Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/323830343a326537633a323430303a3a2f34322d3432203d3e20323635333438.roa
File:                     323830343a326537633a323430303a3a2f34322d3432203d3e20323635333438.roa (raw, json)
Hash identifier:          PWXXhABOTyMS7eJKcH2sNOx5yoUpf2jnwl8YhTyNtrM=
Subject key identifier:   EF:59:A2:77:FE:97:42:93:97:A8:2B:90:D3:1C:8C:06:70:78:DE:66
Certificate issuer:       /CN=D43CE255EB79889CB9BA96FB45F508419539B2EC
Certificate serial:       25F7C46DBA1E9655B596AA45BCAE888F438E37ED
Authority key identifier: D4:3C:E2:55:EB:79:88:9C:B9:BA:96:FB:45:F5:08:41:95:39:B2:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D43CE255EB79889CB9BA96FB45F508419539B2EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/323830343a326537633a323430303a3a2f34322d3432203d3e20323635333438.roa
Signing time:             Mon 20 Jul 2026 20:16:07 +0000
ROA not before:           Mon 20 Jul 2026 20:11:07 +0000
ROA not after:            Mon 19 Jul 2027 20:16:07 +0000
asID:                     265348
IP address blocks:        2804:2e7c:2400::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/D43CE255EB79889CB9BA96FB45F508419539B2EC.crl
                          rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/D43CE255EB79889CB9BA96FB45F508419539B2EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D43CE255EB79889CB9BA96FB45F508419539B2EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f7:c4:6d:ba:1e:96:55:b5:96:aa:45:bc:ae:88:8f:43:8e:37:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D43CE255EB79889CB9BA96FB45F508419539B2EC
        Validity
            Not Before: Jul 20 20:11:07 2026 GMT
            Not After : Jul 19 20:16:07 2027 GMT
        Subject: CN=EF59A277FE97429397A82B90D31C8C067078DE66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:67:32:2b:bf:0c:6a:8b:96:4d:30:60:ba:ca:
                    24:8d:14:a7:2d:f8:8a:8e:23:a1:8c:45:2b:ea:74:
                    05:45:7c:5a:b0:99:0e:7e:4e:56:22:e0:0e:c0:c1:
                    e5:82:ac:32:f0:f1:6b:70:fc:dd:71:4b:a4:ff:8e:
                    c9:0e:31:d5:52:db:ae:bb:84:8e:38:ed:1e:81:eb:
                    ea:02:bc:89:1c:b0:fa:cb:cb:d8:01:43:c1:0a:c7:
                    ac:fb:2c:3c:b9:2d:70:59:92:da:71:93:d5:38:e4:
                    2f:d6:2c:a8:de:ff:81:f7:ac:33:1f:87:b4:2b:05:
                    02:bb:19:f4:71:21:b0:96:d8:c9:90:84:48:bd:a9:
                    3d:d3:ab:da:02:02:64:51:cb:11:40:57:b4:8a:8d:
                    34:ca:4e:70:6b:c8:a3:de:ce:73:4d:e9:e0:25:75:
                    b9:9a:b0:63:b6:88:4b:2a:3d:98:df:fb:52:73:18:
                    19:0f:fe:9b:4b:e2:43:c9:6a:f5:db:f3:0c:29:37:
                    4f:b2:7e:f9:f7:02:28:fe:d7:1e:fc:4b:4d:c2:30:
                    10:56:70:2f:d4:02:de:3c:7d:77:71:2a:ae:22:83:
                    a0:2f:98:4b:eb:5f:17:c9:79:76:6d:33:03:8e:4b:
                    50:cc:1b:5d:6c:ad:0a:58:82:3c:cb:6c:e4:21:54:
                    cc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:59:A2:77:FE:97:42:93:97:A8:2B:90:D3:1C:8C:06:70:78:DE:66
            X509v3 Authority Key Identifier:
