Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a373030303a3a2f33362d3336203d3e20323632343438.roa
File:                     323830343a6234343a373030303a3a2f33362d3336203d3e20323632343438.roa (raw, json)
Hash identifier:          IV3FQhc3CBxgytlqADnuIj5gAsMm+QhRoVcoe2aJdbY=
Subject key identifier:   78:67:05:0F:B5:2E:E9:20:C2:24:D2:D5:4C:90:9C:6E:02:13:59:52
Certificate issuer:       /CN=4F10D220B7D557A965AE8B26DDEB1BDDB166AE97
Certificate serial:       254FD4FDE78B6A5D0A01475B4526586AF6E385D6
Authority key identifier: 4F:10:D2:20:B7:D5:57:A9:65:AE:8B:26:DD:EB:1B:DD:B1:66:AE:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a373030303a3a2f33362d3336203d3e20323632343438.roa
Signing time:             Mon 11 Aug 2025 22:51:56 +0000
ROA not before:           Mon 11 Aug 2025 22:46:56 +0000
ROA not after:            Mon 10 Aug 2026 22:51:56 +0000
asID:                     262448
IP address blocks:        2804:b44:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.crl
                          rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 03:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:4f:d4:fd:e7:8b:6a:5d:0a:01:47:5b:45:26:58:6a:f6:e3:85:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F10D220B7D557A965AE8B26DDEB1BDDB166AE97
        Validity
            Not Before: Aug 11 22:46:56 2025 GMT
            Not After : Aug 10 22:51:56 2026 GMT
        Subject: CN=7867050FB52EE920C224D2D54C909C6E02135952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:79:83:22:ec:3d:52:e3:65:99:11:ca:f5:db:
                    a7:47:8a:c9:5d:13:bd:13:88:45:92:51:69:a7:91:
                    8e:b9:4b:1a:94:84:a1:f9:0e:69:57:cb:ac:2f:af:
                    3b:49:1b:47:e9:bc:9d:9c:f0:e7:b3:1a:a5:15:30:
                    5e:c1:ee:07:f9:ed:6e:20:a9:b2:a1:e3:ad:bc:a4:
                    ac:d0:30:93:f6:01:71:ae:b5:88:11:f4:76:82:93:
                    3e:36:dc:18:79:cb:09:44:ea:9a:c0:e9:b2:e0:3d:
                    43:5f:ea:04:11:4d:26:98:d9:7b:35:f8:fc:c6:fb:
                    8e:62:9e:da:e2:2f:03:cd:08:fa:1a:f6:06:ff:cc:
                    12:a1:93:22:76:76:c2:57:1c:d4:6c:01:7e:d8:08:
                    3d:39:c1:a7:e1:0c:fc:ad:0c:4b:92:2b:24:37:32:
                    f4:f3:97:9c:00:10:30:9a:e0:44:9a:53:9a:d3:0b:
                    66:8c:d1:1e:63:6e:bb:5c:02:b2:ae:ee:23:08:e4:
                    d8:b1:96:a3:9a:77:0c:a4:10:df:3d:44:75:b6:46:
                    3f:ee:1f:45:96:4c:ec:b3:a5:af:fe:2b:33:a5:ad:
                    67:e0:da:79:16:7a:61:99:57:63:ed:17:84:bf:13:
                    e4:c0:f3:82:6f:a9:e2:7d:65:3a:c8:7d:c0:e3:1f:
                    14:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:67:05:0F:B5:2E:E9:20:C2:24:D2:D5:4C:90:9C:6E:02:13:59:52
            X509v3 Authority Key Identifier:
                keyid:4F:10:D2:20:B7:D5:57:A9:65:AE:8B:26:DD:EB:1B:DD:B1:66:AE:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a373030303a3a2f33362d3336203d3e20323632343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b44:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5d:44:7d:14:98:29:02:5f:ee:0a:05:82:06:ab:c4:22:73:68:
         2b:92:a5:b3:a4:5e:cd:4a:80:fd:69:4d:c7:45:b6:ae:28:b5:
         5c:a4:03:14:c2:8c:8a:35:4a:3b:21:52:2d:c5:57:d2:18:eb:
         d1:41:35:dc:ea:4a:11:cb:4d:90:21:6f:33:d0:f0:b1:3a:c4:
         1b:0a:17:df:41:dc:d5:9d:f2:53:a0:98:28:9b:8d:0e:8f:98:
         c8:cc:32:42:d0:82:d5:b0:96:92:e9:2b:e8:97:ae:ed:ba:2f:
         8f:30:59:f3:e6:51:6e:6e:eb:4e:26:28:83:07:7c:fe:89:cf:
         46:2b:03:19:89:8b:eb:c4:94:e4:8d:b1:57:34:4e:dc:1e:64:
         96:85:2e:05:c5:c0:94:40:63:ea:b2:63:07:22:ce:00:87:5b:
         05:98:f2:2e:80:a1:e3:a1:8f:14:20:15:c9:42:05:18:76:ad:
         05:06:2d:ab:d3:36:61:c0:6c:b6:c0:5b:01:00:33:b4:fc:c5:
         eb:d2:65:25:e3:53:ed:d6:07:41:8b:ec:c7:48:42:70:df:d4:
         c8:49:2f:a9:2e:1e:97:e3:81:8b:13:7b:ad:f6:db:08:df:33:
         3c:02:71:6a:52:26:24:dc:8d:ab:ea:48:1d:2f:98:6c:8e:59:
         65:c6:db:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:20:20 2025 by rpki-client