Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a313030303a3a2f33362d3336203d3e20323632343438.roa
File:                     323830343a6234343a313030303a3a2f33362d3336203d3e20323632343438.roa (raw, json)
Hash identifier:          rmEtH88adj4Ikbpq/kj+Xsla8Zu4beP7vJqbDZLgNig=
Subject key identifier:   DA:2F:87:0D:90:6D:61:80:2E:2B:27:BB:D7:27:C2:6B:90:89:17:4F
Certificate issuer:       /CN=4F10D220B7D557A965AE8B26DDEB1BDDB166AE97
Certificate serial:       6CCD243CAAAE9D165FEDD653618F614BA07804B3
Authority key identifier: 4F:10:D2:20:B7:D5:57:A9:65:AE:8B:26:DD:EB:1B:DD:B1:66:AE:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a313030303a3a2f33362d3336203d3e20323632343438.roa
Signing time:             Mon 11 Aug 2025 22:50:45 +0000
ROA not before:           Mon 11 Aug 2025 22:45:45 +0000
ROA not after:            Mon 10 Aug 2026 22:50:45 +0000
asID:                     262448
IP address blocks:        2804:b44:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.crl
                          rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 03:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:cd:24:3c:aa:ae:9d:16:5f:ed:d6:53:61:8f:61:4b:a0:78:04:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F10D220B7D557A965AE8B26DDEB1BDDB166AE97
        Validity
            Not Before: Aug 11 22:45:45 2025 GMT
            Not After : Aug 10 22:50:45 2026 GMT
        Subject: CN=DA2F870D906D61802E2B27BBD727C26B9089174F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6b:fd:df:e1:7e:49:a5:20:8f:e7:8a:ce:9d:
                    c4:aa:e6:d6:a6:9b:b7:ef:89:aa:b1:ff:d9:90:a3:
                    af:1c:3f:0c:34:bc:c3:72:a4:af:8d:3c:63:46:20:
                    10:bd:0c:fb:b3:b5:71:a1:7e:d7:19:46:7c:b9:ae:
                    1f:37:fe:0d:10:a7:ff:89:20:db:13:ab:bc:18:cf:
                    cf:69:c1:02:e6:4c:68:af:56:fe:bd:47:10:7f:da:
                    d9:31:65:5b:22:f2:96:9e:d1:b2:22:50:5c:62:bc:
                    b7:a3:3e:a5:50:62:54:b9:ee:b4:52:19:67:b2:8b:
                    2e:77:7a:9d:c7:ea:a1:22:b0:4d:7c:16:27:41:b0:
                    e0:da:0f:4b:60:60:1b:8f:27:b8:7f:a9:f0:3c:ab:
                    7e:e3:33:21:47:68:85:c1:98:d1:81:82:1d:b1:9c:
                    f9:41:fc:3c:4c:26:72:bd:63:57:7b:b8:14:d3:ff:
                    1a:77:34:d2:15:ff:e7:21:12:c5:5b:3e:9f:6c:35:
                    30:1b:9e:8d:1b:69:b8:72:ce:32:2d:59:74:0d:90:
                    df:17:1a:a7:15:3a:d5:be:69:39:97:6d:f0:65:3d:
                    4c:72:f8:50:29:eb:b6:1d:ce:74:87:9d:2d:d2:62:
                    71:4a:e3:a1:e0:d2:c7:4a:4d:fa:d6:ac:73:06:db:
                    52:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2F:87:0D:90:6D:61:80:2E:2B:27:BB:D7:27:C2:6B:90:89:17:4F
            X509v3 Authority Key Identifier:
