Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a663030303a3a2f33362d3336203d3e20323633333537.roa
File:                     323830343a313465343a663030303a3a2f33362d3336203d3e20323633333537.roa (raw, json)
Hash identifier:          dGhrgj1sMjtVCC2gvI6X+lQki1Y/mIZ5xL99PR0E9uc=
Subject key identifier:   83:63:C2:D9:31:57:CE:03:04:52:3A:47:0A:8E:54:2E:3A:8E:3E:97
Certificate issuer:       /CN=666C4396BE3D615556D2074B0E613EAF065B2878
Certificate serial:       20D3BC04F025A8134DBC0F40D24B4B81B1D97A05
Authority key identifier: 66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a663030303a3a2f33362d3336203d3e20323633333537.roa
Signing time:             Thu 30 Oct 2025 12:09:28 +0000
ROA not before:           Thu 30 Oct 2025 12:04:28 +0000
ROA not after:            Thu 29 Oct 2026 12:09:28 +0000
asID:                     263357
IP address blocks:        2804:14e4:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl
                          rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 09:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d3:bc:04:f0:25:a8:13:4d:bc:0f:40:d2:4b:4b:81:b1:d9:7a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666C4396BE3D615556D2074B0E613EAF065B2878
        Validity
            Not Before: Oct 30 12:04:28 2025 GMT
            Not After : Oct 29 12:09:28 2026 GMT
        Subject: CN=8363C2D93157CE0304523A470A8E542E3A8E3E97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3b:cc:bf:a2:41:2f:d9:0b:24:23:d1:77:33:
                    47:a9:f1:c9:e4:17:d8:02:3d:db:e7:15:d7:db:fe:
                    40:03:6f:0b:63:a8:ce:37:b5:3a:bb:ff:4d:d4:37:
                    1c:5e:2c:fd:c1:34:d1:c2:6d:06:a3:b9:87:6c:8a:
                    85:ac:cf:9c:f9:a5:b5:02:78:73:24:b4:5e:76:59:
                    af:72:37:f0:69:4b:36:ef:9f:e8:50:9f:51:e6:27:
                    a0:57:b0:94:f6:35:fe:ae:3f:bd:b2:87:b5:2c:77:
                    2d:6c:3f:83:4f:ca:4c:54:da:2c:3a:06:ab:a6:b9:
                    a1:28:24:3f:90:fa:4b:6b:f5:3f:57:b8:8d:cf:71:
                    7d:39:f7:8e:07:62:f7:63:36:77:4d:b6:b1:dd:32:
                    9c:61:a8:54:be:47:eb:0f:67:5a:a2:83:c4:3a:ad:
                    73:94:6d:b6:c5:88:a6:a4:22:c1:4f:a4:6e:4a:d8:
                    65:ed:bb:cf:d9:2a:df:72:fa:93:f2:c1:0e:a7:16:
                    68:2c:1d:e2:28:c0:14:24:4d:f7:77:fb:08:a7:f5:
                    12:31:7d:ca:ae:94:46:ca:ec:64:18:17:9f:0f:12:
                    b1:69:e1:65:2d:35:e4:80:57:d5:9d:5d:37:45:f9:
                    47:f4:53:69:2e:83:3a:05:27:2d:c2:cb:08:ff:60:
                    56:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:63:C2:D9:31:57:CE:03:04:52:3A:47:0A:8E:54:2E:3A:8E:3E:97
            X509v3 Authority Key Identifier:
