Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a323030303a3a2f33362d3336203d3e20323632343438.roa
File:                     323830343a6234343a323030303a3a2f33362d3336203d3e20323632343438.roa (raw, json)
Hash identifier:          UFSO4ebpDnJLZgSU5VePEOECzT2bTcI03SU20cTIYBE=
Subject key identifier:   46:D9:32:D0:FD:8B:8D:E1:36:95:A9:A8:DE:2F:2A:15:08:AA:EE:78
Certificate issuer:       /CN=4F10D220B7D557A965AE8B26DDEB1BDDB166AE97
Certificate serial:       3559DC3BFDD215FA598D29AE62955BD970794791
Authority key identifier: 4F:10:D2:20:B7:D5:57:A9:65:AE:8B:26:DD:EB:1B:DD:B1:66:AE:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a323030303a3a2f33362d3336203d3e20323632343438.roa
Signing time:             Mon 11 Aug 2025 22:49:29 +0000
ROA not before:           Mon 11 Aug 2025 22:44:29 +0000
ROA not after:            Mon 10 Aug 2026 22:49:29 +0000
asID:                     262448
IP address blocks:        2804:b44:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.crl
                          rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 20:51:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:59:dc:3b:fd:d2:15:fa:59:8d:29:ae:62:95:5b:d9:70:79:47:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F10D220B7D557A965AE8B26DDEB1BDDB166AE97
        Validity
            Not Before: Aug 11 22:44:29 2025 GMT
            Not After : Aug 10 22:49:29 2026 GMT
        Subject: CN=46D932D0FD8B8DE13695A9A8DE2F2A1508AAEE78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:43:25:95:71:c0:8c:61:49:36:71:39:a3:ee:
                    d2:7b:82:1d:da:fc:cb:71:e4:59:f9:f0:0e:82:fc:
                    f7:e8:7b:e6:03:25:02:bb:2b:a1:9a:f9:e1:91:55:
                    d5:47:66:1d:65:65:61:48:07:64:ba:76:2e:0b:e5:
                    b4:3e:2f:49:77:b8:49:05:1b:d7:4e:a6:25:e4:c6:
                    8d:8d:2c:0e:8a:4f:48:ab:c1:c6:ba:2c:8c:34:e3:
                    23:7e:8b:67:5d:db:29:1c:8e:8b:d6:31:48:a1:6c:
                    4f:20:56:e0:6c:c8:59:12:68:3c:77:73:14:b7:35:
                    5a:b7:b0:58:6c:a1:51:5f:d9:d1:d2:00:9b:6f:e9:
                    f4:90:ed:ac:e3:5e:a5:4c:68:69:83:cb:5d:4b:7d:
                    76:6c:11:3b:b7:69:b6:8a:b2:e1:11:f4:dd:b0:5e:
                    08:4b:38:32:45:46:24:13:a2:ea:a4:d5:ab:a3:52:
                    da:03:d6:4f:5a:45:82:b8:4a:c2:86:5f:2f:9e:2d:
                    d1:83:59:d4:5a:c5:d2:33:15:49:3f:47:9b:b0:46:
                    7b:61:52:01:05:61:7b:5b:6f:df:ce:49:87:56:2b:
                    af:9c:09:03:c4:e8:91:0e:c7:f4:02:b0:d0:84:77:
                    8a:b7:17:0a:ea:ab:09:7a:c3:77:0d:34:84:bf:4c:
                    9c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D9:32:D0:FD:8B:8D:E1:36:95:A9:A8:DE:2F:2A:15:08:AA:EE:78
            X509v3 Authority Key Identifier:
                keyid:4F:10:D2:20:B7:D5:57:A9:65:AE:8B:26:DD:EB:1B:DD:B1:66:AE:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a323030303a3a2f33362d3336203d3e20323632343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b44:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7c:fd:6b:ad:71:9b:cd:4c:0c:82:7a:59:1f:66:de:9b:a1:88:
         5a:43:e9:21:b7:25:e6:37:3c:b7:9d:99:4b:dd:e7:ff:ea:5b:
         08:ac:f7:b3:43:1f:b0:c8:43:40:02:e4:4a:93:09:30:be:79:
         f7:3b:4b:75:bf:c5:7a:86:cf:b7:a2:82:8f:54:4d:3b:51:cd:
         0b:d9:e6:77:36:28:e6:5e:65:05:d5:99:df:38:ac:de:ae:f8:
         d1:d5:10:1c:d8:38:2a:c9:92:dd:8d:35:54:11:8a:a7:d7:a3:
         25:b7:d4:ab:1c:ae:08:a6:ca:bb:10:70:bd:1b:49:df:26:48:
         3d:3e:a7:29:ad:36:21:66:78:9b:a4:a7:cb:92:44:2e:14:93:
         0f:dd:27:f4:32:7d:4e:8a:da:1b:f9:f3:d3:45:8e:66:a9:0e:
         93:4b:e8:b3:50:48:ae:79:4e:b2:58:d8:50:7c:ca:08:c6:01:
         cc:42:15:09:91:bf:15:e8:e4:ef:7b:4a:f6:34:ee:dd:6f:3a:
         31:c1:9c:a3:23:67:ae:5e:e9:a3:d7:d7:0f:4f:60:43:d5:59:
         47:ee:c9:fe:11:14:c3:44:ac:09:37:df:6e:30:4c:9c:71:8d:
         f4:37:ef:82:f9:5c:58:5c:c7:ee:dd:bc:52:60:00:0a:39:42:
         58:16:ea:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:13:27 2025 by rpki-client