Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/323830343a353634303a3a2f33322d313238203d3e20323637393836.roa
File:                     323830343a353634303a3a2f33322d313238203d3e20323637393836.roa (raw, json)
Hash identifier:          Uc6DCU2tcc1gv/pwfZmg+qMKOq5OrYNi2v4HovflvBA=
Subject key identifier:   DC:BE:E2:8C:F6:31:A3:62:C3:91:29:CC:A4:BE:E1:89:6B:DB:1F:B6
Certificate issuer:       /CN=54AC13F155FB128EE1E54BFFA49AFA8D920396B2
Certificate serial:       202DDE9437E8BEF814A95CE52FAFD8072FA62918
Authority key identifier: 54:AC:13:F1:55:FB:12:8E:E1:E5:4B:FF:A4:9A:FA:8D:92:03:96:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54AC13F155FB128EE1E54BFFA49AFA8D920396B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/323830343a353634303a3a2f33322d313238203d3e20323637393836.roa
Signing time:             Tue 05 Aug 2025 14:57:14 +0000
ROA not before:           Tue 05 Aug 2025 14:52:14 +0000
ROA not after:            Tue 04 Aug 2026 14:57:14 +0000
asID:                     267986
IP address blocks:        2804:5640::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/54AC13F155FB128EE1E54BFFA49AFA8D920396B2.crl
                          rsync://rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/54AC13F155FB128EE1E54BFFA49AFA8D920396B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54AC13F155FB128EE1E54BFFA49AFA8D920396B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 07:40:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:2d:de:94:37:e8:be:f8:14:a9:5c:e5:2f:af:d8:07:2f:a6:29:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54AC13F155FB128EE1E54BFFA49AFA8D920396B2
        Validity
            Not Before: Aug  5 14:52:14 2025 GMT
            Not After : Aug  4 14:57:14 2026 GMT
        Subject: CN=DCBEE28CF631A362C39129CCA4BEE1896BDB1FB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2e:5d:2f:1e:f8:fc:fa:11:87:57:fe:5f:b2:
                    2f:ff:7d:02:ea:fd:09:b6:61:d4:94:f7:af:8b:9d:
                    13:d6:99:16:4c:fa:92:57:f7:4b:32:82:c2:3f:9a:
                    66:1f:1a:f6:ef:37:ec:64:38:15:f6:8d:62:16:89:
                    2e:7e:ec:75:12:91:f4:dc:26:e5:ae:b2:8d:8c:88:
                    5f:2a:3b:c3:ea:a8:89:18:32:ee:95:88:e5:d1:47:
                    1b:4c:e4:82:4d:d0:79:22:04:53:5b:24:71:33:d3:
                    6b:10:0e:d9:78:2f:ad:be:ab:20:73:11:04:fd:c8:
                    c2:a7:03:12:ed:a0:7e:59:ef:20:c7:67:7e:e5:f3:
                    1c:77:88:65:2a:27:4c:05:53:89:27:5e:69:41:22:
                    f5:53:30:3b:6d:c1:9f:0d:fd:90:48:9e:b5:5b:06:
                    e3:67:fe:42:a9:ad:b6:c8:41:7e:c4:ae:9c:b9:ba:
                    66:6d:09:f9:35:92:b3:1f:0d:29:0b:57:d7:e2:64:
                    16:d4:1a:a3:db:ff:e6:58:9a:9d:f7:eb:3a:ff:2c:
                    f5:2b:74:d1:50:9a:03:96:2a:3d:03:ea:31:23:f8:
                    ee:63:2c:8e:f6:79:da:d4:3c:43:f4:34:81:bc:14:
                    16:35:a5:9c:d2:c8:8d:2e:8a:d2:90:34:30:ba:82:
                    c1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:BE:E2:8C:F6:31:A3:62:C3:91:29:CC:A4:BE:E1:89:6B:DB:1F:B6
            X509v3 Authority Key Identifier:
