Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/323830343a356439303a3a2f33322d3438203d3e203133373836.roa
File:                     323830343a356439303a3a2f33322d3438203d3e203133373836.roa (raw, json)
Hash identifier:          ydjZqPe6zeZ89ufkdlT/438yc1ftpXM6DIsOtg9D5VI=
Subject key identifier:   6E:EE:87:61:9B:60:55:04:7B:00:60:8E:F4:E6:28:B8:D9:A4:C5:A7
Certificate issuer:       /CN=FD9B1F96040398EB4A95F392D33F09CA8B1135A8
Certificate serial:       287935DB5E7E661D16AED33192C4C8C9D5D7D0F0
Authority key identifier: FD:9B:1F:96:04:03:98:EB:4A:95:F3:92:D3:3F:09:CA:8B:11:35:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD9B1F96040398EB4A95F392D33F09CA8B1135A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/323830343a356439303a3a2f33322d3438203d3e203133373836.roa
Signing time:             Fri 31 Oct 2025 03:09:16 +0000
ROA not before:           Fri 31 Oct 2025 03:04:16 +0000
ROA not after:            Fri 30 Oct 2026 03:09:16 +0000
asID:                     13786
IP address blocks:        2804:5d90::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/FD9B1F96040398EB4A95F392D33F09CA8B1135A8.crl
                          rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/FD9B1F96040398EB4A95F392D33F09CA8B1135A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD9B1F96040398EB4A95F392D33F09CA8B1135A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 00:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:79:35:db:5e:7e:66:1d:16:ae:d3:31:92:c4:c8:c9:d5:d7:d0:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD9B1F96040398EB4A95F392D33F09CA8B1135A8
        Validity
            Not Before: Oct 31 03:04:16 2025 GMT
            Not After : Oct 30 03:09:16 2026 GMT
        Subject: CN=6EEE87619B6055047B00608EF4E628B8D9A4C5A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fe:76:e8:6e:c4:d1:da:d5:14:13:fc:7c:56:
                    57:80:63:59:16:2e:2d:28:8b:fd:b9:ee:c7:89:ff:
                    80:25:60:46:18:2d:42:fa:33:93:2b:24:59:42:66:
                    ba:d3:e7:d9:dd:64:24:95:b3:fb:98:6e:23:66:c4:
                    b0:5a:84:b3:57:11:f3:06:26:11:b0:05:72:e9:72:
                    18:1f:bb:af:a8:e3:d2:9b:84:d4:56:b7:05:63:4c:
                    85:09:5e:c8:bc:9e:59:17:e8:a3:5a:c7:91:5c:05:
                    0e:09:a9:fd:4a:99:08:8a:89:b8:f0:ee:73:34:57:
                    8e:c5:73:32:fb:bf:d9:74:60:27:f8:16:ab:c3:7b:
                    ec:9c:1e:93:7d:f0:28:ff:95:91:9d:75:e6:05:38:
                    ac:d7:b3:54:06:4c:1c:79:f6:a0:10:82:0a:ce:a7:
                    80:bb:8f:9e:14:54:e9:04:f1:33:2c:9e:3e:fd:7c:
                    9e:c3:0e:41:5c:17:21:4a:47:26:68:b7:ff:09:a9:
                    87:4d:12:d3:e6:a9:71:bc:8f:68:ed:2d:2f:3d:7b:
                    1b:f2:ae:93:55:7e:9f:16:7e:c7:54:17:5e:1c:b0:
                    43:0c:16:df:3c:ea:ec:d5:b4:96:53:3f:c4:f6:7d:
                    8a:de:05:6e:4d:65:74:5e:81:79:21:4a:76:31:27:
                    16:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EE:87:61:9B:60:55:04:7B:00:60:8E:F4:E6:28:B8:D9:A4:C5:A7
            X509v3 Authority Key Identifier:
