Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a3a2f33332d3333203d3e20323639303234.roa
File:                     323830343a356534633a3a2f33332d3333203d3e20323639303234.roa (raw, json)
Hash identifier:          qS+Xd7X0IR+oO5k4edPwXIUjAKRwMHuGneCZO9OrwcU=
Subject key identifier:   F4:64:45:5B:A8:3F:30:0C:8B:E7:C8:E3:6F:AC:11:11:07:CB:F4:D7
Certificate issuer:       /CN=FE2319FC1036B0766234A53A5A9BB64CDEF6D744
Certificate serial:       4CF290952C3A021B2F972AB0C449B1623E76AD1F
Authority key identifier: FE:23:19:FC:10:36:B0:76:62:34:A5:3A:5A:9B:B6:4C:DE:F6:D7:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a3a2f33332d3333203d3e20323639303234.roa
Signing time:             Thu 25 Sep 2025 12:48:29 +0000
ROA not before:           Thu 25 Sep 2025 12:43:29 +0000
ROA not after:            Thu 24 Sep 2026 12:48:29 +0000
asID:                     269024
IP address blocks:        2804:5e4c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.crl
                          rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f2:90:95:2c:3a:02:1b:2f:97:2a:b0:c4:49:b1:62:3e:76:ad:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE2319FC1036B0766234A53A5A9BB64CDEF6D744
        Validity
            Not Before: Sep 25 12:43:29 2025 GMT
            Not After : Sep 24 12:48:29 2026 GMT
        Subject: CN=F464455BA83F300C8BE7C8E36FAC111107CBF4D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a8:75:ca:f6:1a:07:f6:2b:88:bd:7f:75:5d:
                    86:10:b0:eb:18:35:ef:56:a7:21:5c:50:8d:49:a6:
                    08:17:f4:b1:b0:2c:f2:bc:cf:ae:ca:01:f2:8b:1c:
                    29:bf:d8:18:16:a0:24:a3:1d:ea:01:e7:24:aa:aa:
                    3a:4a:d6:f8:93:57:1b:36:d4:f5:e5:b6:5a:94:87:
                    af:f1:13:ec:9b:bf:4a:dd:ac:85:27:b7:2a:50:a8:
                    12:22:4f:65:e8:4e:74:75:2a:15:46:9c:51:bf:e1:
                    f9:1c:0e:5c:3d:1d:2f:a0:7b:58:ed:b9:14:6a:94:
                    dc:bd:f6:ec:5c:52:dd:2c:13:c1:97:65:54:44:99:
                    a0:c8:25:7c:af:76:d2:3e:06:17:e2:60:d9:21:8e:
                    c7:85:4e:81:75:f9:45:85:00:94:91:4a:7f:64:c7:
                    00:9f:53:d4:71:44:0f:b5:83:c2:32:b7:24:e6:ad:
                    d0:22:c2:5a:7e:d0:6e:99:2a:84:8d:42:11:8c:b7:
                    6a:1a:78:38:0a:84:50:70:50:32:b8:0b:1e:5c:c0:
                    44:16:40:cb:37:fd:5d:53:0f:fb:88:6f:70:47:15:
                    a8:0f:c0:e1:cc:36:3e:de:c2:06:ce:2a:01:73:0b:
                    1b:0f:50:38:45:a1:23:a0:41:01:01:8b:b5:c9:73:
                    bd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:64:45:5B:A8:3F:30:0C:8B:E7:C8:E3:6F:AC:11:11:07:CB:F4:D7
            X509v3 Authority Key Identifier:
                keyid:FE:23:19:FC:10:36:B0:76:62:34:A5:3A:5A:9B:B6:4C:DE:F6:D7:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a3a2f33332d3333203d3e20323639303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e4c::/33

