Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/323830343a323566383a3a2f33322d313238203d3e20323634333135.roa
File:                     323830343a323566383a3a2f33322d313238203d3e20323634333135.roa (raw, json)
Hash identifier:          zei6jlzB5A13WP4NT4WLUPKSGUapUvM8xJmH1Zaalno=
Subject key identifier:   47:4C:49:27:22:98:17:CA:6C:A3:45:01:FA:BF:0E:5C:DD:06:F5:CA
Certificate issuer:       /CN=66A56D870457AAEA1EED831D71D318FB7DA99B42
Certificate serial:       648F9A5D1025541A5D129B810A86CDB1A82B41DB
Authority key identifier: 66:A5:6D:87:04:57:AA:EA:1E:ED:83:1D:71:D3:18:FB:7D:A9:9B:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66A56D870457AAEA1EED831D71D318FB7DA99B42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/323830343a323566383a3a2f33322d313238203d3e20323634333135.roa
Signing time:             Fri 24 Jul 2026 02:42:11 +0000
ROA not before:           Fri 24 Jul 2026 02:37:11 +0000
ROA not after:            Fri 23 Jul 2027 02:42:11 +0000
asID:                     264315
IP address blocks:        2804:25f8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/66A56D870457AAEA1EED831D71D318FB7DA99B42.crl
                          rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/66A56D870457AAEA1EED831D71D318FB7DA99B42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66A56D870457AAEA1EED831D71D318FB7DA99B42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 23:26:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:8f:9a:5d:10:25:54:1a:5d:12:9b:81:0a:86:cd:b1:a8:2b:41:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66A56D870457AAEA1EED831D71D318FB7DA99B42
        Validity
            Not Before: Jul 24 02:37:11 2026 GMT
            Not After : Jul 23 02:42:11 2027 GMT
        Subject: CN=474C4927229817CA6CA34501FABF0E5CDD06F5CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:01:84:89:ab:2c:0d:57:7a:af:1f:24:0f:21:
                    2f:cf:2b:f9:6d:f4:67:1d:21:a7:23:49:d1:ff:9e:
                    5d:68:8d:55:4b:24:03:c8:c4:42:64:ff:65:c3:48:
                    89:b2:ad:ba:3b:bf:b2:15:64:52:b4:81:6f:87:5f:
                    16:64:4c:61:64:cb:3d:2f:5c:82:d0:a5:e9:e2:df:
                    ea:5f:ca:cc:19:8c:83:de:3e:79:dc:db:b3:41:76:
                    1f:33:b6:fc:ef:05:af:53:b3:18:66:3a:90:40:eb:
                    8d:ee:24:9a:18:4c:f4:b0:52:ba:a4:28:a6:07:11:
                    01:2e:61:1f:02:cc:0b:9a:ac:e3:3a:87:cd:80:68:
                    9b:e5:3d:b2:e7:41:9b:df:e5:09:0c:d3:c9:b9:17:
                    fd:b3:e4:ea:c9:6c:73:e3:11:03:65:b3:2a:bd:27:
                    7d:eb:d7:4c:e9:03:91:20:e3:cf:69:30:2d:62:87:
                    05:32:68:ef:79:6e:1c:a7:29:54:75:10:48:35:aa:
                    0e:85:cd:fd:e4:df:f4:68:10:09:b4:5b:05:d9:5f:
                    bd:87:24:5c:fe:84:e9:3c:9b:b1:c0:07:c3:d9:61:
                    a1:50:f6:5e:1a:8f:2b:8a:b4:01:c8:d8:eb:f6:23:
                    5a:a4:5e:76:56:ab:2b:f2:7e:66:d3:e4:78:09:ea:
                    df:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:4C:49:27:22:98:17:CA:6C:A3:45:01:FA:BF:0E:5C:DD:06:F5:CA
            X509v3 Authority Key Identifier:
