Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a3a2f33322d3332203d3e20323632343438.roa
File:                     323830343a6234343a3a2f33322d3332203d3e20323632343438.roa (raw, json)
Hash identifier:          ZjLBPrQMyKOpbcWwuzI+GIOc3UhqQVwYxQeJUB9AnCU=
Subject key identifier:   45:95:BB:36:65:5B:8E:03:90:42:70:D8:93:04:6C:29:F7:21:26:FF
Certificate issuer:       /CN=4F10D220B7D557A965AE8B26DDEB1BDDB166AE97
Certificate serial:       3E56739800D2506823F161FA7A86CCD1E0462B7D
Authority key identifier: 4F:10:D2:20:B7:D5:57:A9:65:AE:8B:26:DD:EB:1B:DD:B1:66:AE:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a3a2f33322d3332203d3e20323632343438.roa
Signing time:             Thu 07 Aug 2025 03:43:52 +0000
ROA not before:           Thu 07 Aug 2025 03:38:52 +0000
ROA not after:            Thu 06 Aug 2026 03:43:52 +0000
asID:                     262448
IP address blocks:        2804:b44::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.crl
                          rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 03:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:56:73:98:00:d2:50:68:23:f1:61:fa:7a:86:cc:d1:e0:46:2b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F10D220B7D557A965AE8B26DDEB1BDDB166AE97
        Validity
            Not Before: Aug  7 03:38:52 2025 GMT
            Not After : Aug  6 03:43:52 2026 GMT
        Subject: CN=4595BB36655B8E03904270D893046C29F72126FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0f:8c:86:e0:92:51:86:61:06:17:2a:01:9c:
                    a6:36:d4:e8:1a:3b:30:c9:09:4e:ac:a1:bb:76:4e:
                    55:e9:ff:ec:c0:06:86:c8:8b:d3:78:2e:29:09:73:
                    2b:0a:61:31:e2:35:e4:66:88:d6:67:fd:e0:7e:ac:
                    af:02:7f:c5:95:99:98:4b:50:2d:78:7b:ce:41:27:
                    92:2b:2d:7e:5b:6f:d2:e4:f5:a8:2d:94:d0:3b:af:
                    4d:d5:6c:5f:f5:52:8f:1f:71:ad:7c:ee:30:7e:f5:
                    cf:d5:b5:13:3c:20:69:d4:0e:ac:3f:51:ef:0a:d6:
                    d7:88:65:6a:d6:96:93:6a:30:35:37:37:16:90:6d:
                    06:bd:c6:37:79:18:cd:5d:3c:88:56:13:a9:9c:e7:
                    6a:2a:8a:f8:9e:80:85:77:62:ce:a9:d2:31:b7:c4:
                    d6:9e:4b:e7:6b:79:34:24:6d:10:2a:ca:90:9d:ef:
                    ac:a0:1b:e3:5c:7e:6c:1b:92:db:40:15:43:75:96:
                    8c:46:75:d4:06:df:33:64:fe:c8:5c:af:8a:11:fc:
                    c2:70:9d:d4:28:0c:66:e7:6e:98:33:77:6d:4f:1a:
                    66:be:54:68:45:84:01:f1:77:34:8b:78:57:28:06:
                    d5:a6:6f:f8:05:48:5e:18:8f:9a:dd:ba:7b:51:e5:
                    9a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:95:BB:36:65:5B:8E:03:90:42:70:D8:93:04:6C:29:F7:21:26:FF
            X509v3 Authority Key Identifier:
                keyid:4F:10:D2:20:B7:D5:57:A9:65:AE:8B:26:DD:EB:1B:DD:B1:66:AE:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a3a2f33322d3332203d3e20323632343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b44::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:db:67:c8:8b:30:6b:f6:3a:d8:fa:39:fe:e1:9e:25:2a:16:
         53:97:ed:b0:6f:82:ff:cd:b4:34:42:42:f8:89:66:9c:af:83:
         94:ba:79:f6:9e:57:32:f4:21:d0:bd:4e:ed:06:bb:27:bf:9d:
         63:61:38:53:ed:ef:37:38:fb:28:e5:a3:5d:94:c9:f8:fe:84:
         df:8b:ca:74:52:ad:36:ab:7e:4e:63:72:05:9e:bc:d7:38:92:
         11:93:12:01:9a:7b:df:35:9a:08:57:83:88:7c:2e:f3:94:a8:
         04:c6:36:17:3f:ee:27:02:a7:ce:16:2a:ea:cf:e3:af:3c:65:
         62:66:e3:20:2b:43:00:37:bc:73:7b:63:8a:63:5b:37:92:e9:
         df:86:e1:a8:e2:7a:a5:ba:f3:39:cd:71:22:18:89:a8:3e:14:
         bb:07:00:ef:96:a2:96:85:7d:5c:7d:8d:26:56:94:c4:e8:69:
         89:9b:0d:a2:73:2a:2a:51:ef:45:c1:a1:cb:07:0d:8f:e3:7a:
         cb:2f:dd:04:50:27:57:c6:27:2a:32:98:f1:42:9c:cf:27:12:
         79:04:f8:34:86:26:29:bc:e9:40:66:e4:a7:ba:7b:06:7f:bc:
         72:b3:b9:21:2a:24:f2:3a:5e:51:39:1c:32:2d:90:0a:ec:c3:
         49:10:38:1f
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUPlZzmADSUGgj8WH6eobM0eBGK30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEYxMEQyMjBCN0Q1NTdBOTY1QUU4QjI2RERFQjFCRERC
MTY2QUU5NzAeFw0yNTA4MDcwMzM4NTJaFw0yNjA4MDYwMzQzNTJaMDMxMTAvBgNV
BAMTKDQ1OTVCQjM2NjU1QjhFMDM5MDQyNzBEODkzMDQ2QzI5RjcyMTI2RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgD4yG4JJRhmEGFyoBnKY21Oga
OzDJCU6sobt2TlXp/+zABobIi9N4LikJcysKYTHiNeRmiNZn/eB+rK8Cf8WVmZhL
UC14e85BJ5IrLX5bb9Lk9agtlNA7r03VbF/1Uo8fca187jB+9c/VtRM8IGnUDqw/
Ue8K1teIZWrWlpNqMDU3NxaQbQa9xjd5GM1dPIhWE6mc52oqiviegIV3Ys6p0jG3
xNaeS+dreTQkbRAqypCd76ygG+NcfmwbkttAFUN1loxGddQG3zNk/shcr4oR/MJw
ndQoDGbnbpgzd21PGma+VGhFhAHxdzSLeFcoBtWmb/gFSF4Yj5rduntR5Zp5AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQURZW7NmVbjgOQQnDYkwRsKfchJv8wHwYDVR0j
BBgwFoAUTxDSILfVV6llrosm3esb3bFmrpcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3ZQYU1FZlBXOFl1WXpHTFYxTXR1U3dwNUw0Skhuc3FiWmdXNG9FWkpN
Uk0vMC80RjEwRDIyMEI3RDU1N0E5NjVBRThCMjZEREVCMUJEREIxNjZBRTk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGMTBEMjIwQjdENTU3QTk2
NUFFOEIyNkRERUIxQkREQjE2NkFFOTcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d2UGFNRWZQVzhZdVl6R0xWMU10dVN3cDVMNEpIbnNxYlpnVzRvRVpKTVJNLzAv
MzIzODMwMzQzYTYyMzQzNDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMjM0
MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEC0QwDQYJKoZIhvcNAQELBQADggEBAJrbZ8iLMGv2
Otj6Of7hniUqFlOX7bBvgv/NtDRCQviJZpyvg5S6efaeVzL0IdC9Tu0Guye/nWNh
OFPt7zc4+yjlo12Uyfj+hN+LynRSrTarfk5jcgWevNc4khGTEgGae981mghXg4h8
LvOUqATGNhc/7icCp84WKurP4688ZWJm4yArQwA3vHN7Y4pjWzeS6d+G4ajieqW6
8znNcSIYiag+FLsHAO+WopaFfVx9jSZWlMToaYmbDaJzKipR70XBocsHDY/jessv
3QRQJ1fGJyoymPFCnM8nEnkE+DSGJim86UBm5Ke6ewZ/vHKzuSEqJPI6XlE5HDIt
kArsw0kQOB8=
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:32:52 2025 by rpki-client