Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/323830343a343662633a3a2f33342d3334203d3e20323637303038.roa
File:                     323830343a343662633a3a2f33342d3334203d3e20323637303038.roa (raw, json)
Hash identifier:          39ZtORSWfi3y3sCsdxAAnQJmcCUeRSFSQ8SsGIbv/oM=
Subject key identifier:   3D:14:7D:6F:8C:10:9C:C4:FA:B5:A4:34:44:73:20:64:F1:C3:01:C4
Certificate issuer:       /CN=F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3
Certificate serial:       6C96502D6F4EA601591ACB133E6D416BDD09A12B
Authority key identifier: F4:D8:F6:B5:5D:1C:3C:E2:B3:59:7A:4E:73:FC:44:4A:28:36:5A:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/323830343a343662633a3a2f33342d3334203d3e20323637303038.roa
Signing time:             Mon 22 Sep 2025 14:36:53 +0000
ROA not before:           Mon 22 Sep 2025 14:31:53 +0000
ROA not after:            Mon 21 Sep 2026 14:36:53 +0000
asID:                     267008
IP address blocks:        2804:46bc::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.crl
                          rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 00:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:96:50:2d:6f:4e:a6:01:59:1a:cb:13:3e:6d:41:6b:dd:09:a1:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3
        Validity
            Not Before: Sep 22 14:31:53 2025 GMT
            Not After : Sep 21 14:36:53 2026 GMT
        Subject: CN=3D147D6F8C109CC4FAB5A43444732064F1C301C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:d9:0c:d8:03:c3:52:7a:33:96:ab:4c:49:1e:
                    1b:99:4b:1f:01:88:d4:da:b6:11:06:b3:6e:a3:95:
                    82:c5:89:6a:b1:44:de:32:d1:14:0f:85:4f:61:46:
                    b8:14:a5:0d:df:ff:ef:96:51:6e:18:32:7e:46:1a:
                    4b:5d:18:20:e4:0a:e0:e6:42:29:6d:fc:82:91:2a:
                    b5:d5:4d:53:c6:8d:05:2a:82:1a:30:c9:89:3a:9f:
                    ff:e0:86:ae:15:db:fb:e0:43:ba:f5:cd:f8:14:e8:
                    46:82:8d:34:33:f5:86:b5:63:fd:7c:ba:87:ef:d2:
                    89:3d:28:5f:0c:15:d9:62:e0:89:5b:6a:aa:d6:a7:
                    56:65:ff:ce:29:2d:54:c8:be:fc:b8:94:b3:20:6d:
                    5d:30:4f:69:3a:05:6b:76:3c:ee:8c:18:2d:5b:d3:
                    0a:13:c5:d2:13:58:e2:a8:ee:d8:48:b6:ca:c5:85:
                    6f:12:f9:16:6e:c6:35:00:6d:85:e9:bf:82:f5:d6:
                    04:9b:ae:0f:98:96:2e:0a:fe:b9:51:59:40:1b:d0:
                    59:04:6d:53:46:24:34:15:5f:5a:80:63:35:dc:c0:
                    2f:d3:14:c3:1e:dc:6b:6b:d7:04:88:5e:e3:18:6b:
                    b7:83:d3:ad:63:aa:b6:c5:10:73:c8:51:05:2b:05:
                    cd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:14:7D:6F:8C:10:9C:C4:FA:B5:A4:34:44:73:20:64:F1:C3:01:C4
            X509v3 Authority Key Identifier:
                keyid:F4:D8:F6:B5:5D:1C:3C:E2:B3:59:7A:4E:73:FC:44:4A:28:36:5A:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/323830343a343662633a3a2f33342d3334203d3e20323637303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46bc::/34

    Signature Algorithm: sha256WithRSAEncryption
         74:97:c6:0f:0e:5c:1a:08:b9:48:4f:12:fe:84:dc:92:b4:46:
         37:76:6a:ff:25:a6:1c:3e:b5:91:46:cc:24:0b:db:90:c8:b0:
         e9:40:8a:bc:d2:d4:99:e7:bf:95:d7:4b:a7:23:91:be:9c:5b:
         de:7f:af:e6:dc:87:f7:90:69:9a:08:a8:c3:bf:45:f9:1f:97:
         10:3a:9c:2b:08:1d:2b:89:1b:9c:5b:e8:a5:76:03:1a:0a:dc:
         d0:9d:68:a4:c7:86:d2:5e:74:e8:63:a0:4e:52:96:cf:67:dd:
         10:9f:ae:2e:36:9c:27:9d:12:0b:ac:40:40:07:e4:08:ca:b3:
         86:b5:3f:42:47:9c:cf:82:b4:f4:e8:40:31:b2:ed:d1:71:bf:
         57:3c:21:9e:7a:46:d1:43:04:8c:61:c7:d5:d7:dd:2b:5f:80:
         94:1c:f6:d3:f8:12:cb:da:8a:1b:99:9b:7c:74:e0:27:45:0a:
         71:1e:66:cc:79:e8:ee:24:1d:e6:65:40:b4:89:74:35:5e:83:
         9e:e1:ed:bd:83:ea:f0:3f:e5:13:46:21:db:71:19:13:91:54:
         d5:be:70:a0:f5:21:19:be:e6:be:7d:da:f2:e4:da:0c:8d:44:
         53:d5:32:08:7b:bc:a7:9d:a0:d5:aa:da:cf:e9:2c:c7:eb:fc:
         8e:60:e5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:30:41 2025 by rpki-client