Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/323830343a363031343a3230303a3a2f34302d3430203d3e20323639313434.roa
File:                     323830343a363031343a3230303a3a2f34302d3430203d3e20323639313434.roa (raw, json)
Hash identifier:          1x+KE7+5aobezeu+M42jHFdY3wApuOVIAg594+X86ks=
Subject key identifier:   84:1E:57:EA:2D:B4:A1:6E:49:F6:8D:C9:AD:79:46:C3:2A:59:E9:E3
Certificate issuer:       /CN=474E4FE6C0585832935E6E5D9A67EE410B274CCB
Certificate serial:       28E201CFDC5E900D77029E23CBDB50839C8D628C
Authority key identifier: 47:4E:4F:E6:C0:58:58:32:93:5E:6E:5D:9A:67:EE:41:0B:27:4C:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/323830343a363031343a3230303a3a2f34302d3430203d3e20323639313434.roa
Signing time:             Mon 30 Jun 2025 17:40:30 +0000
ROA not before:           Mon 30 Jun 2025 17:35:30 +0000
ROA not after:            Mon 29 Jun 2026 17:40:30 +0000
asID:                     269144
IP address blocks:        2804:6014:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.crl
                          rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 00:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e2:01:cf:dc:5e:90:0d:77:02:9e:23:cb:db:50:83:9c:8d:62:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474E4FE6C0585832935E6E5D9A67EE410B274CCB
        Validity
            Not Before: Jun 30 17:35:30 2025 GMT
            Not After : Jun 29 17:40:30 2026 GMT
        Subject: CN=841E57EA2DB4A16E49F68DC9AD7946C32A59E9E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:43:e8:5e:ab:fe:97:76:21:5f:fc:26:d5:59:
                    92:8b:01:0e:92:c7:e8:50:64:bd:5d:e8:70:72:80:
                    f6:71:bf:33:e3:ab:be:2d:c9:0a:05:e7:18:a5:46:
                    29:31:40:77:0e:5c:eb:a3:27:2a:98:10:e6:82:56:
                    6d:38:a5:62:d4:62:67:02:36:1d:2e:05:7c:9b:fc:
                    c0:81:d6:5d:df:d1:b4:be:5d:ee:68:23:89:35:ba:
                    94:80:dd:77:f0:b5:f3:5b:ac:c5:3f:07:cd:8e:ce:
                    87:df:8b:72:9c:53:f9:bc:0e:9b:a2:21:41:4a:20:
                    0e:31:6a:54:b3:2a:1d:a4:77:48:27:34:3a:50:93:
                    75:ab:ec:b9:00:e6:71:45:ac:50:8a:67:24:f6:51:
                    1d:62:1a:8e:45:43:18:2a:f2:6c:b9:89:2c:fd:f2:
                    10:2e:10:3f:a2:45:39:36:d0:7a:a4:24:ae:70:79:
                    3f:27:0e:e6:fb:68:b0:4c:c8:c9:e4:2b:82:c0:64:
                    56:29:e3:36:7e:1d:c0:dd:e9:33:54:47:4d:bc:18:
                    f0:19:a6:21:3e:1a:8f:1b:f0:2b:ff:36:25:16:80:
                    b9:bc:15:9c:96:a0:97:23:00:f9:de:d3:db:60:fb:
                    6b:7d:6c:b4:6a:dc:4a:3b:fe:02:ea:c6:d5:2b:01:
                    10:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:1E:57:EA:2D:B4:A1:6E:49:F6:8D:C9:AD:79:46:C3:2A:59:E9:E3
            X509v3 Authority Key Identifier:
                keyid:47:4E:4F:E6:C0:58:58:32:93:5E:6E:5D:9A:67:EE:41:0B:27:4C:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/323830343a363031343a3230303a3a2f34302d3430203d3e20323639313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6014:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:74:fc:67:e9:64:14:28:68:a1:2f:24:ad:e9:8a:61:b2:43:
         47:03:67:44:e3:03:f9:97:d3:a1:59:a0:29:ba:68:96:fe:0b:
         d6:d6:5d:d0:85:cd:f2:11:17:69:d4:43:d0:b1:2e:91:63:5b:
         ad:84:3d:c0:fa:63:86:ee:a3:77:29:e1:bc:fe:e2:92:a1:a6:
         0e:c2:2f:81:09:c9:a0:fa:18:4b:5d:77:58:6f:3a:cf:5b:86:
         a0:cd:00:17:99:50:2d:41:27:d2:f1:e2:ba:b6:30:bb:c2:47:
         7d:8d:17:a8:40:f0:87:8d:ac:38:6e:55:2f:5f:e8:a2:b3:3d:
         ea:64:86:56:5b:57:c8:71:b6:fe:5a:c7:a4:2b:41:54:eb:37:
         db:ec:f9:6d:d9:48:4c:fc:6c:7f:70:ec:ae:8a:e5:08:f8:5c:
         7d:7e:d6:77:11:4c:62:3f:1b:fe:19:15:89:e1:02:60:0f:20:
         70:94:d8:55:0d:7b:43:b2:20:6f:6e:46:b0:22:04:26:3b:3d:
         63:73:fa:70:3c:18:6e:16:4e:2d:da:65:1b:72:a4:97:d5:9d:
         5d:54:2c:fa:3f:bb:48:f5:ea:4c:bb:f0:fa:6c:70:d1:79:c6:
         fe:22:f6:eb:d4:aa:7a:60:d4:9c:51:de:76:7f:ff:11:eb:cc:
         eb:95:85:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:06:07 2025 by rpki-client