Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/323830343a343838633a3a2f33332d3333203d3e20323637313238.roa
File:                     323830343a343838633a3a2f33332d3333203d3e20323637313238.roa (raw, json)
Hash identifier:          zKHOAMEabyAxJ53qG6c7UQHtc47l1zX4QlPE9jIu7uc=
Subject key identifier:   51:45:7F:99:CA:BF:16:89:6D:A1:F4:54:85:F6:08:19:88:25:05:AA
Certificate issuer:       /CN=64755CD3D31B6F1A5094E0F187202D5551F1D36D
Certificate serial:       1CD43E2DA0973A32C92520D73B3FAE050198B0B8
Authority key identifier: 64:75:5C:D3:D3:1B:6F:1A:50:94:E0:F1:87:20:2D:55:51:F1:D3:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64755CD3D31B6F1A5094E0F187202D5551F1D36D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/323830343a343838633a3a2f33332d3333203d3e20323637313238.roa
Signing time:             Sat 12 Sep 2026 14:55:07 +0000
ROA not before:           Sat 12 Sep 2026 14:50:07 +0000
ROA not after:            Sat 11 Sep 2027 14:55:07 +0000
asID:                     267128
IP address blocks:        2804:488c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/64755CD3D31B6F1A5094E0F187202D5551F1D36D.crl
                          rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/64755CD3D31B6F1A5094E0F187202D5551F1D36D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64755CD3D31B6F1A5094E0F187202D5551F1D36D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 16:42:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d4:3e:2d:a0:97:3a:32:c9:25:20:d7:3b:3f:ae:05:01:98:b0:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64755CD3D31B6F1A5094E0F187202D5551F1D36D
        Validity
            Not Before: Sep 12 14:50:07 2026 GMT
            Not After : Sep 11 14:55:07 2027 GMT
        Subject: CN=51457F99CABF16896DA1F45485F60819882505AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7f:e8:79:09:67:13:42:e7:13:ee:70:24:1e:
                    56:89:08:3e:53:61:d1:de:fe:b8:d2:ec:eb:fc:ea:
                    d2:bc:9f:5d:0d:8d:6a:43:87:e7:28:be:e3:ef:ff:
                    30:27:d3:45:18:97:ab:dc:d6:ea:71:c8:b7:99:95:
                    bb:18:d6:28:b9:8c:43:81:f6:d5:38:02:ba:d3:88:
                    f8:7a:ba:ed:9e:46:53:ae:44:9b:71:34:d9:c8:d5:
                    75:bf:bc:c8:38:4f:a1:cb:d1:21:22:5c:f4:74:d6:
                    ef:47:97:25:99:f7:99:70:e6:cd:14:1d:b7:8f:ef:
                    9a:0a:cd:ed:f0:f2:33:09:0c:d1:bc:f9:2c:19:3c:
                    f2:cc:d7:be:7b:74:b7:d5:f5:48:cc:b6:a2:e5:b1:
                    04:6b:09:63:1a:26:0c:17:89:d4:14:f6:dd:6f:aa:
                    bb:f9:4f:2b:fc:98:31:00:78:7b:7c:2e:f8:cf:ed:
                    68:a1:ae:ce:e8:69:8b:52:fd:5d:82:d6:17:fd:31:
                    04:9a:bd:a9:3c:60:dd:c3:0e:30:de:b7:59:cf:1e:
                    39:0f:9b:19:c6:e2:bf:cb:6b:7d:09:af:eb:8b:d4:
                    17:af:e4:ab:1a:11:3f:b5:6e:cc:5e:93:eb:d7:72:
                    49:bd:2a:f4:a2:26:83:73:df:d7:c3:08:3d:b5:1a:
                    57:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:45:7F:99:CA:BF:16:89:6D:A1:F4:54:85:F6:08:19:88:25:05:AA
            X509v3 Authority Key Identifier:
