Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a663030303a3a2f33362d3336203d3e20323632343438.roa
File:                     323830343a6234343a663030303a3a2f33362d3336203d3e20323632343438.roa (raw, json)
Hash identifier:          F3CX2gtIXmbTcDV1F3dxSqeoATJwdtNJGXtc+mELh1c=
Subject key identifier:   10:19:DE:70:87:6C:EC:32:5E:B9:B6:FD:D3:D3:36:D6:04:04:B2:FD
Certificate issuer:       /CN=4F10D220B7D557A965AE8B26DDEB1BDDB166AE97
Certificate serial:       56C1CFB544377BBB431635B5ABD7B4CE2C6FFF2E
Authority key identifier: 4F:10:D2:20:B7:D5:57:A9:65:AE:8B:26:DD:EB:1B:DD:B1:66:AE:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a663030303a3a2f33362d3336203d3e20323632343438.roa
Signing time:             Mon 11 Aug 2025 22:50:08 +0000
ROA not before:           Mon 11 Aug 2025 22:45:08 +0000
ROA not after:            Mon 10 Aug 2026 22:50:08 +0000
asID:                     262448
IP address blocks:        2804:b44:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.crl
                          rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 03:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c1:cf:b5:44:37:7b:bb:43:16:35:b5:ab:d7:b4:ce:2c:6f:ff:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F10D220B7D557A965AE8B26DDEB1BDDB166AE97
        Validity
            Not Before: Aug 11 22:45:08 2025 GMT
            Not After : Aug 10 22:50:08 2026 GMT
        Subject: CN=1019DE70876CEC325EB9B6FDD3D336D60404B2FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:34:91:87:53:f7:31:24:07:73:a6:dd:2e:4b:
                    33:e2:55:4f:5d:77:ca:c7:92:e2:d7:63:7e:b1:c3:
                    c6:72:64:18:01:e7:5b:3a:73:6e:69:bf:f8:1c:6e:
                    f4:c3:a6:b3:9e:9b:3c:0e:f5:23:86:45:ee:1a:41:
                    5a:8b:3e:2b:48:4a:d7:1c:ac:36:a4:63:c0:67:6c:
                    43:19:72:98:96:aa:5c:26:ca:6c:d6:1b:43:a5:cb:
                    1a:de:8d:65:0f:86:f0:e6:e4:a8:10:2f:13:d2:dc:
                    22:f8:c0:11:20:fd:0f:a2:e1:60:48:54:33:73:71:
                    b0:8b:c4:b5:f9:49:76:b8:80:76:af:5b:0d:64:3d:
                    1a:78:a4:ee:66:26:41:7f:5c:5d:bd:9d:3d:a3:17:
                    ff:e1:e2:11:d5:7d:8c:f8:eb:a2:12:e2:e1:12:1e:
                    bf:de:3d:27:c9:fa:04:bc:be:0d:c9:56:ad:02:c3:
                    cb:ee:03:c3:5b:54:81:4e:de:28:63:f6:ba:3a:92:
                    23:f7:a4:f3:40:38:b8:d4:70:e5:d2:ec:78:f1:70:
                    03:8e:81:dd:5f:06:81:bf:a8:e1:86:66:26:af:dd:
                    0b:cf:44:f8:47:b2:77:8a:1c:59:cc:56:d4:1a:ad:
                    38:39:24:34:42:b5:03:18:95:e4:61:f7:26:97:ef:
                    7c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:19:DE:70:87:6C:EC:32:5E:B9:B6:FD:D3:D3:36:D6:04:04:B2:FD
            X509v3 Authority Key Identifier:
