Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/323830343a343662633a3a2f33322d3332203d3e20323637303038.roa
File:                     323830343a343662633a3a2f33322d3332203d3e20323637303038.roa (raw, json)
Hash identifier:          YyujEF4epQBWX6oESckv8K/FBmJVY7Y9LMpDoUNlGlU=
Subject key identifier:   87:87:6F:C4:56:3C:F6:E4:22:D3:77:60:54:A4:A6:98:D8:DE:9C:72
Certificate issuer:       /CN=F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3
Certificate serial:       7D5699886B1BC495DBC0B9B4B5030D3966D1B4DF
Authority key identifier: F4:D8:F6:B5:5D:1C:3C:E2:B3:59:7A:4E:73:FC:44:4A:28:36:5A:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/323830343a343662633a3a2f33322d3332203d3e20323637303038.roa
Signing time:             Mon 22 Sep 2025 14:36:51 +0000
ROA not before:           Mon 22 Sep 2025 14:31:51 +0000
ROA not after:            Mon 21 Sep 2026 14:36:51 +0000
asID:                     267008
IP address blocks:        2804:46bc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.crl
                          rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:17:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:56:99:88:6b:1b:c4:95:db:c0:b9:b4:b5:03:0d:39:66:d1:b4:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3
        Validity
            Not Before: Sep 22 14:31:51 2025 GMT
            Not After : Sep 21 14:36:51 2026 GMT
        Subject: CN=87876FC4563CF6E422D3776054A4A698D8DE9C72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ec:b7:06:c3:c2:a8:6d:f4:74:9e:25:f5:2e:
                    3e:27:bb:30:1f:d8:ac:ce:bd:12:af:9d:eb:8b:99:
                    50:65:f6:0a:92:57:89:ff:18:62:78:67:bd:43:a7:
                    fd:6b:57:b2:b4:05:25:4a:bb:d3:3c:c4:c2:8a:7d:
                    b8:fb:65:a7:71:00:92:e1:3d:5d:89:d5:4c:48:43:
                    dc:4b:58:63:bc:38:f7:30:9b:ed:b5:43:05:12:40:
                    f7:1b:b1:57:84:a5:20:29:c9:90:f4:1c:0b:37:80:
                    64:0f:e4:96:c6:bd:c7:03:bb:d5:e0:e7:00:55:aa:
                    c7:22:ba:a5:dd:a3:d8:40:2e:9b:f0:b2:6b:26:80:
                    4b:13:78:7f:ec:f8:05:66:2f:37:91:38:39:b9:d4:
                    6a:ed:d8:b0:31:e2:64:e6:ee:32:f8:75:7e:9e:b0:
                    46:65:07:da:75:65:f2:70:1b:d2:77:5c:63:4a:dd:
                    35:22:fa:e6:86:01:7c:75:1e:5a:91:ba:63:d2:a2:
                    d3:f9:3b:a6:d3:dd:b5:bf:68:a9:5a:be:07:d6:3b:
                    f6:be:b2:57:7f:a8:99:82:c5:00:96:a1:b9:9e:1b:
                    ee:a4:8b:10:d0:24:28:79:d2:35:24:45:b4:10:2e:
                    31:4f:04:e6:ca:c5:0e:bc:ac:3d:1c:73:20:0a:b2:
                    7a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:87:6F:C4:56:3C:F6:E4:22:D3:77:60:54:A4:A6:98:D8:DE:9C:72
            X509v3 Authority Key Identifier:
                keyid:F4:D8:F6:B5:5D:1C:3C:E2:B3:59:7A:4E:73:FC:44:4A:28:36:5A:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/323830343a343662633a3a2f33322d3332203d3e20323637303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         da:da:35:46:34:9b:5d:3b:a6:12:1b:13:b8:b7:4b:73:9f:0a:
         61:a5:93:14:50:c1:69:e6:20:c2:e0:44:0e:1a:53:2b:f9:1b:
         c1:10:b2:69:5f:09:f8:dc:9e:ee:4f:0f:1d:1b:ca:f6:14:2c:
         3a:1e:cb:38:c8:19:51:f6:86:2b:19:ae:2c:74:19:69:19:fd:
         bb:83:89:7c:6a:d4:11:98:84:f0:32:34:f0:2e:16:5b:ca:3d:
         7e:99:b2:a6:01:d5:95:4d:2e:fd:d7:c4:de:74:17:ae:ee:a2:
         0a:e6:4d:56:99:40:8f:8d:2d:4d:e1:c5:1d:e5:77:09:23:a6:
         88:a7:99:b3:8f:d4:ad:e9:0b:6a:7e:0b:c1:27:91:8d:b3:89:
         43:86:5b:7c:fa:f5:67:2d:35:01:d4:12:15:68:60:59:3d:da:
         a2:11:d9:b6:be:18:3f:0f:8f:b5:ef:f0:90:9f:28:96:43:74:
         41:21:3f:7b:3c:cb:89:8c:55:e6:45:6d:ed:88:c5:ef:70:32:
         35:a8:82:e6:1a:5a:e8:95:76:79:41:9a:ba:98:30:09:03:94:
         4f:99:d6:16:95:e1:60:60:2e:08:f9:db:a9:f2:d3:14:02:58:
         67:85:7a:5c:7c:88:a5:c0:e5:86:86:76:c7:55:94:46:cb:35:
         53:0b:bc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:33:43 2025 by rpki-client