                keyid:66:A5:6D:87:04:57:AA:EA:1E:ED:83:1D:71:D3:18:FB:7D:A9:9B:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/66A56D870457AAEA1EED831D71D318FB7DA99B42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66A56D870457AAEA1EED831D71D318FB7DA99B42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/323830343a323566383a3a2f33322d313238203d3e20323634333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:2e:92:b0:9f:cd:f9:9f:8f:57:e8:8d:5c:38:1b:38:a4:ae:
         48:c1:9e:32:70:ae:46:f9:c7:ec:15:18:28:ee:d8:ec:e5:4c:
         6d:6c:6c:3a:08:bb:8a:f8:15:3a:83:06:10:61:b9:4d:6a:7b:
         b2:f3:d6:e2:f4:04:29:f3:94:50:49:21:fb:02:7e:d3:c7:56:
         a1:87:68:40:40:b4:9e:cd:1c:9b:a0:cf:2f:89:35:1c:a8:ba:
         9e:87:ae:31:49:62:22:b6:b9:19:cb:b0:cc:1f:3d:51:0e:9c:
         cf:f7:f6:24:95:02:98:be:9d:70:8b:94:31:af:57:83:e0:cb:
         bb:87:a3:67:b6:dd:bd:04:29:f8:c9:3c:59:a0:23:cb:b5:b3:
         66:f0:b2:3e:ed:8e:5d:f7:5c:ba:22:1f:15:af:93:7b:9b:f3:
         69:77:d0:43:de:17:dc:ed:0e:9d:fa:25:67:6d:7e:58:ed:e0:
         0a:1c:13:3c:55:e5:45:c4:33:ae:3d:80:28:4a:91:4b:2d:6b:
         12:50:69:3a:ce:80:e9:54:90:a9:24:01:a7:eb:21:7f:a3:65:
         fc:a3:1e:40:5d:4c:d1:a5:31:cc:a8:94:af:8f:4f:a3:a9:c8:
         bc:ea:1c:84:35:9e:5e:91:6f:3f:f5:ae:18:21:8a:8e:8c:06:
         6c:d5:85:08
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUZI+aXRAlVBpdEpuBCobNsagrQdswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZBNTZEODcwNDU3QUFFQTFFRUQ4MzFENzFEMzE4RkI3
REE5OUI0MjAeFw0yNjA3MjQwMjM3MTFaFw0yNzA3MjMwMjQyMTFaMDMxMTAvBgNV
BAMTKDQ3NEM0OTI3MjI5ODE3Q0E2Q0EzNDUwMUZBQkYwRTVDREQwNkY1Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqAYSJqywNV3qvHyQPIS/PK/lt
9GcdIacjSdH/nl1ojVVLJAPIxEJk/2XDSImyrbo7v7IVZFK0gW+HXxZkTGFkyz0v
XILQpeni3+pfyswZjIPePnnc27NBdh8ztvzvBa9TsxhmOpBA643uJJoYTPSwUrqk
KKYHEQEuYR8CzAuarOM6h82AaJvlPbLnQZvf5QkM08m5F/2z5OrJbHPjEQNlsyq9
J33r10zpA5Eg489pMC1ihwUyaO95bhynKVR1EEg1qg6Fzf3k3/RoEAm0WwXZX72H
JFz+hOk8m7HAB8PZYaFQ9l4ajyuKtAHI2Ov2I1qkXnZWqyvyfmbT5HgJ6t9HAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUR0xJJyKYF8pso0UB+r8OXN0G9cowHwYDVR0j
BBgwFoAUZqVthwRXquoe7YMdcdMY+32pm0IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVJWQkIzeXg1WnVNaGJ6cTZ5Y0FSdmhFTlhQdzVMZEs1V2RzV2F0a2VO
bm0vMC82NkE1NkQ4NzA0NTdBQUVBMUVFRDgzMUQ3MUQzMThGQjdEQTk5QjQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2QTU2RDg3MDQ1N0FBRUEx
RUVEODMxRDcxRDMxOEZCN0RBOTlCNDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVSVkJCM3l4NVp1TWhienE2eWNBUnZoRU5YUHc1TGRLNVdkc1dhdGtlTm5tLzAv
MzIzODMwMzQzYTMyMzU2NjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzQzMzMxMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBCX4MA0GCSqGSIb3DQEBCwUAA4IBAQBmLpKw
n835n49X6I1cOBs4pK5IwZ4ycK5G+cfsFRgo7tjs5UxtbGw6CLuK+BU6gwYQYblN
anuy89bi9AQp85RQSSH7An7Tx1ahh2hAQLSezRyboM8viTUcqLqeh64xSWIitrkZ
y7DMHz1RDpzP9/YklQKYvp1wi5Qxr1eD4Mu7h6Nntt29BCn4yTxZoCPLtbNm8LI+
7Y5d91y6Ih8Vr5N7m/Npd9BD3hfc7Q6d+iVnbX5Y7eAKHBM8VeVFxDOuPYAoSpFL
LWsSUGk6zoDpVJCpJAGn6yF/o2X8ox5AXUzRpTHMqJSvj0+jqci86hyENZ5ekW8/
9a4YIYqOjAZs1YUI
-----END CERTIFICATE-----
Generated at Sat Jul 25 03:39:04 2026 by rpki-client