                keyid:4F:10:D2:20:B7:D5:57:A9:65:AE:8B:26:DD:EB:1B:DD:B1:66:AE:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a663030303a3a2f33362d3336203d3e20323632343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b44:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1d:ee:7c:33:ab:b9:69:8d:88:b1:7b:26:78:ff:aa:a9:ee:ba:
         57:8a:95:9b:a7:15:3c:84:05:6d:1d:28:36:c2:d1:4e:06:ea:
         81:73:a0:83:1b:a2:aa:75:52:40:96:41:e9:65:71:51:9a:96:
         bc:2a:54:20:5e:6c:6e:7c:39:5a:8e:8d:4e:0b:c8:37:ed:ef:
         9a:52:6c:dd:b7:5e:ec:a0:f4:fe:11:7b:b5:88:2d:19:03:82:
         92:90:e9:a4:7b:38:e3:c9:66:e6:a6:78:f3:08:1b:c1:2d:81:
         2d:dd:2c:9e:01:b7:7d:71:5a:ca:95:94:71:ab:1c:27:a6:a6:
         e2:19:0f:3b:8a:50:8b:2b:b3:be:22:89:a8:ea:2e:7d:e0:fd:
         71:47:10:52:7e:ac:bd:41:55:01:1f:6b:17:5a:68:d9:0e:f5:
         28:b3:68:1d:aa:72:9d:5a:bc:bb:bb:1c:89:94:89:09:60:0c:
         3e:44:c5:8d:60:73:8c:71:fa:6a:6c:c8:9e:9b:3e:c2:27:b7:
         1d:09:41:f9:12:74:0c:60:06:00:44:9d:71:91:73:23:20:58:
         2f:e7:22:1e:c9:5b:19:61:62:5a:09:7b:cd:8b:d0:70:f7:fa:
         a3:91:4c:e5:06:fa:4b:78:2a:47:86:cd:2d:d7:dc:52:8d:d8:
         a9:fc:f8:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVsHPtUQ3e7tDFjW1q9e0zixv/y4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEYxMEQyMjBCN0Q1NTdBOTY1QUU4QjI2RERFQjFCRERC
MTY2QUU5NzAeFw0yNTA4MTEyMjQ1MDhaFw0yNjA4MTAyMjUwMDhaMDMxMTAvBgNV
BAMTKDEwMTlERTcwODc2Q0VDMzI1RUI5QjZGREQzRDMzNkQ2MDQwNEIyRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFNJGHU/cxJAdzpt0uSzPiVU9d
d8rHkuLXY36xw8ZyZBgB51s6c25pv/gcbvTDprOemzwO9SOGRe4aQVqLPitIStcc
rDakY8BnbEMZcpiWqlwmymzWG0OlyxrejWUPhvDm5KgQLxPS3CL4wBEg/Q+i4WBI
VDNzcbCLxLX5SXa4gHavWw1kPRp4pO5mJkF/XF29nT2jF//h4hHVfYz466IS4uES
Hr/ePSfJ+gS8vg3JVq0Cw8vuA8NbVIFO3ihj9ro6kiP3pPNAOLjUcOXS7HjxcAOO
gd1fBoG/qOGGZiav3QvPRPhHsneKHFnMVtQarTg5JDRCtQMYleRh9yaX73zfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUEBnecIds7DJeubb909M21gQEsv0wHwYDVR0j
BBgwFoAUTxDSILfVV6llrosm3esb3bFmrpcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3ZQYU1FZlBXOFl1WXpHTFYxTXR1U3dwNUw0Skhuc3FiWmdXNG9FWkpN
Uk0vMC80RjEwRDIyMEI3RDU1N0E5NjVBRThCMjZEREVCMUJEREIxNjZBRTk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGMTBEMjIwQjdENTU3QTk2
NUFFOEIyNkRERUIxQkREQjE2NkFFOTcuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d2UGFNRWZQVzhZdVl6R0xWMU10dVN3cDVMNEpIbnNxYlpnVzRvRVpKTVJNLzAv
MzIzODMwMzQzYTYyMzQzNDNhNjYzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl
MjAzMjM2MzIzNDM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBAtE8DANBgkqhkiG9w0BAQsFAAOC
AQEAHe58M6u5aY2IsXsmeP+qqe66V4qVm6cVPIQFbR0oNsLRTgbqgXOggxuiqnVS
QJZB6WVxUZqWvCpUIF5sbnw5Wo6NTgvIN+3vmlJs3bde7KD0/hF7tYgtGQOCkpDp
pHs448lm5qZ48wgbwS2BLd0sngG3fXFaypWUcascJ6am4hkPO4pQiyuzviKJqOou
feD9cUcQUn6svUFVAR9rF1po2Q71KLNoHapynVq8u7sciZSJCWAMPkTFjWBzjHH6
amzInps+wie3HQlB+RJ0DGAGAESdcZFzIyBYL+ciHslbGWFiWgl7zYvQcPf6o5FM
5Qb6S3gqR4bNLdfcUo3Yqfz4DA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:17:50 2025 by rpki-client