7:44:38:78:27:
                    4b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:26:ED:4C:E7:12:07:E3:E5:FF:4A:7A:DF:BC:45:C5:C8:B7:BF:A9
            X509v3 Authority Key Identifier:
                keyid:66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a653030303a3a2f33362d3336203d3e20323633333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14e4:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         79:2f:a8:7a:e5:3c:bb:83:95:fd:d0:2d:56:0b:bb:a4:bc:36:
         42:49:ed:26:6d:58:16:23:5c:bf:02:36:37:5d:64:c1:a0:9f:
         a2:35:db:5c:28:3c:1d:cd:d0:9b:0e:f1:bc:07:9b:32:16:9d:
         0c:f0:fc:da:58:8c:c7:7d:74:51:13:1a:8e:b6:3a:77:6d:ee:
         65:73:35:11:a2:49:7f:1f:15:16:6b:2a:d1:6a:60:38:ec:93:
         c3:25:04:65:31:2d:a5:95:df:65:73:53:91:bd:18:24:e5:c5:
         c4:ac:26:36:a7:2b:6a:94:0c:d4:1d:6f:4b:a0:9a:47:53:02:
         6b:9e:a4:43:40:68:77:53:aa:d5:f7:b0:fc:2d:32:74:6e:34:
         df:2f:2e:6f:39:b3:b1:c5:1f:e4:a2:3b:76:b5:8c:33:c6:b1:
         76:c7:f9:31:c1:4c:77:5d:25:0b:6f:9a:cf:80:7b:52:7d:5d:
         50:db:82:9c:91:a3:83:98:73:dc:7f:d8:46:6d:29:ae:85:de:
         35:ad:6b:57:64:d6:70:a3:3f:c6:98:40:47:37:13:18:6d:49:
         da:60:55:6f:0f:d2:e6:50:fe:b1:ba:d2:8b:35:1d:1e:6d:61:
         d4:8a:12:9c:c8:cd:cd:c2:d3:28:ad:80:08:32:f0:f3:c8:36:
         03:df:de:bd
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUU+0vwf8HymnCZXXUGRzw8vzTXM0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY2QzQzOTZCRTNENjE1NTU2RDIwNzRCMEU2MTNFQUYw
NjVCMjg3ODAeFw0yNTEwMzAxMjA0MjRaFw0yNjEwMjkxMjA5MjRaMDMxMTAvBgNV
BAMTKDQ2MjZFRDRDRTcxMjA3RTNFNUZGNEE3QURGQkM0NUM1QzhCN0JGQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9tw8maOQSdqKP2CQKFO4TlZ1e
IVI6dhUKQOI3Vc4cM3jyjg9H5wSa4I9HcKXduAWQwfBh1CWQQymEgm3utrCku8yn
kPxKUls/UfTvVJjYm40bZSVfui5VLzy6Lci9ZSfN7Xp/37V287xcV1EzVO+IlH22
QX1P6r34ixKfgu6GUimYvEk8IrSDfVb7NPu3gQt0OZ4DrTD9QdxtGxBlG787DkEZ
Yi6+XQr1iqOuywBVtkqexAD44eooi15QvJ+mWZI7oi30pCr6AGzJpLWxeobpMcoL
QjiTQSDM4RdnJh45puS+wA+j4DlGFC5gtEbhemZtrd3s1U32mI+nRDh4J0tbAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQURibtTOcSB+Pl/0p637xFxci3v6kwHwYDVR0j
BBgwFoAUZmxDlr49YVVW0gdLDmE+rwZbKHgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlpRYzRjbWt3WjRuMWtwa2VpVUNqb1NUN3hWWHo1d0ZEaFZUbkZ6SlBW
RmkvMC82NjZDNDM5NkJFM0Q2MTU1NTZEMjA3NEIwRTYxM0VBRjA2NUIyODc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2NkM0Mzk2QkUzRDYxNTU1
NkQyMDc0QjBFNjEzRUFGMDY1QjI4NzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZaUWM0Y21rd1o0bjFrcGtlaVVDam9TVDd4Vlh6NXdGRGhWVG5GekpQVkZpLzAv
MzIzODMwMzQzYTMxMzQ2NTM0M2E2NTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzMzMzMzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEFOTgMA0GCSqGSIb3DQEBCwUA
A4IBAQB5L6h65Ty7g5X90C1WC7ukvDZCSe0mbVgWI1y/AjY3XWTBoJ+iNdtcKDwd
zdCbDvG8B5syFp0M8PzaWIzHfXRRExqOtjp3be5lczURokl/HxUWayrRamA47JPD
JQRlMS2lld9lc1ORvRgk5cXErCY2pytqlAzUHW9LoJpHUwJrnqRDQGh3U6rV97D8
LTJ0bjTfLy5vObOxxR/kojt2tYwzxrF2x/kxwUx3XSULb5rPgHtSfV1Q24KckaOD
mHPcf9hGbSmuhd41rWtXZNZwoz/GmEBHNxMYbUnaYFVvD9LmUP6xutKLNR0ebWHU
ihKcyM3NwtMorYAIMvDzyDYD3969
-----END CERTIFICATE-----
Generated at Mon Nov 3 19:10:47 2025 by rpki-client