                keyid:FD:9B:1F:96:04:03:98:EB:4A:95:F3:92:D3:3F:09:CA:8B:11:35:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/FD9B1F96040398EB4A95F392D33F09CA8B1135A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD9B1F96040398EB4A95F392D33F09CA8B1135A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/323830343a356439303a3a2f33322d3438203d3e203133373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:24:72:70:e7:b0:9f:23:e9:19:69:d7:a0:9e:23:e1:97:89:
         ea:97:57:bb:91:93:06:6f:af:d4:5b:0e:0c:93:47:0b:a3:d5:
         49:a4:18:e4:94:55:47:9f:ff:de:67:16:e2:1d:e5:39:fe:3d:
         f0:25:b2:3f:ad:c6:68:7d:79:9f:cc:c5:c1:96:9a:2f:9a:c6:
         48:56:5a:78:26:2c:3d:aa:c8:55:79:b3:56:11:e6:55:27:bb:
         86:7d:ad:ad:27:12:e9:34:c7:bb:9e:9a:7e:b6:60:05:a6:e5:
         6c:58:54:23:ff:7b:8f:57:b8:4f:9a:56:d1:58:76:81:01:18:
         f4:8b:26:e2:a3:71:61:5e:fb:94:d2:e3:1d:d9:38:2a:fc:60:
         ea:26:f7:eb:42:be:05:8a:5c:89:d8:2e:4c:5d:ec:5e:ba:32:
         77:8b:00:6e:e1:06:0f:15:eb:b6:68:af:94:dc:e8:51:44:8d:
         48:1d:29:72:f5:0d:6d:55:24:2a:96:8a:89:fc:2b:cd:0e:0e:
         d9:6f:5d:38:30:2b:88:dc:7e:4a:13:a9:0a:09:b9:71:cc:77:
         f4:df:29:9e:fd:9c:21:3c:f4:5d:bc:ec:a4:fe:0f:3d:0e:bd:
         56:0c:1b:0e:58:c1:f8:89:ed:da:cf:e9:61:56:b6:db:97:c3:
         6f:08:74:18
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUKHk1215+Zh0WrtMxksTIydXX0PAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQ5QjFGOTYwNDAzOThFQjRBOTVGMzkyRDMzRjA5Q0E4
QjExMzVBODAeFw0yNTEwMzEwMzA0MTZaFw0yNjEwMzAwMzA5MTZaMDMxMTAvBgNV
BAMTKDZFRUU4NzYxOUI2MDU1MDQ3QjAwNjA4RUY0RTYyOEI4RDlBNEM1QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm/nbobsTR2tUUE/x8VleAY1kW
Li0oi/257seJ/4AlYEYYLUL6M5MrJFlCZrrT59ndZCSVs/uYbiNmxLBahLNXEfMG
JhGwBXLpchgfu6+o49KbhNRWtwVjTIUJXsi8nlkX6KNax5FcBQ4Jqf1KmQiKibjw
7nM0V47FczL7v9l0YCf4FqvDe+ycHpN98Cj/lZGddeYFOKzXs1QGTBx59qAQggrO
p4C7j54UVOkE8TMsnj79fJ7DDkFcFyFKRyZot/8JqYdNEtPmqXG8j2jtLS89exvy
rpNVfp8WfsdUF14csEMMFt886uzVtJZTP8T2fYreBW5NZXRegXkhSnYxJxbzAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUbu6HYZtgVQR7AGCO9OYouNmkxacwHwYDVR0j
BBgwFoAU/ZsflgQDmOtKlfOS0z8JyosRNagwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHF2QlVMSGtQTGJqMTVGa3VrQW9BeFFuRWprWVNqOVhUb3BxZmQ1R0pq
cmcvMC9GRDlCMUY5NjA0MDM5OEVCNEE5NUYzOTJEMzNGMDlDQThCMTEzNUE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZEOUIxRjk2MDQwMzk4RUI0
QTk1RjM5MkQzM0YwOUNBOEIxMTM1QTguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hxdkJVTEhrUExiajE1Rmt1a0FvQXhRbkVqa1lTajlYVG9wcWZkNUdKanJnLzAv
MzIzODMwMzQzYTM1NjQzOTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzEzMzM3
MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEXZAwDQYJKoZIhvcNAQELBQADggEBABckcnDnsJ8j
6Rlp16CeI+GXieqXV7uRkwZvr9RbDgyTRwuj1UmkGOSUVUef/95nFuId5Tn+PfAl
sj+txmh9eZ/MxcGWmi+axkhWWngmLD2qyFV5s1YR5lUnu4Z9ra0nEuk0x7uemn62
YAWm5WxYVCP/e49XuE+aVtFYdoEBGPSLJuKjcWFe+5TS4x3ZOCr8YOom9+tCvgWK
XInYLkxd7F66MneLAG7hBg8V67Zor5Tc6FFEjUgdKXL1DW1VJCqWion8K80ODtlv
XTgwK4jcfkoTqQoJuXHMd/TfKZ79nCE89F287KT+Dz0OvVYMGw5YwfiJ7drP6WFW
ttuXw28IdBg=
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:26:23 2025 by rpki-client