                keyid:66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a663030303a3a2f33362d3336203d3e20323633333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14e4:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         79:50:4c:c3:05:60:22:7a:87:bc:2e:34:79:24:08:f8:b7:8a:
         5e:18:64:0f:15:77:27:a0:08:29:98:39:c1:27:08:97:a2:4c:
         1b:ce:b3:e6:e1:0e:74:ac:93:1d:03:99:5a:10:3d:dc:84:8a:
         f3:97:6f:83:14:fd:83:b7:d3:5b:54:c3:35:20:1c:ac:ee:fc:
         dd:ef:3e:e7:fe:20:e9:7f:b8:10:fa:e2:64:86:ac:47:89:6a:
         63:14:d7:08:84:5b:09:ab:7c:82:e2:5f:b0:31:9b:67:49:96:
         50:a0:c2:19:b1:73:ac:5e:d4:e7:ee:83:a0:c7:6f:7d:da:47:
         a7:f7:a2:cd:ca:39:21:b2:78:64:14:5a:96:a8:f0:78:6a:93:
         4b:68:74:c4:c6:8d:24:97:8a:bb:18:d6:ba:66:df:79:c2:e9:
         0c:e3:78:0e:ad:a3:9d:86:1e:77:1b:cd:be:1d:5e:81:8c:6c:
         26:82:81:08:b7:77:f4:19:61:ca:f6:34:2c:f0:fa:b1:05:34:
         00:95:8a:06:57:2f:67:9d:26:24:16:45:c5:28:24:88:2e:c5:
         c1:31:e1:4f:cd:36:d9:6b:3e:96:bb:a4:ae:e9:70:23:e4:22:
         e0:f4:4f:f1:2e:43:68:ec:30:b6:ca:ee:7d:44:1a:61:99:57:
         fd:dd:b3:e0
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUINO8BPAlqBNNvA9A0ktLgbHZegUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY2QzQzOTZCRTNENjE1NTU2RDIwNzRCMEU2MTNFQUYw
NjVCMjg3ODAeFw0yNTEwMzAxMjA0MjhaFw0yNjEwMjkxMjA5MjhaMDMxMTAvBgNV
BAMTKDgzNjNDMkQ5MzE1N0NFMDMwNDUyM0E0NzBBOEU1NDJFM0E4RTNFOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGO8y/okEv2QskI9F3M0ep8cnk
F9gCPdvnFdfb/kADbwtjqM43tTq7/03UNxxeLP3BNNHCbQajuYdsioWsz5z5pbUC
eHMktF52Wa9yN/BpSzbvn+hQn1HmJ6BXsJT2Nf6uP72yh7Usdy1sP4NPykxU2iw6
BqumuaEoJD+Q+ktr9T9XuI3PcX05944HYvdjNndNtrHdMpxhqFS+R+sPZ1qig8Q6
rXOUbbbFiKakIsFPpG5K2GXtu8/ZKt9y+pPywQ6nFmgsHeIowBQkTfd3+win9RIx
fcqulEbK7GQYF58PErFp4WUtNeSAV9WdXTdF+Uf0U2kugzoFJy3Cywj/YFb3AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUg2PC2TFXzgMEUjpHCo5ULjqOPpcwHwYDVR0j
BBgwFoAUZmxDlr49YVVW0gdLDmE+rwZbKHgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlpRYzRjbWt3WjRuMWtwa2VpVUNqb1NUN3hWWHo1d0ZEaFZUbkZ6SlBW
RmkvMC82NjZDNDM5NkJFM0Q2MTU1NTZEMjA3NEIwRTYxM0VBRjA2NUIyODc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2NkM0Mzk2QkUzRDYxNTU1
NkQyMDc0QjBFNjEzRUFGMDY1QjI4NzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZaUWM0Y21rd1o0bjFrcGtlaVVDam9TVDd4Vlh6NXdGRGhWVG5GekpQVkZpLzAv
MzIzODMwMzQzYTMxMzQ2NTM0M2E2NjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzMzMzMzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEFOTwMA0GCSqGSIb3DQEBCwUA
A4IBAQB5UEzDBWAieoe8LjR5JAj4t4peGGQPFXcnoAgpmDnBJwiXokwbzrPm4Q50
rJMdA5laED3chIrzl2+DFP2Dt9NbVMM1IBys7vzd7z7n/iDpf7gQ+uJkhqxHiWpj
FNcIhFsJq3yC4l+wMZtnSZZQoMIZsXOsXtTn7oOgx2992ken96LNyjkhsnhkFFqW
qPB4apNLaHTExo0kl4q7GNa6Zt95wukM43gOraOdhh53G82+HV6BjGwmgoEIt3f0
GWHK9jQs8PqxBTQAlYoGVy9nnSYkFkXFKCSILsXBMeFPzTbZaz6Wu6Su6XAj5CLg
9E/xLkNo7DC2yu59RBphmVf93bPg
-----END CERTIFICATE-----
Generated at Mon Nov 3 19:10:52 2025 by rpki-client