                keyid:64:75:5C:D3:D3:1B:6F:1A:50:94:E0:F1:87:20:2D:55:51:F1:D3:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/64755CD3D31B6F1A5094E0F187202D5551F1D36D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64755CD3D31B6F1A5094E0F187202D5551F1D36D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/323830343a343838633a3a2f33332d3333203d3e20323637313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:488c::/33

    Signature Algorithm: sha256WithRSAEncryption
         07:dc:79:cd:e5:02:f3:57:af:84:de:81:e9:e5:81:20:e8:4c:
         98:1d:8e:3f:ef:98:77:0e:68:61:0e:59:0d:5c:4f:39:a9:29:
         55:19:fa:bc:3c:35:8d:cc:03:3a:d7:52:04:b2:8e:09:cd:4e:
         97:f9:eb:1b:70:29:a3:d1:45:c1:d9:47:07:3f:63:8a:bb:76:
         55:2d:4f:90:ec:4d:84:a3:16:f8:c6:02:d4:03:4a:d8:b6:5f:
         7d:d2:2b:40:5f:6e:9d:cd:7b:71:d7:64:63:ea:03:8a:2a:97:
         c8:69:3a:79:43:40:6f:d7:7d:c6:ee:5d:1b:eb:3b:9d:93:50:
         40:b2:14:71:eb:ff:d4:1a:0d:de:8a:c2:d7:58:8a:ec:a5:eb:
         aa:3a:15:1d:a3:34:a9:0f:8a:3d:68:d5:25:a1:54:c0:e9:c9:
         23:03:c6:ed:97:e1:95:33:2f:23:da:60:9f:37:40:35:a0:ef:
         28:d3:65:b1:e2:fc:63:91:4f:28:98:a2:75:4d:b4:b0:34:69:
         ad:9f:28:82:4d:59:75:ad:7f:ae:17:b1:ed:72:36:54:bd:be:
         6f:37:d1:90:52:2a:fe:ee:9a:be:be:a1:dc:a6:b5:ce:e5:1f:
         c0:d5:5c:47:8f:95:75:ed:fd:fa:4a:34:79:3e:cd:d4:d3:ca:
         82:02:75:fd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHNQ+LaCXOjLJJSDXOz+uBQGYsLgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ3NTVDRDNEMzFCNkYxQTUwOTRFMEYxODcyMDJENTU1
MUYxRDM2RDAeFw0yNjA5MTIxNDUwMDdaFw0yNzA5MTExNDU1MDdaMDMxMTAvBgNV
BAMTKDUxNDU3Rjk5Q0FCRjE2ODk2REExRjQ1NDg1RjYwODE5ODgyNTA1QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPf+h5CWcTQucT7nAkHlaJCD5T
YdHe/rjS7Ov86tK8n10NjWpDh+covuPv/zAn00UYl6vc1upxyLeZlbsY1ii5jEOB
9tU4ArrTiPh6uu2eRlOuRJtxNNnI1XW/vMg4T6HL0SEiXPR01u9HlyWZ95lw5s0U
HbeP75oKze3w8jMJDNG8+SwZPPLM1757dLfV9UjMtqLlsQRrCWMaJgwXidQU9t1v
qrv5Tyv8mDEAeHt8LvjP7Wihrs7oaYtS/V2C1hf9MQSavak8YN3DDjDet1nPHjkP
mxnG4r/La30Jr+uL1Bev5KsaET+1bsxek+vXckm9KvSiJoNz39fDCD21GldnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUUUV/mcq/FoltofRUhfYIGYglBaowHwYDVR0j
BBgwFoAUZHVc09MbbxpQlODxhyAtVVHx020wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3pGbWdZSzJaVnRzV2g0d05ZUDVkSkt2b1hCeHpEOU5ybk52eEgyb1Ra
ZmsvMC82NDc1NUNEM0QzMUI2RjFBNTA5NEUwRjE4NzIwMkQ1NTUxRjFEMzZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0NzU1Q0QzRDMxQjZGMUE1
MDk0RTBGMTg3MjAyRDU1NTFGMUQzNkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N6Rm1nWUsyWlZ0c1doNHdOWVA1ZEpLdm9YQnh6RDlOcm5OdnhIMm9UWmZrLzAv
MzIzODMwMzQzYTM0MzgzODYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM3
MzEzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARIjAAwDQYJKoZIhvcNAQELBQADggEBAAfcec3l
AvNXr4TegenlgSDoTJgdjj/vmHcOaGEOWQ1cTzmpKVUZ+rw8NY3MAzrXUgSyjgnN
Tpf56xtwKaPRRcHZRwc/Y4q7dlUtT5DsTYSjFvjGAtQDSti2X33SK0Bfbp3Ne3HX
ZGPqA4oql8hpOnlDQG/XfcbuXRvrO52TUECyFHHr/9QaDd6KwtdYiuyl66o6FR2j
NKkPij1o1SWhVMDpySMDxu2X4ZUzLyPaYJ83QDWg7yjTZbHi/GORTyiYonVNtLA0
aa2fKIJNWXWtf64Xse1yNlS9vm830ZBSKv7umr6+odymtc7lH8DVXEePlXXt/fpK
NHk+zdTTyoICdf0=
-----END CERTIFICATE-----
Generated at Sat Oct 17 19:35:37 2026 by rpki-client