Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a623030303a3a2f33362d3336203d3e20323632343438.roa
File:                     323830343a6234343a623030303a3a2f33362d3336203d3e20323632343438.roa (raw, json)
Hash identifier:          ZlUzBv7BEuCTCPwIrYowRyVBvAzhdwPeP2pJc9JfOG4=
Subject key identifier:   6F:1D:B4:56:7B:6E:D2:BE:4E:2C:32:4C:6E:0F:65:DF:6E:53:FE:B9
Certificate issuer:       /CN=4F10D220B7D557A965AE8B26DDEB1BDDB166AE97
Certificate serial:       264F847916C6A1D9A9096B5B3F1BD1E5778348D6
Authority key identifier: 4F:10:D2:20:B7:D5:57:A9:65:AE:8B:26:DD:EB:1B:DD:B1:66:AE:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a623030303a3a2f33362d3336203d3e20323632343438.roa
Signing time:             Mon 11 Aug 2025 22:52:32 +0000
ROA not before:           Mon 11 Aug 2025 22:47:32 +0000
ROA not after:            Mon 10 Aug 2026 22:52:32 +0000
asID:                     262448
IP address blocks:        2804:b44:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.crl
                          rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 03:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:4f:84:79:16:c6:a1:d9:a9:09:6b:5b:3f:1b:d1:e5:77:83:48:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F10D220B7D557A965AE8B26DDEB1BDDB166AE97
        Validity
            Not Before: Aug 11 22:47:32 2025 GMT
            Not After : Aug 10 22:52:32 2026 GMT
        Subject: CN=6F1DB4567B6ED2BE4E2C324C6E0F65DF6E53FEB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:23:64:1f:86:ef:be:e6:74:6a:7d:4b:d3:d6:
                    20:94:1a:bc:f5:81:c3:10:5c:1d:cc:5f:7e:fd:93:
                    57:34:aa:0a:61:a2:15:64:66:c3:96:71:3c:20:83:
                    45:8f:82:d7:fd:9e:5d:5c:0f:3b:aa:ef:b9:d7:fe:
                    c2:63:4c:36:82:d5:10:c9:5c:20:d5:57:b8:19:d3:
                    63:b4:cb:77:cf:d4:0e:02:08:c9:49:eb:b4:29:a9:
                    70:82:0b:c0:32:c7:6a:f0:75:9d:34:e7:1c:59:76:
                    1b:c6:bb:8e:d9:68:66:0e:4f:12:83:37:76:6c:7e:
                    85:c4:c6:b3:6b:6c:1a:2d:42:99:a3:8b:1d:65:3b:
                    5d:24:b6:74:70:29:83:f5:3a:42:2a:33:4e:e6:5e:
                    7a:1c:ef:db:4b:18:95:63:ff:03:1c:53:f0:19:0b:
                    3f:04:7e:1c:99:8f:4f:b9:28:2e:2c:9a:be:fe:67:
                    22:de:ac:74:ae:bd:62:31:66:3f:b5:ec:af:90:cf:
                    5b:3a:01:95:d2:f3:9d:c6:7e:49:40:cf:8f:12:88:
                    c7:22:1e:d7:78:63:58:e5:11:84:91:fb:75:23:3f:
                    ac:8f:f6:03:2c:b7:3a:91:e2:ff:74:2c:43:0e:22:
                    83:ff:d1:ba:12:e5:fe:ff:3e:8e:48:36:34:d6:2f:
                    df:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1D:B4:56:7B:6E:D2:BE:4E:2C:32:4C:6E:0F:65:DF:6E:53:FE:B9
            X509v3 Authority Key Identifier:
                keyid:4F:10:D2:20:B7:D5:57:A9:65:AE:8B:26:DD:EB:1B:DD:B1:66:AE:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a623030303a3a2f33362d3336203d3e20323632343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b44:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         13:27:e3:e9:c7:b7:69:57:26:50:9c:81:b1:6f:9d:0f:6e:73:
         c2:28:06:f1:27:50:36:64:1a:3c:19:7c:c7:da:15:7c:e5:5b:
         96:5e:32:7e:28:38:cf:84:48:e4:06:07:f8:5e:f6:7b:74:93:
         67:cf:8a:59:64:39:d1:d7:23:87:ad:f0:54:54:06:3b:ad:86:
         17:0a:c2:c0:8d:bb:59:14:9c:60:16:f1:70:59:6e:41:65:2a:
         d0:d8:bd:93:15:f4:b8:b1:72:3e:da:b2:20:48:a5:20:22:36:
         b2:74:18:ab:bc:b0:99:cb:09:8e:7a:6a:fd:9f:2e:a5:ec:ac:
         b9:ff:1c:70:95:38:85:da:2d:61:c2:c2:cd:1e:29:86:df:78:
         02:36:e8:67:39:3b:14:7b:b4:f0:ee:1e:93:47:f0:54:2b:46:
         34:44:09:41:b0:2a:54:d8:8b:8a:f7:71:5d:00:a9:64:49:96:
         f8:be:57:8c:39:b9:0b:5d:b9:71:52:22:c4:48:8d:fd:fb:e4:
         5b:0c:fa:70:2d:50:a1:b6:ee:07:ca:b9:0e:7b:b6:fe:1b:9c:
         cf:7f:3e:82:14:24:71:3e:20:0c:4c:10:30:ac:93:08:46:8f:
         9e:ef:51:8c:4b:49:9f:41:e2:14:7f:74:14:2e:53:dd:63:a3:
         fd:a2:13:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:05:30 2025 by rpki-client