Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/323830343a343662633a343030303a3a2f33342d3334203d3e20323637303038.roa
File:                     323830343a343662633a343030303a3a2f33342d3334203d3e20323637303038.roa (raw, json)
Hash identifier:          MGlkLc5sBfFQCmtd3pKPslll+qG0+vth428duNd4IxE=
Subject key identifier:   AC:5D:F0:1E:BB:22:83:85:B9:63:41:BF:62:EF:81:B0:DD:52:14:1E
Certificate issuer:       /CN=F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3
Certificate serial:       113D6A77DE9ECC4F6CFB66DEB96C37B7D42F3AB1
Authority key identifier: F4:D8:F6:B5:5D:1C:3C:E2:B3:59:7A:4E:73:FC:44:4A:28:36:5A:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/323830343a343662633a343030303a3a2f33342d3334203d3e20323637303038.roa
Signing time:             Mon 22 Sep 2025 14:36:50 +0000
ROA not before:           Mon 22 Sep 2025 14:31:50 +0000
ROA not after:            Mon 21 Sep 2026 14:36:50 +0000
asID:                     267008
IP address blocks:        2804:46bc:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.crl
                          rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:17:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:3d:6a:77:de:9e:cc:4f:6c:fb:66:de:b9:6c:37:b7:d4:2f:3a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3
        Validity
            Not Before: Sep 22 14:31:50 2025 GMT
            Not After : Sep 21 14:36:50 2026 GMT
        Subject: CN=AC5DF01EBB228385B96341BF62EF81B0DD52141E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6c:64:86:8f:63:98:dc:88:43:39:c7:7c:9d:
                    47:65:70:e5:67:70:c4:aa:3c:81:0e:67:bf:1a:c9:
                    6c:0c:ff:68:34:b7:65:e8:e8:1f:22:43:c3:16:8c:
                    0c:98:18:33:1d:e0:d2:35:0f:0a:06:12:9a:94:34:
                    ce:06:32:53:4f:f4:8d:c7:f8:1d:9d:bc:d8:c6:1b:
                    7b:3d:44:ec:f7:de:53:10:6d:b2:88:35:6d:0b:0e:
                    38:a5:63:61:7b:89:3c:e5:a6:08:00:e2:33:b9:7f:
                    a6:2a:96:03:d9:3a:1f:fa:e4:35:4d:dc:78:eb:9c:
                    4c:3f:64:16:1a:3b:d5:f0:9b:86:49:c2:78:5c:51:
                    89:92:37:d1:79:d9:7b:f5:74:5c:00:24:ce:f4:8e:
                    6e:26:4a:8a:e1:8d:8a:b7:52:f2:b0:14:c4:46:9f:
                    b1:fe:8e:b4:e4:b5:f7:aa:6a:51:9b:b3:a3:60:a2:
                    fc:ab:47:96:3a:d0:5a:97:4e:01:ec:37:70:0c:9a:
                    05:57:6c:02:d2:dc:32:93:5f:68:f8:4a:1c:ed:f9:
                    a0:ff:d8:03:e7:07:0c:62:2a:81:5f:e7:d1:08:e6:
                    03:7e:77:b5:4d:9b:60:99:da:47:fc:4f:dc:93:66:
                    c0:2e:02:21:74:2c:b4:53:f0:15:53:6c:fb:86:58:
                    13:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5D:F0:1E:BB:22:83:85:B9:63:41:BF:62:EF:81:B0:DD:52:14:1E
            X509v3 Authority Key Identifier:
                keyid:F4:D8:F6:B5:5D:1C:3C:E2:B3:59:7A:4E:73:FC:44:4A:28:36:5A:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/323830343a343662633a343030303a3a2f33342d3334203d3e20323637303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46bc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         46:8f:94:91:f3:b3:8c:30:25:ec:fa:e2:5e:c2:f0:0c:65:27:
         6b:a1:24:58:5a:9e:d1:72:81:a8:0d:1a:3b:52:f4:7b:19:b7:
         44:80:33:03:29:45:3b:0b:4a:70:14:f8:74:41:0c:96:a8:68:
         2e:93:75:d7:11:6a:de:a5:a0:f6:49:d9:c5:19:7e:92:8c:57:
         82:c3:ee:75:0e:fe:fa:4c:74:7f:81:f2:10:2d:2f:8f:e1:cc:
         24:41:02:ff:04:58:d1:d4:92:17:6c:15:48:97:cd:8f:d0:4f:
         15:3e:f3:d9:a9:93:bd:0c:e0:46:6a:a6:df:72:1f:23:d1:39:
         ee:f6:84:86:29:dd:9c:31:12:78:6d:bb:12:af:f1:cc:17:93:
         c6:df:91:8b:d1:aa:1c:ce:90:64:2d:9d:87:1a:d6:ba:52:53:
         ac:3b:4f:8d:10:1f:ad:c6:c1:6c:f7:57:10:45:01:e3:c2:dc:
         db:5d:38:bc:1a:23:77:2b:57:c7:10:e6:0f:e5:e9:af:80:e9:
         7c:2e:0d:c5:cb:c1:79:d4:b4:29:f9:f3:26:db:7b:fc:fa:23:
         68:ff:61:e8:e7:c8:6f:75:e8:90:ad:f5:7b:03:d1:94:e3:d3:
         72:fb:c3:43:b8:fc:3f:df:af:2d:af:7b:bc:6c:b4:7d:64:f6:
         2e:12:90:8e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUET1qd96ezE9s+2beuWw3t9QvOrEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjREOEY2QjU1RDFDM0NFMkIzNTk3QTRFNzNGQzQ0NEEy
ODM2NUFGMzAeFw0yNTA5MjIxNDMxNTBaFw0yNjA5MjExNDM2NTBaMDMxMTAvBgNV
BAMTKEFDNURGMDFFQkIyMjgzODVCOTYzNDFCRjYyRUY4MUIwREQ1MjE0MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCebGSGj2OY3IhDOcd8nUdlcOVn
cMSqPIEOZ78ayWwM/2g0t2Xo6B8iQ8MWjAyYGDMd4NI1DwoGEpqUNM4GMlNP9I3H
+B2dvNjGG3s9ROz33lMQbbKINW0LDjilY2F7iTzlpggA4jO5f6YqlgPZOh/65DVN
3HjrnEw/ZBYaO9Xwm4ZJwnhcUYmSN9F52Xv1dFwAJM70jm4mSorhjYq3UvKwFMRG
n7H+jrTktfeqalGbs6NgovyrR5Y60FqXTgHsN3AMmgVXbALS3DKTX2j4Shzt+aD/
2APnBwxiKoFf59EI5gN+d7VNm2CZ2kf8T9yTZsAuAiF0LLRT8BVTbPuGWBMfAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUrF3wHrsig4W5Y0G/Yu+BsN1SFB4wHwYDVR0j
BBgwFoAU9Nj2tV0cPOKzWXpOc/xESig2WvMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1ZFRHdERTZwN1cyRFZhTUEzVEdwMzFpQWF6cm5mdVJLUzVMZTZKUWFG
ZkQvMC9GNEQ4RjZCNTVEMUMzQ0UyQjM1OTdBNEU3M0ZDNDQ0QTI4MzY1QUYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0RDhGNkI1NUQxQzNDRTJC
MzU5N0E0RTczRkM0NDRBMjgzNjVBRjMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dWRUR3REU2cDdXMkRWYU1BM1RHcDMxaUFhenJuZnVSS1M1TGU2SlFhRmZELzAv
MzIzODMwMzQzYTM0MzY2MjYzM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNzMwMzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigERrxAMA0GCSqGSIb3DQEBCwUA
A4IBAQBGj5SR87OMMCXs+uJewvAMZSdroSRYWp7RcoGoDRo7UvR7GbdEgDMDKUU7
C0pwFPh0QQyWqGguk3XXEWrepaD2SdnFGX6SjFeCw+51Dv76THR/gfIQLS+P4cwk
QQL/BFjR1JIXbBVIl82P0E8VPvPZqZO9DOBGaqbfch8j0Tnu9oSGKd2cMRJ4bbsS
r/HMF5PG35GL0aoczpBkLZ2HGta6UlOsO0+NEB+txsFs91cQRQHjwtzbXTi8GiN3
K1fHEOYP5emvgOl8Lg3Fy8F51LQp+fMm23v8+iNo/2Ho58hvdeiQrfV7A9GU49Ny
+8NDuPw/368tr3u8bLR9ZPYuEpCO
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:59:38 2025 by rpki-client