Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/323830343a3530383a3a2f33322d3438203d3e203532393939.roa
File:                     323830343a3530383a3a2f33322d3438203d3e203532393939.roa (raw, json)
Hash identifier:          mRECBfRrDH8bvMoFsHn2KICHjXH6rdRrCTm5pRn2YRI=
Subject key identifier:   F5:55:68:B7:A6:6F:A0:89:A5:91:D3:7B:D8:1B:C1:2F:BD:FF:38:B0
Certificate issuer:       /CN=6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF
Certificate serial:       4712C702E1FFC544644FE4D94B434956A6F82DDD
Authority key identifier: 6F:6A:82:1A:1D:5F:FC:AF:75:0D:DC:AB:46:26:E1:A4:1F:4E:0C:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/323830343a3530383a3a2f33322d3438203d3e203532393939.roa
Signing time:             Mon 13 Oct 2025 18:07:56 +0000
ROA not before:           Mon 13 Oct 2025 18:02:56 +0000
ROA not after:            Mon 12 Oct 2026 18:07:56 +0000
asID:                     52999
IP address blocks:        2804:508::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.crl
                          rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:17:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:12:c7:02:e1:ff:c5:44:64:4f:e4:d9:4b:43:49:56:a6:f8:2d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF
        Validity
            Not Before: Oct 13 18:02:56 2025 GMT
            Not After : Oct 12 18:07:56 2026 GMT
        Subject: CN=F55568B7A66FA089A591D37BD81BC12FBDFF38B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0c:98:6c:ef:48:63:1e:2c:79:73:1b:d3:38:
                    ca:50:36:ba:7d:dc:bf:de:ca:c0:8c:17:79:ba:6b:
                    0b:79:f7:91:9e:4e:07:c0:bd:37:51:f1:77:c6:e6:
                    ba:06:25:e4:97:f3:21:3e:64:2d:bb:64:80:05:2a:
                    20:76:9a:48:e7:c1:e6:4e:63:72:ec:ad:79:c4:08:
                    ad:78:96:09:7b:c8:cf:1e:cf:5a:ee:d8:0e:a1:e3:
                    4b:33:2c:11:ed:1f:00:95:df:81:65:ab:53:eb:5e:
                    99:24:ae:d2:3c:22:9f:6a:52:b6:d8:80:ef:1f:f0:
                    f6:e8:85:99:a9:ce:57:6e:71:5e:89:9e:72:20:4e:
                    67:f2:04:0b:1a:3e:67:3d:b4:f4:89:b0:8c:f2:9f:
                    3e:1e:3c:18:fb:7d:c5:6c:7d:02:71:82:91:c6:43:
                    a8:16:ff:68:2e:22:b2:a1:7a:82:ea:fa:e5:ff:5b:
                    a5:7d:27:49:16:ea:34:e2:94:ae:fe:0a:6d:3c:d7:
                    45:2b:22:cf:85:10:61:7a:3f:c9:93:4f:05:de:e5:
                    22:e2:d7:12:38:c6:0c:07:0d:cc:06:f3:5f:9c:d9:
                    52:80:ea:d1:55:71:99:c2:f3:75:cd:9c:80:1b:c2:
                    05:7a:f0:20:cb:c8:fc:22:6b:f3:39:57:7b:6c:99:
                    3a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:55:68:B7:A6:6F:A0:89:A5:91:D3:7B:D8:1B:C1:2F:BD:FF:38:B0
            X509v3 Authority Key Identifier:
