Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a3a2f33362d3336203d3e20323632343438.roa
File:                     323830343a6234343a3a2f33362d3336203d3e20323632343438.roa (raw, json)
Hash identifier:          4A3Yb8+O3lXU5Spf+gFF6Vr9PFesGGLekKLYKJZB1u0=
Subject key identifier:   6D:B6:FB:CF:CB:B8:0B:BE:75:3F:19:DD:91:A3:83:CC:D2:40:5F:9B
Certificate issuer:       /CN=4F10D220B7D557A965AE8B26DDEB1BDDB166AE97
Certificate serial:       7097AC9EDDDA69353846A4BBC58551C93EB35C3D
Authority key identifier: 4F:10:D2:20:B7:D5:57:A9:65:AE:8B:26:DD:EB:1B:DD:B1:66:AE:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a3a2f33362d3336203d3e20323632343438.roa
Signing time:             Mon 11 Aug 2025 22:52:21 +0000
ROA not before:           Mon 11 Aug 2025 22:47:21 +0000
ROA not after:            Mon 10 Aug 2026 22:52:21 +0000
asID:                     262448
IP address blocks:        2804:b44::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.crl
                          rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 03:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:97:ac:9e:dd:da:69:35:38:46:a4:bb:c5:85:51:c9:3e:b3:5c:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F10D220B7D557A965AE8B26DDEB1BDDB166AE97
        Validity
            Not Before: Aug 11 22:47:21 2025 GMT
            Not After : Aug 10 22:52:21 2026 GMT
        Subject: CN=6DB6FBCFCBB80BBE753F19DD91A383CCD2405F9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8b:9b:d9:b4:6a:dc:18:76:8a:a4:1e:b5:76:
                    64:ba:bb:3f:00:f6:a7:72:55:f1:8a:3a:98:f9:d2:
                    8d:c0:83:2a:4c:6e:69:c5:90:ae:74:6d:73:e4:e5:
                    b9:59:84:67:68:54:5b:aa:de:21:15:c4:5a:38:11:
                    ac:79:55:7f:41:4a:a1:c8:92:d8:76:52:27:fa:c2:
                    a6:81:e9:2b:e1:22:1d:b4:8e:ed:f1:d0:1a:54:f6:
                    90:9f:ea:4c:c2:e2:6a:43:07:76:d1:a9:71:2f:61:
                    0c:b3:b2:07:75:06:25:ba:f7:ad:50:a3:c3:f1:ab:
                    e9:58:14:bf:b9:98:7a:7b:1f:4a:14:1c:3d:57:e9:
                    79:c4:3e:bb:41:c3:5e:bc:dd:19:7d:38:8d:24:0f:
                    3f:3e:02:b0:cf:e4:d0:fc:a3:51:41:da:a8:a9:d4:
                    7f:f5:0d:e3:d9:b3:90:d6:88:8c:15:b8:13:f8:86:
                    2b:8e:b9:ea:cc:de:7d:e2:59:a4:36:6c:5c:0e:23:
                    c4:09:b1:41:7c:83:9b:b6:1f:dd:26:8e:e2:d3:07:
                    a6:38:41:b6:47:bf:47:1e:b7:6d:5b:18:80:d8:27:
                    ea:b6:9b:77:cf:93:73:46:8e:a5:f6:6e:8e:86:cc:
                    95:87:f4:67:29:37:82:37:d0:c3:d0:b9:f8:e3:35:
                    0a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B6:FB:CF:CB:B8:0B:BE:75:3F:19:DD:91:A3:83:CC:D2:40:5F:9B
            X509v3 Authority Key Identifier:
                keyid:4F:10:D2:20:B7:D5:57:A9:65:AE:8B:26:DD:EB:1B:DD:B1:66:AE:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a3a2f33362d3336203d3e20323632343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b44::/36

    Signature Algorithm: sha256WithRSAEncryption
         80:5b:e3:f6:5a:80:8c:99:c2:d8:76:ed:3f:40:33:5f:0c:69:
         89:15:63:cb:5c:5e:a7:cc:8e:b6:e8:3a:2e:80:6c:77:68:42:
         8e:76:4d:35:a5:f8:fd:02:e6:59:aa:dd:47:09:40:3e:01:f0:
         5f:18:f7:0a:38:f1:70:62:6f:ed:13:b6:22:49:a4:cb:66:c0:
         22:cb:f2:ed:b2:c2:7a:2d:3d:4b:ea:52:8a:f2:84:39:87:78:
         1d:e1:17:1c:b8:76:57:80:55:01:32:a9:40:46:3c:fb:dd:5c:
         5a:d0:41:82:7b:75:aa:cd:18:63:c0:c9:6d:58:5b:cf:30:8e:
         df:01:ef:b9:73:32:8c:13:94:5b:83:7e:e0:57:42:12:65:b5:
         f4:1c:37:aa:a7:b1:47:0c:72:c4:0f:73:12:d6:84:e4:53:eb:
         1c:a2:f1:e4:86:be:bf:5d:16:c8:41:8f:8d:e7:de:75:b3:69:
         80:11:19:04:9b:3a:45:3e:31:a5:8d:88:c5:ed:4b:20:fe:37:
         41:c8:de:b5:db:ac:bc:5f:2f:4c:d7:f8:97:f5:3f:96:18:7e:
         bf:de:5f:76:02:d7:7b:cd:80:af:24:d6:ae:8f:c0:c6:78:9a:
         97:33:2d:43:23:f5:e0:3e:4f:07:b2:da:98:6a:52:22:cb:92:
         58:4d:3b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:27:59 2025 by rpki-client