                keyid:54:AC:13:F1:55:FB:12:8E:E1:E5:4B:FF:A4:9A:FA:8D:92:03:96:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/54AC13F155FB128EE1E54BFFA49AFA8D920396B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54AC13F155FB128EE1E54BFFA49AFA8D920396B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/323830343a353634303a3a2f33322d313238203d3e20323637393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5640::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:6a:c4:2a:3a:d0:d1:bc:eb:e8:00:d7:4b:76:c9:52:2a:6b:
         c2:a4:43:76:c3:a2:2a:75:95:39:92:da:42:6e:6d:e8:6d:ac:
         b8:4e:ea:ce:6d:9f:8f:da:4f:4e:83:2d:86:21:98:3d:43:c8:
         66:37:ea:bd:e2:7c:9e:15:4a:2f:9a:78:e2:ee:12:fc:cb:c1:
         b9:78:e6:10:e2:b5:95:c7:f7:2a:ce:f3:ac:45:a7:d3:44:26:
         70:ee:71:c4:01:d9:95:81:29:4d:04:c0:a5:62:72:08:c9:ab:
         95:c1:67:88:eb:f1:a9:e5:1d:e9:fa:8c:03:42:d3:98:0f:b4:
         51:90:52:da:50:d3:10:2f:cc:91:f2:d4:5c:df:56:46:75:48:
         b1:26:64:bf:c0:9a:b9:4a:64:7e:a9:1b:d3:b5:a3:1b:73:2d:
         6c:94:76:a0:b9:bd:c9:c1:65:1a:b6:82:ef:02:45:d5:98:d8:
         59:3c:5d:1f:1a:22:db:04:e4:28:3b:11:d4:e2:59:2b:3b:d4:
         38:2c:94:35:4c:53:63:c8:e6:cd:df:cc:1f:7c:e8:28:05:38:
         c8:13:dd:ff:86:cc:07:55:de:3a:18:2d:a7:bb:8a:ea:e4:69:
         32:36:9f:a7:88:26:1f:65:99:d6:cb:03:15:5f:d3:87:d3:7d:
         31:63:25:76
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUIC3elDfovvgUqVzlL6/YBy+mKRgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRBQzEzRjE1NUZCMTI4RUUxRTU0QkZGQTQ5QUZBOEQ5
MjAzOTZCMjAeFw0yNTA4MDUxNDUyMTRaFw0yNjA4MDQxNDU3MTRaMDMxMTAvBgNV
BAMTKERDQkVFMjhDRjYzMUEzNjJDMzkxMjlDQ0E0QkVFMTg5NkJEQjFGQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtLl0vHvj8+hGHV/5fsi//fQLq
/Qm2YdSU96+LnRPWmRZM+pJX90sygsI/mmYfGvbvN+xkOBX2jWIWiS5+7HUSkfTc
JuWuso2MiF8qO8PqqIkYMu6ViOXRRxtM5IJN0HkiBFNbJHEz02sQDtl4L62+qyBz
EQT9yMKnAxLtoH5Z7yDHZ37l8xx3iGUqJ0wFU4knXmlBIvVTMDttwZ8N/ZBInrVb
BuNn/kKprbbIQX7Erpy5umZtCfk1krMfDSkLV9fiZBbUGqPb/+ZYmp336zr/LPUr
dNFQmgOWKj0D6jEj+O5jLI72edrUPEP0NIG8FBY1pZzSyI0uitKQNDC6gsEJAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU3L7ijPYxo2LDkSnMpL7hiWvbH7YwHwYDVR0j
BBgwFoAUVKwT8VX7Eo7h5Uv/pJr6jZIDlrIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjFabzRVNWRkcDltZUZGTlhOV3luUjJwUDRaV0JEVUtVY1Jac1FRTWJZ
ck0vMC81NEFDMTNGMTU1RkIxMjhFRTFFNTRCRkZBNDlBRkE4RDkyMDM5NkIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0QUMxM0YxNTVGQjEyOEVF
MUU1NEJGRkE0OUFGQThEOTIwMzk2QjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0YxWm80VTVkZHA5bWVGRk5YTld5blIycFA0WldCRFVLVWNSWnNRUU1iWXJNLzAv
MzIzODMwMzQzYTM1MzYzNDMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczOTM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFZAMA0GCSqGSIb3DQEBCwUAA4IBAQCMasQq
OtDRvOvoANdLdslSKmvCpEN2w6IqdZU5ktpCbm3obay4TurObZ+P2k9Ogy2GIZg9
Q8hmN+q94nyeFUovmnji7hL8y8G5eOYQ4rWVx/cqzvOsRafTRCZw7nHEAdmVgSlN
BMClYnIIyauVwWeI6/Gp5R3p+owDQtOYD7RRkFLaUNMQL8yR8tRc31ZGdUixJmS/
wJq5SmR+qRvTtaMbcy1slHagub3JwWUatoLvAkXVmNhZPF0fGiLbBOQoOxHU4lkr
O9Q4LJQ1TFNjyObN38wffOgoBTjIE93/hswHVd46GC2nu4rq5GkyNp+niCYfZZnW
ywMVX9OH030xYyV2
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:30:14 2025 by rpki-client