                keyid:4F:10:D2:20:B7:D5:57:A9:65:AE:8B:26:DD:EB:1B:DD:B1:66:AE:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a313030303a3a2f33362d3336203d3e20323632343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b44:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         45:6d:89:0f:ed:96:9b:c1:49:a1:17:a6:89:c7:ca:70:e1:1b:
         d0:4c:d3:3f:55:45:54:ad:ee:60:08:76:ba:6a:ff:3c:4c:0c:
         cc:5c:65:d7:3b:79:9a:b6:ba:9d:92:db:79:84:fb:50:3d:dd:
         34:8b:2b:33:f6:2b:27:f0:e6:30:dc:4c:60:b2:8a:bf:2a:51:
         33:f0:01:b2:f8:d8:74:49:99:f9:f0:ad:c0:2c:6f:f4:49:36:
         a7:62:49:64:88:da:0c:29:50:7e:fa:63:50:4e:b5:23:69:23:
         7a:09:b9:b7:ad:b7:aa:dd:a5:51:83:14:a7:6f:67:58:71:f7:
         73:9e:96:33:50:5a:2e:86:ab:07:80:d8:5f:6c:0f:19:48:cf:
         ed:d0:fe:ce:55:46:f2:2b:f4:59:15:f5:1e:e6:d8:0c:09:cb:
         f7:87:e2:b4:22:91:1f:1a:6a:a4:8e:f0:ee:25:43:18:e4:dd:
         8b:eb:7a:a2:ff:1c:55:63:f3:b4:6b:0a:a9:e2:61:5e:31:06:
         5e:c4:36:84:93:e2:bc:a7:91:92:52:65:d5:4f:65:54:ac:84:
         08:15:2b:e0:4d:05:a5:ba:50:d8:cc:04:70:76:38:b7:8c:ac:
         0e:98:7e:3f:5f:d9:b3:34:b9:d3:4d:44:a0:58:69:ec:fc:58:
         b8:a8:22:80
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbM0kPKqunRZf7dZTYY9hS6B4BLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEYxMEQyMjBCN0Q1NTdBOTY1QUU4QjI2RERFQjFCRERC
MTY2QUU5NzAeFw0yNTA4MTEyMjQ1NDVaFw0yNjA4MTAyMjUwNDVaMDMxMTAvBgNV
BAMTKERBMkY4NzBEOTA2RDYxODAyRTJCMjdCQkQ3MjdDMjZCOTA4OTE3NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRa/3f4X5JpSCP54rOncSq5tam
m7fviaqx/9mQo68cPww0vMNypK+NPGNGIBC9DPuztXGhftcZRny5rh83/g0Qp/+J
INsTq7wYz89pwQLmTGivVv69RxB/2tkxZVsi8pae0bIiUFxivLejPqVQYlS57rRS
GWeyiy53ep3H6qEisE18FidBsODaD0tgYBuPJ7h/qfA8q37jMyFHaIXBmNGBgh2x
nPlB/DxMJnK9Y1d7uBTT/xp3NNIV/+chEsVbPp9sNTAbno0babhyzjItWXQNkN8X
GqcVOtW+aTmXbfBlPUxy+FAp67YdznSHnS3SYnFK46Hg0sdKTfrWrHMG21KvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU2i+HDZBtYYAuKye71yfCa5CJF08wHwYDVR0j
BBgwFoAUTxDSILfVV6llrosm3esb3bFmrpcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3ZQYU1FZlBXOFl1WXpHTFYxTXR1U3dwNUw0Skhuc3FiWmdXNG9FWkpN
Uk0vMC80RjEwRDIyMEI3RDU1N0E5NjVBRThCMjZEREVCMUJEREIxNjZBRTk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGMTBEMjIwQjdENTU3QTk2
NUFFOEIyNkRERUIxQkREQjE2NkFFOTcuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d2UGFNRWZQVzhZdVl6R0xWMU10dVN3cDVMNEpIbnNxYlpnVzRvRVpKTVJNLzAv
MzIzODMwMzQzYTYyMzQzNDNhMzEzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl
MjAzMjM2MzIzNDM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBAtEEDANBgkqhkiG9w0BAQsFAAOC
AQEARW2JD+2Wm8FJoRemicfKcOEb0EzTP1VFVK3uYAh2umr/PEwMzFxl1zt5mra6
nZLbeYT7UD3dNIsrM/YrJ/DmMNxMYLKKvypRM/ABsvjYdEmZ+fCtwCxv9Ek2p2JJ
ZIjaDClQfvpjUE61I2kjegm5t623qt2lUYMUp29nWHH3c56WM1BaLoarB4DYX2wP
GUjP7dD+zlVG8iv0WRX1HubYDAnL94fitCKRHxpqpI7w7iVDGOTdi+t6ov8cVWPz
tGsKqeJhXjEGXsQ2hJPivKeRklJl1U9lVKyECBUr4E0FpbpQ2MwEcHY4t4ysDph+
P1/ZszS5001EoFhp7PxYuKgigA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:21:10 2025 by rpki-client