                keyid:D4:3C:E2:55:EB:79:88:9C:B9:BA:96:FB:45:F5:08:41:95:39:B2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/D43CE255EB79889CB9BA96FB45F508419539B2EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D43CE255EB79889CB9BA96FB45F508419539B2EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/323830343a326537633a323430303a3a2f34322d3432203d3e20323635333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e7c:2400::/42

    Signature Algorithm: sha256WithRSAEncryption
         94:1e:b8:fa:c7:f9:e0:b2:9c:cf:00:03:d8:df:24:6d:38:a2:
         cf:c5:6c:ac:81:6c:d1:19:af:ba:84:7c:c6:62:2a:39:5d:8b:
         21:19:dc:6f:d9:b5:e1:4a:03:f9:7c:16:45:77:91:44:b8:48:
         0a:38:45:9d:51:5d:56:37:f4:3d:c4:82:cd:bd:f7:df:69:3c:
         97:67:55:9e:d0:e2:3a:33:dd:b0:d5:14:f2:f3:90:d5:7a:06:
         67:85:99:5e:ae:06:ee:82:8e:61:71:d3:43:2e:23:5a:24:fa:
         19:80:44:23:e9:2d:0a:8b:1a:ae:75:d2:4f:08:ae:f6:89:f8:
         d0:8b:a9:df:d7:a1:63:c7:94:f3:c3:e2:a4:6e:44:30:bd:e8:
         1b:b0:5e:5f:39:3e:a0:76:b6:68:43:e9:c3:63:c2:24:f0:43:
         2a:bf:0c:7d:d1:14:af:b0:60:fa:1d:de:20:e1:1d:9b:3b:39:
         76:95:a6:19:d5:dc:e8:84:7a:bb:81:0b:86:2f:ac:22:41:c9:
         16:82:5e:79:98:93:a2:7c:7c:b9:60:72:c4:89:22:08:84:51:
         bf:46:9c:54:6f:4e:a6:e1:c2:b6:d9:b9:84:9a:81:fb:ea:ee:
         64:0b:64:56:12:5c:01:7c:4b:3c:a8:00:ab:bc:01:cb:30:f2:
         ce:f9:28:ed
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUJffEbboellW1lqpFvK6Ij0OON+0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQzQ0UyNTVFQjc5ODg5Q0I5QkE5NkZCNDVGNTA4NDE5
NTM5QjJFQzAeFw0yNjA3MjAyMDExMDdaFw0yNzA3MTkyMDE2MDdaMDMxMTAvBgNV
BAMTKEVGNTlBMjc3RkU5NzQyOTM5N0E4MkI5MEQzMUM4QzA2NzA3OERFNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHZzIrvwxqi5ZNMGC6yiSNFKct
+IqOI6GMRSvqdAVFfFqwmQ5+TlYi4A7AweWCrDLw8Wtw/N1xS6T/jskOMdVS2667
hI447R6B6+oCvIkcsPrLy9gBQ8EKx6z7LDy5LXBZktpxk9U45C/WLKje/4H3rDMf
h7QrBQK7GfRxIbCW2MmQhEi9qT3Tq9oCAmRRyxFAV7SKjTTKTnBryKPeznNN6eAl
dbmasGO2iEsqPZjf+1JzGBkP/ptL4kPJavXb8wwpN0+yfvn3Aij+1x78S03CMBBW
cC/UAt48fXdxKq4ig6AvmEvrXxfJeXZtMwOOS1DMG11srQpYgjzLbOQhVMwdAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQU71mid/6XQpOXqCuQ0xyMBnB43mYwHwYDVR0j
BBgwFoAU1DziVet5iJy5upb7RfUIQZU5suwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnBoelRHQzZLWjZnRE5tbWpDcTdzMllpbUtVZFlvZWJpVndxaDFiU2NW
blAvMC9ENDNDRTI1NUVCNzk4ODlDQjlCQTk2RkI0NUY1MDg0MTk1MzlCMkVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0M0NFMjU1RUI3OTg4OUNC
OUJBOTZGQjQ1RjUwODQxOTUzOUIyRUMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZwaHpUR0M2S1o2Z0RObW1qQ3E3czJZaW1LVWRZb2ViaVZ3cWgxYlNjVm5QLzAv
MzIzODMwMzQzYTMyNjUzNzYzM2EzMjM0MzAzMDNhM2EyZjM0MzIyZDM0MzIyMDNk
M2UyMDMyMzYzNTMzMzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBigELnwkADANBgkqhkiG9w0BAQsF
AAOCAQEAlB64+sf54LKczwAD2N8kbTiiz8VsrIFs0RmvuoR8xmIqOV2LIRncb9m1
4UoD+XwWRXeRRLhICjhFnVFdVjf0PcSCzb3332k8l2dVntDiOjPdsNUU8vOQ1XoG
Z4WZXq4G7oKOYXHTQy4jWiT6GYBEI+ktCosarnXSTwiu9on40Iup39ehY8eU88Pi
pG5EML3oG7BeXzk+oHa2aEPpw2PCJPBDKr8MfdEUr7Bg+h3eIOEdmzs5dpWmGdXc
6IR6u4ELhi+sIkHJFoJeeZiTonx8uWByxIkiCIRRv0acVG9OpuHCttm5hJqB++ru
ZAtkVhJcAXxLPKgAq7wByzDyzvko7Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:50:48 2026 by rpki-client