Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/323830343a333264343a3a2f33332d3436203d3e20323635313030.roa
File:                     323830343a333264343a3a2f33332d3436203d3e20323635313030.roa (raw, json)
Hash identifier:          5JMhZ4cEqX3OysQlgCAgv6BovY6KpEJinhAlGzZkJNc=
Subject key identifier:   54:0B:B7:C5:CF:65:34:45:5E:E1:65:B7:32:36:62:BB:F3:C6:86:D9
Certificate issuer:       /CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819
Certificate serial:       4E71201C48422B20ADF0FE49A4AA47885CC1E2B2
Authority key identifier: B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/323830343a333264343a3a2f33332d3436203d3e20323635313030.roa
Signing time:             Mon 22 Sep 2025 18:53:54 +0000
ROA not before:           Mon 22 Sep 2025 18:48:54 +0000
ROA not after:            Mon 21 Sep 2026 18:53:54 +0000
asID:                     265100
IP address blocks:        2804:32d4::/33 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl
                          rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:24:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:71:20:1c:48:42:2b:20:ad:f0:fe:49:a4:aa:47:88:5c:c1:e2:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819
        Validity
            Not Before: Sep 22 18:48:54 2025 GMT
            Not After : Sep 21 18:53:54 2026 GMT
        Subject: CN=540BB7C5CF6534455EE165B7323662BBF3C686D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7e:1d:64:60:2a:8d:7a:6e:6b:34:31:06:de:
                    e5:5d:c2:82:d7:0c:3a:f6:a4:af:42:e3:6d:48:0c:
                    50:ac:9d:d3:6d:e4:8c:48:8c:59:35:f3:be:be:68:
                    01:21:4a:c3:c9:18:e8:d3:a9:01:5b:e9:32:12:c3:
                    66:96:56:3b:53:d2:b2:98:93:ba:6f:21:80:42:eb:
                    12:f9:05:1a:d9:92:0f:6b:a8:57:01:70:76:6e:56:
                    f4:15:70:ba:ae:c2:c8:6b:11:cf:c7:f0:9b:17:45:
                    95:02:8f:ec:be:58:d3:bf:0c:89:98:28:cd:53:00:
                    de:b2:75:fd:92:11:d9:94:04:40:3e:75:b6:b4:a7:
                    60:62:e0:fe:b8:37:f9:1d:73:d9:76:24:fc:6b:cb:
                    46:0c:98:a0:61:bf:ce:44:d6:44:24:7f:ec:ef:29:
                    56:f3:39:55:0e:93:b1:a0:02:69:51:ca:f6:7b:c5:
                    24:d7:81:5d:4d:ea:18:a6:f1:58:a8:e4:4e:31:81:
                    e0:a4:fb:15:8a:75:3a:e5:a7:d9:1e:c0:41:6f:2a:
                    cc:ca:52:f1:dd:b4:46:70:51:db:73:58:6b:b3:e8:
                    cf:c2:ed:4b:d9:18:bc:78:5a:cb:70:82:ec:e2:02:
                    66:48:02:8d:fc:8f:9a:15:8c:f4:95:2a:21:0a:d1:
                    b7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0B:B7:C5:CF:65:34:45:5E:E1:65:B7:32:36:62:BB:F3:C6:86:D9
            X509v3 Authority Key Identifier:
                keyid:B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/323830343a333264343a3a2f33332d3436203d3e20323635313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32d4::/33

