Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/323830343a363031343a3130303a3a2f34302d3430203d3e20323639313434.roa
File:                     323830343a363031343a3130303a3a2f34302d3430203d3e20323639313434.roa (raw, json)
Hash identifier:          sQCGSN73KDtnlc4RgFZw9teyIjZpRWB4YfwurqnneBo=
Subject key identifier:   82:C2:7A:B0:3D:C4:06:08:CE:EF:1E:EE:1B:A3:1A:59:83:71:38:CD
Certificate issuer:       /CN=474E4FE6C0585832935E6E5D9A67EE410B274CCB
Certificate serial:       07BB987A8F3D02CFCC954A2B3E46560E02B16534
Authority key identifier: 47:4E:4F:E6:C0:58:58:32:93:5E:6E:5D:9A:67:EE:41:0B:27:4C:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/323830343a363031343a3130303a3a2f34302d3430203d3e20323639313434.roa
Signing time:             Mon 30 Jun 2025 17:40:30 +0000
ROA not before:           Mon 30 Jun 2025 17:35:30 +0000
ROA not after:            Mon 29 Jun 2026 17:40:30 +0000
asID:                     269144
IP address blocks:        2804:6014:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.crl
                          rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 00:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:bb:98:7a:8f:3d:02:cf:cc:95:4a:2b:3e:46:56:0e:02:b1:65:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474E4FE6C0585832935E6E5D9A67EE410B274CCB
        Validity
            Not Before: Jun 30 17:35:30 2025 GMT
            Not After : Jun 29 17:40:30 2026 GMT
        Subject: CN=82C27AB03DC40608CEEF1EEE1BA31A59837138CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e4:6b:f4:60:62:15:13:1e:c0:60:15:4d:bd:
                    49:df:3b:14:ca:d6:75:d5:4e:83:39:6d:1a:ac:91:
                    9d:63:1c:53:72:4d:db:60:9e:29:ce:1f:47:18:f9:
                    82:97:5a:75:5d:e7:c7:bf:d3:a8:53:28:20:a6:b5:
                    b9:94:a3:7c:6c:9e:40:41:5d:d6:92:93:2d:9f:83:
                    cf:e2:ce:56:8b:0b:5f:b3:f3:03:eb:d9:ca:4d:b2:
                    f6:08:ae:11:42:34:98:ff:7d:73:04:c2:f4:2a:db:
                    e3:db:e3:13:30:1e:3b:ef:23:43:16:ca:d2:67:f8:
                    94:ab:79:3f:f4:e1:d5:1f:f8:1c:fe:6f:e8:53:f2:
                    6d:ee:5e:f1:db:db:19:f1:ce:fb:89:f2:d5:a5:18:
                    23:95:41:64:b8:b6:0e:f0:53:6f:d1:0d:4c:56:1d:
                    6f:de:d6:d4:fd:24:42:48:62:1d:5e:68:e8:1b:8e:
                    36:c8:9f:5b:6d:41:c7:54:00:d7:98:5e:45:b0:55:
                    f3:9e:ba:6a:35:75:30:b5:25:17:d9:d6:44:d0:87:
                    ee:43:e4:ae:e6:7a:c9:c4:fe:6b:4c:c5:ba:bf:a1:
                    30:3e:a8:db:3f:1b:d9:6f:aa:14:bd:9f:bd:81:8d:
                    26:93:15:37:01:d1:81:ed:fb:9f:33:52:51:1a:34:
                    68:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C2:7A:B0:3D:C4:06:08:CE:EF:1E:EE:1B:A3:1A:59:83:71:38:CD
            X509v3 Authority Key Identifier:
                keyid:47:4E:4F:E6:C0:58:58:32:93:5E:6E:5D:9A:67:EE:41:0B:27:4C:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/323830343a363031343a3130303a3a2f34302d3430203d3e20323639313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6014:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         01:07:a5:3b:d0:61:62:0d:67:05:f9:02:47:44:f8:ab:fc:6b:
         62:1b:a2:e7:75:53:14:44:29:52:aa:3b:28:62:79:9e:9b:c3:
         2d:ee:93:3e:02:18:d9:6e:b3:43:0a:d5:13:9a:92:ad:83:74:
         4f:17:8f:ac:54:9c:10:e9:f4:c1:21:b4:ee:c3:4e:d2:a2:cb:
         ed:1e:21:9f:4b:2d:f7:23:79:e4:fe:6a:1a:dd:44:28:54:dd:
         2c:18:f8:92:ec:16:a8:9d:fd:ac:79:da:83:46:74:27:d8:a9:
         36:a6:c9:52:71:ae:8b:dd:bb:c1:0c:7d:95:94:2a:8a:0c:32:
         87:af:36:01:cf:c1:58:b2:1f:a9:18:cf:d1:f5:a7:2e:e5:68:
         19:b4:be:17:41:8d:e7:14:92:4b:24:3a:c8:03:87:5d:2e:78:
         b4:46:2b:24:91:ac:c5:b8:00:b0:3a:f8:e8:96:4d:30:52:0d:
         23:79:00:06:21:e0:ac:6e:0e:5d:56:02:99:69:6d:1e:fb:66:
         8c:0b:a2:38:9e:37:e5:d2:59:2f:5f:b4:a2:c2:0f:c8:c6:44:
         f1:81:c7:2a:ff:a3:07:30:a1:80:7c:87:1d:5d:5f:69:54:11:
         ec:3b:2f:83:7a:15:1b:03:fb:16:50:de:33:8f:61:fc:1b:1b:
         e7:9a:54:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:59:29 2025 by rpki-client