    Signature Algorithm: sha256WithRSAEncryption
         c5:fe:56:ac:2a:05:b5:3b:7f:7d:c1:69:d6:55:18:72:ce:22:
         19:c9:58:2d:ce:3f:e8:b8:54:26:70:7f:ec:5e:2e:ab:4e:f2:
         ca:85:23:d5:19:15:b6:d0:a7:fc:47:f1:de:5f:24:a4:ef:7a:
         c3:03:ed:e3:6b:b2:c0:34:0c:b7:b1:65:51:fc:1b:63:d9:3a:
         68:46:ec:0d:f7:ff:f0:3e:ca:80:7f:ea:93:7f:1f:f2:9e:9b:
         44:b3:3a:af:55:cb:29:ab:78:4e:f8:a5:e5:e0:9e:e6:c2:c3:
         44:21:db:ba:02:c7:be:48:11:d1:9e:20:8f:47:3c:4c:99:a0:
         ac:81:a2:c0:d4:f2:96:d2:a7:ef:cc:2e:85:08:86:49:3e:34:
         5f:28:0e:51:5d:3f:19:bb:00:36:5f:bc:b0:28:29:60:e2:0f:
         50:73:ff:3b:27:fb:e8:d8:fc:55:8f:1b:c9:58:a1:ed:d9:bc:
         a0:52:3c:df:7b:3d:6b:68:c7:b9:93:65:93:36:c5:ba:fb:97:
         e8:6d:2b:ee:bc:23:5a:fa:fe:9c:c9:09:55:44:17:5f:f0:de:
         2d:c7:f0:05:93:6d:8d:d8:9a:ac:22:1f:a0:6c:44:d8:8a:f9:
         e7:12:51:04:5b:10:3c:1b:74:64:65:2b:73:d0:1d:91:80:61:
         cd:cc:dc:ae
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTPKQlSw6AhsvlyqwxEmxYj52rR8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkUyMzE5RkMxMDM2QjA3NjYyMzRBNTNBNUE5QkI2NENE
RUY2RDc0NDAeFw0yNTA5MjUxMjQzMjlaFw0yNjA5MjQxMjQ4MjlaMDMxMTAvBgNV
BAMTKEY0NjQ0NTVCQTgzRjMwMEM4QkU3QzhFMzZGQUMxMTExMDdDQkY0RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsqHXK9hoH9iuIvX91XYYQsOsY
Ne9WpyFcUI1JpggX9LGwLPK8z67KAfKLHCm/2BgWoCSjHeoB5ySqqjpK1viTVxs2
1PXltlqUh6/xE+ybv0rdrIUntypQqBIiT2XoTnR1KhVGnFG/4fkcDlw9HS+ge1jt
uRRqlNy99uxcUt0sE8GXZVREmaDIJXyvdtI+BhfiYNkhjseFToF1+UWFAJSRSn9k
xwCfU9RxRA+1g8IytyTmrdAiwlp+0G6ZKoSNQhGMt2oaeDgKhFBwUDK4Cx5cwEQW
QMs3/V1TD/uIb3BHFagPwOHMNj7ewgbOKgFzCxsPUDhFoSOgQQEBi7XJc72tAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU9GRFW6g/MAyL58jjb6wREQfL9NcwHwYDVR0j
BBgwFoAU/iMZ/BA2sHZiNKU6Wpu2TN7210QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOENjSHNIUlZ3M241MWJIZ051M1lxYzdQNFdGTFM4bVk1NExYYVV2a1lE
ZFovMC9GRTIzMTlGQzEwMzZCMDc2NjIzNEE1M0E1QTlCQjY0Q0RFRjZENzQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFMjMxOUZDMTAzNkIwNzY2
MjM0QTUzQTVBOUJCNjRDREVGNkQ3NDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhDY0hzSFJWdzNuNTFiSGdOdTNZcWM3UDRXRkxTOG1ZNTRMWGFVdmtZRGRaLzAv
MzIzODMwMzQzYTM1NjUzNDYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM5
MzAzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAReTAAwDQYJKoZIhvcNAQELBQADggEBAMX+Vqwq
BbU7f33BadZVGHLOIhnJWC3OP+i4VCZwf+xeLqtO8sqFI9UZFbbQp/xH8d5fJKTv
esMD7eNrssA0DLexZVH8G2PZOmhG7A33//A+yoB/6pN/H/Kem0SzOq9VyymreE74
peXgnubCw0Qh27oCx75IEdGeII9HPEyZoKyBosDU8pbSp+/MLoUIhkk+NF8oDlFd
Pxm7ADZfvLAoKWDiD1Bz/zsn++jY/FWPG8lYoe3ZvKBSPN97PWtox7mTZZM2xbr7
l+htK+68I1r6/pzJCVVEF1/w3i3H8AWTbY3YmqwiH6BsRNiK+ecSUQRbEDwbdGRl
K3PQHZGAYc3M3K4=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:54:45 2025 by rpki-client