    Signature Algorithm: sha256WithRSAEncryption
         8d:60:c7:54:92:b3:82:ed:a9:8d:cc:4a:0d:e0:ca:1c:4f:b5:
         f6:a1:f9:a0:dc:b5:ce:48:3d:6b:89:8c:86:d1:c9:ba:56:46:
         6d:44:40:f3:47:80:ad:07:f6:7b:bf:3f:5e:08:1a:b8:bf:2d:
         d4:72:89:37:c9:f5:56:0a:87:71:0b:f0:27:08:61:55:b1:a6:
         f9:d2:42:81:fa:5c:ce:33:68:fa:20:3a:7c:3b:4a:74:cf:c9:
         b3:ea:af:23:41:b3:7d:0f:85:f4:67:af:77:22:e6:9e:90:92:
         dd:b8:4e:d3:d9:67:0d:64:5e:a4:05:84:a8:ea:7f:82:2c:d7:
         0b:bb:77:ab:e8:27:81:83:79:a0:af:04:96:ae:06:ea:f6:e1:
         30:5d:29:ad:72:32:a8:25:7f:14:f2:2f:78:f7:7b:7d:39:c6:
         ff:62:d7:05:e1:4b:2a:7b:b8:38:0e:85:07:4d:ea:12:b7:14:
         8e:28:1c:50:d6:9c:7e:94:28:3d:a1:c9:8b:a8:70:f3:8a:9a:
         0c:0d:c7:01:0a:85:51:bd:a1:ee:72:0b:2b:17:8b:f3:96:7d:
         53:36:3f:41:21:7f:6b:c6:70:30:2b:44:db:68:0f:53:67:a8:
         15:9c:ce:04:8e:c7:e7:76:73:ab:1d:1d:00:b2:54:42:d2:1d:
         cf:05:eb:49
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTnEgHEhCKyCt8P5JpKpHiFzB4rIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVGQzVGMDhCOEM0ODY0MDEzREMzQTRDQTQ3QzIyMDBC
M0MyQjgxOTAeFw0yNTA5MjIxODQ4NTRaFw0yNjA5MjExODUzNTRaMDMxMTAvBgNV
BAMTKDU0MEJCN0M1Q0Y2NTM0NDU1RUUxNjVCNzMyMzY2MkJCRjNDNjg2RDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpfh1kYCqNem5rNDEG3uVdwoLX
DDr2pK9C421IDFCsndNt5IxIjFk1876+aAEhSsPJGOjTqQFb6TISw2aWVjtT0rKY
k7pvIYBC6xL5BRrZkg9rqFcBcHZuVvQVcLquwshrEc/H8JsXRZUCj+y+WNO/DImY
KM1TAN6ydf2SEdmUBEA+dba0p2Bi4P64N/kdc9l2JPxry0YMmKBhv85E1kQkf+zv
KVbzOVUOk7GgAmlRyvZ7xSTXgV1N6him8Vio5E4xgeCk+xWKdTrlp9kewEFvKszK
UvHdtEZwUdtzWGuz6M/C7UvZGLx4WstwguziAmZIAo38j5oVjPSVKiEK0bd3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVAu3xc9lNEVe4WW3MjZiu/PGhtkwHwYDVR0j
BBgwFoAUtfxfCLjEhkAT3DpMpHwiALPCuBkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFkWlNFZGdmc3J6c1dTYld1VFBKYnBFWHZUU0FWYXQ0bWdXdDl0Q0hM
ZEQvMS9CNUZDNUYwOEI4QzQ4NjQwMTNEQzNBNENBNDdDMjIwMEIzQzJCODE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1RkM1RjA4QjhDNDg2NDAx
M0RDM0E0Q0E0N0MyMjAwQjNDMkI4MTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhZFpTRWRnZnNyenNXU2JXdVRQSmJwRVh2VFNBVmF0NG1nV3Q5dENITGRELzEv
MzIzODMwMzQzYTMzMzI2NDM0M2EzYTJmMzMzMzJkMzQzNjIwM2QzZTIwMzIzNjM1
MzEzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQy1AAwDQYJKoZIhvcNAQELBQADggEBAI1gx1SS
s4LtqY3MSg3gyhxPtfah+aDctc5IPWuJjIbRybpWRm1EQPNHgK0H9nu/P14IGri/
LdRyiTfJ9VYKh3EL8CcIYVWxpvnSQoH6XM4zaPogOnw7SnTPybPqryNBs30PhfRn
r3ci5p6Qkt24TtPZZw1kXqQFhKjqf4Is1wu7d6voJ4GDeaCvBJauBur24TBdKa1y
MqglfxTyL3j3e305xv9i1wXhSyp7uDgOhQdN6hK3FI4oHFDWnH6UKD2hyYuocPOK
mgwNxwEKhVG9oe5yCysXi/OWfVM2P0Ehf2vGcDArRNtoD1NnqBWczgSOx+d2c6sd
HQCyVELSHc8F60k=
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:48:44 2025 by rpki-client