Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a333030303a3a2f33362d3336203d3e20323632343438.roa
File:                     323830343a6234343a333030303a3a2f33362d3336203d3e20323632343438.roa (raw, json)
Hash identifier:          qbD6KGtun+WzeU/M6nDow4J/aAyDrYLjjf+EB7ugOvw=
Subject key identifier:   E0:87:3C:65:58:32:81:94:1C:7B:AE:35:32:B9:92:92:3A:62:DF:36
Certificate issuer:       /CN=4F10D220B7D557A965AE8B26DDEB1BDDB166AE97
Certificate serial:       1B90EABC7CFCD8495DF9E0D8444BAE77333278A9
Authority key identifier: 4F:10:D2:20:B7:D5:57:A9:65:AE:8B:26:DD:EB:1B:DD:B1:66:AE:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a333030303a3a2f33362d3336203d3e20323632343438.roa
Signing time:             Mon 11 Aug 2025 22:52:09 +0000
ROA not before:           Mon 11 Aug 2025 22:47:09 +0000
ROA not after:            Mon 10 Aug 2026 22:52:09 +0000
asID:                     262448
IP address blocks:        2804:b44:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.crl
                          rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 03:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:90:ea:bc:7c:fc:d8:49:5d:f9:e0:d8:44:4b:ae:77:33:32:78:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F10D220B7D557A965AE8B26DDEB1BDDB166AE97
        Validity
            Not Before: Aug 11 22:47:09 2025 GMT
            Not After : Aug 10 22:52:09 2026 GMT
        Subject: CN=E0873C65583281941C7BAE3532B992923A62DF36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8d:5f:7b:20:b8:84:75:55:c1:a3:68:ba:68:
                    33:c6:59:83:8f:fe:a3:39:8c:11:51:20:d0:56:7f:
                    41:bb:fc:ce:71:80:0f:62:6e:b8:0e:05:3c:b3:5d:
                    94:4c:f4:a1:10:95:79:49:aa:8f:2f:f0:b1:f9:21:
                    d1:c1:87:6a:b5:e3:9d:b2:55:7d:45:c8:eb:7a:42:
                    34:b7:a8:c6:d2:d8:19:35:73:cf:32:40:48:b0:a3:
                    94:37:b7:88:c0:af:47:c3:f8:ef:90:f0:d2:ae:a4:
                    cc:91:c9:77:23:46:3a:cf:53:e2:d3:3a:32:2a:f9:
                    04:7e:f7:f2:a9:92:f3:d7:cf:e5:89:e2:22:8e:4e:
                    f8:cd:4b:6b:81:f8:99:db:4d:73:9f:56:26:f8:4c:
                    6d:18:5d:48:1f:7a:15:1b:75:9b:2c:df:67:3d:df:
                    43:e0:98:1d:d9:ac:7a:55:92:d1:37:2a:70:c4:e5:
                    95:56:0a:50:3c:b8:9c:fd:0e:c7:9c:c2:8a:fe:5d:
                    ff:2b:6d:43:c8:bc:14:08:66:3c:a8:b0:e8:4f:e0:
                    23:98:94:e8:de:d3:c2:1b:2e:9d:01:c9:ae:41:ae:
                    81:15:4c:2a:84:33:48:44:a6:cb:04:ee:22:f2:2d:
                    35:0f:b7:5d:58:c0:f3:5a:f0:b8:77:ff:06:d0:c7:
                    9b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:87:3C:65:58:32:81:94:1C:7B:AE:35:32:B9:92:92:3A:62:DF:36
            X509v3 Authority Key Identifier:
                keyid:4F:10:D2:20:B7:D5:57:A9:65:AE:8B:26:DD:EB:1B:DD:B1:66:AE:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a333030303a3a2f33362d3336203d3e20323632343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b44:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         85:02:d7:0e:10:52:92:f3:ec:76:c2:e7:4b:dd:d3:48:02:6b:
         5f:8d:32:4d:ed:bf:03:93:f7:52:2c:c4:4e:37:c7:ff:f6:d6:
         ab:b9:b7:20:5a:55:f5:f9:51:12:a0:11:56:ee:42:99:6e:2f:
         87:dc:23:db:7d:82:75:5a:81:f2:de:e4:30:01:48:25:cc:34:
         bf:7b:d9:0a:46:0c:cc:a7:6d:1a:1d:64:22:38:07:e3:bb:c7:
         52:cf:76:1a:03:06:38:3c:91:3d:6a:8a:2c:79:a5:1a:38:ef:
         98:89:5a:4c:6e:91:ad:67:2f:21:e3:2d:ff:21:54:6f:5a:fb:
         60:5c:5f:41:59:a2:25:1a:0e:df:f7:ab:6a:a7:b0:f6:8b:4f:
         83:c1:f7:c8:76:0a:8e:6b:ca:5b:55:ca:90:66:3f:f7:b2:58:
         79:33:d9:9f:21:99:4a:06:bd:ec:f7:9d:9c:41:a7:58:30:fe:
         ff:aa:3e:57:25:91:61:80:23:fb:ff:1d:81:5e:31:68:e0:49:
         68:47:a7:00:a2:6b:d6:17:fb:72:b6:78:bc:30:52:5c:07:ae:
         f9:bd:35:4f:c0:6e:92:d6:cb:c0:7e:5c:98:ad:20:16:94:e7:
         cd:45:8f:48:13:89:72:dc:32:90:da:90:75:14:7b:dd:00:3a:
         5d:2b:32:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:19:09 2025 by rpki-client