                keyid:6F:6A:82:1A:1D:5F:FC:AF:75:0D:DC:AB:46:26:E1:A4:1F:4E:0C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/323830343a3530383a3a2f33322d3438203d3e203532393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:508::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:f0:05:d3:81:f3:18:b7:bf:fc:17:a9:5c:86:8b:83:59:e4:
         d4:d2:b7:9f:76:c1:62:58:e7:37:8c:d4:e1:d8:db:1e:6e:0a:
         0d:f9:60:98:5d:df:77:fc:75:5f:bb:a8:40:e9:7f:ed:7d:c9:
         db:0e:33:2c:4b:03:5e:33:9a:fb:79:ee:a1:41:e9:ea:12:ef:
         5b:04:58:77:2f:c4:c7:fa:fd:99:c0:16:72:2a:3c:b0:f5:bc:
         5e:56:30:21:44:d9:1e:3f:8f:7a:38:31:25:52:67:5c:bd:b7:
         4c:1e:0c:58:26:c7:09:79:b2:40:fc:88:e6:ab:9f:51:06:0e:
         d0:9f:4b:97:63:a2:91:a5:f2:73:aa:b0:ce:8b:94:98:20:ec:
         43:d6:e3:79:c3:8f:63:44:9e:2b:9b:ef:04:77:4c:4e:4d:32:
         0e:55:ea:7e:1e:5d:63:b5:6a:39:45:4a:62:61:db:f7:50:d5:
         2b:3a:19:fe:58:b0:84:0c:d1:9c:45:03:5c:0f:04:d2:88:6d:
         c6:2b:d9:e7:77:e8:36:9f:f9:dd:63:a4:5b:cd:8e:f2:d5:51:
         a7:8e:74:78:13:15:f4:c2:37:0d:c1:ad:3e:fc:47:d4:f5:1e:
         95:f6:00:5d:ed:61:0a:51:25:e3:4b:c2:21:e8:fa:c6:4c:6b:
         b1:a2:53:59
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIURxLHAuH/xURkT+TZS0NJVqb4Ld0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY2QTgyMUExRDVGRkNBRjc1MEREQ0FCNDYyNkUxQTQx
RjRFMENCRjAeFw0yNTEwMTMxODAyNTZaFw0yNjEwMTIxODA3NTZaMDMxMTAvBgNV
BAMTKEY1NTU2OEI3QTY2RkEwODlBNTkxRDM3QkQ4MUJDMTJGQkRGRjM4QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4DJhs70hjHix5cxvTOMpQNrp9
3L/eysCMF3m6awt595GeTgfAvTdR8XfG5roGJeSX8yE+ZC27ZIAFKiB2mkjnweZO
Y3LsrXnECK14lgl7yM8ez1ru2A6h40szLBHtHwCV34Flq1PrXpkkrtI8Ip9qUrbY
gO8f8PbohZmpzlducV6JnnIgTmfyBAsaPmc9tPSJsIzynz4ePBj7fcVsfQJxgpHG
Q6gW/2guIrKheoLq+uX/W6V9J0kW6jTilK7+Cm0810UrIs+FEGF6P8mTTwXe5SLi
1xI4xgwHDcwG81+c2VKA6tFVcZnC83XNnIAbwgV68CDLyPwia/M5V3tsmTpPAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU9VVot6ZvoImlkdN72BvBL73/OLAwHwYDVR0j
BBgwFoAUb2qCGh1f/K91DdyrRibhpB9ODL8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTdybzJoUXdFbnY2blV0eWpTR3NBR1FvdEpHMmJUQWpQVW55OEZKd0pT
Y3EvMC82RjZBODIxQTFENUZGQ0FGNzUwRERDQUI0NjI2RTFBNDFGNEUwQ0JGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGNkE4MjFBMUQ1RkZDQUY3
NTBERENBQjQ2MjZFMUE0MUY0RTBDQkYuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk3cm8yaFF3RW52Nm5VdHlqU0dzQUdRb3RKRzJiVEFqUFVueThGSndKU2NxLzAv
MzIzODMwMzQzYTM1MzAzODNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzOTM5
Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAUIMA0GCSqGSIb3DQEBCwUAA4IBAQAC8AXTgfMYt7/8
F6lchouDWeTU0refdsFiWOc3jNTh2NsebgoN+WCYXd93/HVfu6hA6X/tfcnbDjMs
SwNeM5r7ee6hQenqEu9bBFh3L8TH+v2ZwBZyKjyw9bxeVjAhRNkeP496ODElUmdc
vbdMHgxYJscJebJA/Ijmq59RBg7Qn0uXY6KRpfJzqrDOi5SYIOxD1uN5w49jRJ4r
m+8Ed0xOTTIOVep+Hl1jtWo5RUpiYdv3UNUrOhn+WLCEDNGcRQNcDwTSiG3GK9nn
d+g2n/ndY6RbzY7y1VGnjnR4ExX0wjcNwa0+/EfU9R6V9gBd7WEKUSXjS8Ih6PrG
TGuxolNZ
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:45:11 2025 by rpki-client