Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a363030303a3a2f33362d3336203d3e20323632343438.roa
File:                     323830343a6234343a363030303a3a2f33362d3336203d3e20323632343438.roa (raw, json)
Hash identifier:          sytKWFDcECspyI9z4fcFMvj/acx/p8aYEkn/UlKFiCk=
Subject key identifier:   BD:B9:C1:32:1C:E1:17:23:29:5E:EF:6C:F4:47:4A:4E:25:45:4D:25
Certificate issuer:       /CN=4F10D220B7D557A965AE8B26DDEB1BDDB166AE97
Certificate serial:       0CF990BF4EF3ED2225D4F91915941B8321C6BDEC
Authority key identifier: 4F:10:D2:20:B7:D5:57:A9:65:AE:8B:26:DD:EB:1B:DD:B1:66:AE:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a363030303a3a2f33362d3336203d3e20323632343438.roa
Signing time:             Mon 11 Aug 2025 22:50:18 +0000
ROA not before:           Mon 11 Aug 2025 22:45:18 +0000
ROA not after:            Mon 10 Aug 2026 22:50:18 +0000
asID:                     262448
IP address blocks:        2804:b44:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.crl
                          rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 03:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f9:90:bf:4e:f3:ed:22:25:d4:f9:19:15:94:1b:83:21:c6:bd:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F10D220B7D557A965AE8B26DDEB1BDDB166AE97
        Validity
            Not Before: Aug 11 22:45:18 2025 GMT
            Not After : Aug 10 22:50:18 2026 GMT
        Subject: CN=BDB9C1321CE11723295EEF6CF4474A4E25454D25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:57:55:bb:64:eb:38:d0:7d:61:ea:e5:ee:7f:
                    9e:9a:fe:e5:a2:be:01:e0:1f:1a:cc:37:66:f1:ab:
                    91:77:c5:cc:f2:77:52:59:1b:c0:94:54:65:1d:af:
                    8e:99:01:a8:db:81:59:4c:27:a3:54:69:c5:0e:78:
                    d6:99:b0:43:85:b0:50:5f:54:9c:af:3d:73:ca:92:
                    1d:11:12:25:05:06:09:f1:05:52:47:69:2e:dc:3a:
                    ef:98:bd:63:42:a7:90:e4:6e:89:e5:24:36:84:95:
                    80:4b:8d:f3:ab:1e:64:a8:b1:6e:d8:c3:c4:82:8b:
                    cd:48:2a:a4:53:9d:12:a0:ca:b6:17:3c:a6:fd:96:
                    fa:c8:6f:15:ce:ef:24:c3:12:64:55:35:d4:74:55:
                    72:d3:37:a3:a1:6e:a8:18:05:db:07:70:8d:de:83:
                    3f:74:e1:28:fc:d5:72:88:38:7c:30:a8:d4:94:40:
                    5a:8e:cf:05:74:9a:cc:d1:ec:3f:5b:ab:cf:f7:17:
                    f9:b0:f2:7c:64:54:81:f1:71:3a:e6:73:72:10:59:
                    a3:89:0b:71:ff:1c:61:13:d7:c1:11:d7:94:9d:86:
                    9a:a2:8b:46:09:8e:62:b1:40:57:a3:fc:41:f9:0f:
                    81:10:e2:4a:63:4f:10:93:f7:54:a3:8e:a7:32:0a:
                    34:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B9:C1:32:1C:E1:17:23:29:5E:EF:6C:F4:47:4A:4E:25:45:4D:25
            X509v3 Authority Key Identifier:
                keyid:4F:10:D2:20:B7:D5:57:A9:65:AE:8B:26:DD:EB:1B:DD:B1:66:AE:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a363030303a3a2f33362d3336203d3e20323632343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b44:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         36:8c:a7:2e:f0:97:79:a2:07:05:38:87:a9:db:f7:58:8b:a3:
         3c:42:47:3c:36:15:84:d0:7f:fb:3e:b4:a5:96:3d:bb:f5:5b:
         52:18:9a:c8:c0:7a:ca:e4:7c:13:02:ef:14:93:16:c5:88:c7:
         20:29:a6:ee:7a:b8:14:6b:7d:a2:d4:8e:cd:b3:f1:bd:00:a9:
         61:66:fa:e3:e1:15:46:90:f4:a2:e3:53:1d:ba:b3:cf:99:5e:
         17:79:b4:8f:5c:ed:d1:99:ca:7b:7c:5f:c4:a0:91:9c:85:7a:
         ed:3e:4d:c9:f7:b5:8f:76:2c:d8:64:79:d2:68:5c:3c:1e:8b:
         53:d4:98:92:50:aa:ae:92:e3:b6:65:59:13:5e:87:ef:60:00:
         23:50:01:e0:2e:d9:b7:50:2f:30:ab:1a:2a:20:6c:0d:3f:30:
         f3:95:3a:81:72:bd:ff:ac:c3:ed:bc:38:70:59:20:48:ee:33:
         7b:6a:a2:a7:9f:af:52:3e:c3:93:72:8b:dd:dc:67:53:a1:96:
         d0:4a:0e:ac:2a:44:d8:d4:6e:3d:91:27:35:fb:51:dc:c2:df:
         47:e6:89:e0:cf:59:5c:fd:8e:c8:1f:8d:fe:5f:c3:b1:04:48:
         4c:61:f3:39:7a:9f:03:be:bf:e5:c2:74:a4:45:ed:2b:63:5d:
         3e:3e:96:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:22:50 2025 by rpki-client