Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a343030303a3a2f33362d3336203d3e20323632343438.roa
File:                     323830343a6234343a343030303a3a2f33362d3336203d3e20323632343438.roa (raw, json)
Hash identifier:          oH1uCD7rzDiuNSBZetDmm+vUNFtBQW9hrBZuowEYKFw=
Subject key identifier:   FF:66:EE:53:5A:B8:6A:41:A5:9F:B5:50:B6:72:5B:5C:83:0A:90:24
Certificate issuer:       /CN=4F10D220B7D557A965AE8B26DDEB1BDDB166AE97
Certificate serial:       153476D9B0294A5D97FF60CFA7E5CE72C587E3AD
Authority key identifier: 4F:10:D2:20:B7:D5:57:A9:65:AE:8B:26:DD:EB:1B:DD:B1:66:AE:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a343030303a3a2f33362d3336203d3e20323632343438.roa
Signing time:             Mon 11 Aug 2025 22:51:36 +0000
ROA not before:           Mon 11 Aug 2025 22:46:36 +0000
ROA not after:            Mon 10 Aug 2026 22:51:36 +0000
asID:                     262448
IP address blocks:        2804:b44:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.crl
                          rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 03:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:34:76:d9:b0:29:4a:5d:97:ff:60:cf:a7:e5:ce:72:c5:87:e3:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F10D220B7D557A965AE8B26DDEB1BDDB166AE97
        Validity
            Not Before: Aug 11 22:46:36 2025 GMT
            Not After : Aug 10 22:51:36 2026 GMT
        Subject: CN=FF66EE535AB86A41A59FB550B6725B5C830A9024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6c:10:67:42:26:c7:86:94:3d:ee:57:d7:2a:
                    e7:55:01:dd:bf:12:20:72:d2:f0:2d:6b:17:7e:55:
                    c8:b5:89:aa:be:be:eb:96:c0:85:1f:51:53:28:bf:
                    26:29:87:b4:fa:12:8d:13:bc:2a:43:27:a0:8b:26:
                    fa:35:2e:9b:29:9f:de:50:19:dd:04:25:ef:54:ea:
                    48:ed:4f:d1:44:7c:7c:1f:1d:e9:3d:53:bd:36:5e:
                    95:3f:86:80:4a:1b:fc:10:de:76:f6:01:83:b5:b9:
                    64:f1:9e:49:1c:04:1f:d3:28:bc:3a:be:9e:f1:0d:
                    e1:91:14:fd:17:7c:49:7b:9b:ce:bd:ca:b5:61:9f:
                    85:33:0a:e8:07:56:d0:0a:06:c1:35:9f:fb:f1:29:
                    d8:48:56:8a:94:97:91:d3:83:f0:7c:56:a3:43:da:
                    e9:c5:84:58:70:ed:72:f2:29:6f:74:2f:3e:e4:5d:
                    56:30:0f:bc:32:2b:08:61:e1:21:1a:06:99:2e:19:
                    41:55:d8:ac:76:a6:95:a7:5e:c4:19:a3:0c:cc:4c:
                    a3:89:15:b6:87:7e:2b:b0:d3:aa:8b:43:dd:ad:5d:
                    e5:09:7f:ee:7e:31:a5:64:09:ca:bc:7e:dd:4e:81:
                    62:72:2c:38:af:18:06:0f:16:ba:18:9f:ba:e5:9a:
                    c3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:66:EE:53:5A:B8:6A:41:A5:9F:B5:50:B6:72:5B:5C:83:0A:90:24
            X509v3 Authority Key Identifier:
                keyid:4F:10:D2:20:B7:D5:57:A9:65:AE:8B:26:DD:EB:1B:DD:B1:66:AE:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a343030303a3a2f33362d3336203d3e20323632343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b44:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0d:23:7e:06:d0:fd:6d:ef:ff:2a:1e:64:da:0e:59:6f:1c:f9:
         6d:ac:d3:44:73:55:88:da:a0:20:a3:91:d4:10:32:0a:ac:37:
         65:e6:45:05:b6:c3:74:5c:04:82:61:3c:68:5d:2f:5e:b0:1f:
         02:71:4a:27:1e:52:d1:95:6b:98:a2:c5:f3:84:f3:2a:2b:cc:
         4a:e0:d6:9f:b5:cd:05:fa:92:57:38:16:3f:7b:b5:da:06:69:
         26:27:10:81:b1:af:45:42:33:f4:1c:02:33:0e:5d:67:09:66:
         50:ad:70:54:f4:ce:b1:2b:08:18:cc:0a:cc:db:b2:3a:42:c4:
         f7:ca:3a:3b:58:40:3b:7e:95:0a:6c:65:d4:e2:c2:d4:6c:be:
         50:ee:05:e1:0c:e4:34:7f:20:9b:e2:87:36:9a:75:04:5d:5c:
         09:38:4d:3a:6b:99:d5:8d:45:a5:57:df:af:33:51:d6:ba:78:
         71:3a:be:49:7d:0e:c8:36:8c:f3:c9:c1:7c:9a:54:13:4b:56:
         3f:e5:03:80:2a:f5:2a:db:03:06:16:73:b9:89:25:4f:65:87:
         65:c8:da:8b:20:1b:df:58:fc:1b:05:f0:1f:26:51:98:8a:dc:
         e5:89:01:b2:5c:ec:a3:17:ea:64:72:0d:14:26:46:6c:80:22:
         36:cf:80:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:21:44 2025 by rpki-client