Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzmPeA18ZcSPaKJvGcxCRyfpFXdC6FmnpZY4gsZDVgdQ/0/323830343a366234343a3a2f33322d3438203d3e20323730333839.roa
File:                     323830343a366234343a3a2f33322d3438203d3e20323730333839.roa (raw, json)
Hash identifier:          20c6Pljhy899J1AshRfu623Ht5FuWTT0u6WeZcNkP2Q=
Subject key identifier:   E6:47:66:E6:AB:EA:CD:73:3B:14:FA:84:4C:D3:02:BF:64:DE:33:DE
Certificate issuer:       /CN=C102077C6FF730228C02F1F6C6797A5CC1C2A5C1
Certificate serial:       444459A4320CE1702EDF40E02FE761011284F2B5
Authority key identifier: C1:02:07:7C:6F:F7:30:22:8C:02:F1:F6:C6:79:7A:5C:C1:C2:A5:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C102077C6FF730228C02F1F6C6797A5CC1C2A5C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzmPeA18ZcSPaKJvGcxCRyfpFXdC6FmnpZY4gsZDVgdQ/0/323830343a366234343a3a2f33322d3438203d3e20323730333839.roa
Signing time:             Sun 12 Oct 2025 22:04:34 +0000
ROA not before:           Sun 12 Oct 2025 21:59:34 +0000
ROA not after:            Sun 11 Oct 2026 22:04:34 +0000
asID:                     270389
IP address blocks:        2804:6b44::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GzmPeA18ZcSPaKJvGcxCRyfpFXdC6FmnpZY4gsZDVgdQ/0/C102077C6FF730228C02F1F6C6797A5CC1C2A5C1.crl
                          rsync://rpki-repo.registro.br/repo/GzmPeA18ZcSPaKJvGcxCRyfpFXdC6FmnpZY4gsZDVgdQ/0/C102077C6FF730228C02F1F6C6797A5CC1C2A5C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C102077C6FF730228C02F1F6C6797A5CC1C2A5C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:44:59:a4:32:0c:e1:70:2e:df:40:e0:2f:e7:61:01:12:84:f2:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C102077C6FF730228C02F1F6C6797A5CC1C2A5C1
        Validity
            Not Before: Oct 12 21:59:34 2025 GMT
            Not After : Oct 11 22:04:34 2026 GMT
        Subject: CN=E64766E6ABEACD733B14FA844CD302BF64DE33DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f0:ff:1d:0c:3a:42:5a:92:3b:43:7b:a1:3e:
                    3a:84:ac:29:cf:f4:b3:ad:c6:81:05:9a:40:75:10:
                    18:aa:c5:42:10:26:91:76:96:c9:a4:25:16:9b:fc:
                    d7:88:19:4f:26:cf:7c:84:1f:04:b2:12:66:5a:e7:
                    e1:49:fe:03:e5:1e:72:49:52:39:b8:3e:c4:97:96:
                    d5:94:43:1b:90:47:16:e6:d3:dd:ba:2c:9c:38:d7:
                    76:fc:73:01:a8:0a:23:88:7c:d6:bf:56:b9:da:fe:
                    0c:28:d0:77:bc:ff:39:57:10:4c:f6:24:9b:5b:17:
                    c7:b1:74:4c:45:a5:ea:1c:98:ed:b4:83:9d:c4:2d:
                    a9:6d:99:6d:3a:c8:b4:6f:e8:4d:38:be:86:84:76:
                    b5:6e:aa:20:30:18:f2:f0:55:e0:9d:5c:a2:8e:8a:
                    82:48:2f:01:d0:cd:c5:f6:c0:6e:6e:ea:1e:78:c9:
                    cf:97:33:56:66:5b:f3:68:e2:0b:cf:ed:36:6b:51:
                    de:43:cc:f1:9a:05:15:eb:94:59:d0:e8:b0:7b:41:
                    67:11:88:76:51:43:8c:34:e4:4a:a2:9f:62:e4:e0:
                    d0:85:3f:22:1f:b1:81:0f:4f:c3:2e:ca:2c:a4:2e:
                    a1:19:d2:bf:d3:8b:e2:fb:3f:90:db:c4:72:ff:7b:
                    ad:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:47:66:E6:AB:EA:CD:73:3B:14:FA:84:4C:D3:02:BF:64:DE:33:DE
            X509v3 Authority Key Identifier:
                keyid:C1:02:07:7C:6F:F7:30:22:8C:02:F1:F6:C6:79:7A:5C:C1:C2:A5:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzmPeA18ZcSPaKJvGcxCRyfpFXdC6FmnpZY4gsZDVgdQ/0/C102077C6FF730228C02F1F6C6797A5CC1C2A5C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C102077C6FF730228C02F1F6C6797A5CC1C2A5C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzmPeA18ZcSPaKJvGcxCRyfpFXdC6FmnpZY4gsZDVgdQ/0/323830343a366234343a3a2f33322d3438203d3e20323730333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b44::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:39:e2:8b:7c:02:2b:37:a2:e3:c6:ec:77:12:43:7d:85:61:
         f4:36:11:a1:2d:2f:8f:83:82:8c:a7:eb:dd:35:f1:48:98:12:
         d6:f2:fd:71:68:15:40:c2:21:f5:ea:7b:59:18:6f:1c:65:20:
         04:21:0c:e3:9e:e0:c7:4e:aa:0c:7a:23:57:cf:ea:8d:16:0b:
         04:17:73:ac:f6:29:34:b3:e4:08:b1:e5:e9:24:1e:1f:77:df:
         89:28:44:59:e7:2f:28:c0:82:05:66:4b:e2:45:64:04:70:45:
         24:99:e3:b7:54:3a:da:5a:d5:92:f7:0f:31:bc:02:53:b8:3b:
         dc:4f:0e:3a:69:63:cd:2a:e7:a0:f4:af:73:ba:e0:64:60:2d:
         11:f2:98:8b:6a:df:12:ef:4f:a6:f4:e7:d5:14:a0:c5:1e:e5:
         76:3a:19:8c:61:ef:b0:59:21:2b:ec:69:2c:b1:ff:f3:a0:94:
         af:fd:bf:4f:f7:4e:92:f3:77:2f:15:55:dd:76:a3:45:ee:a5:
         d3:38:a6:17:93:dd:99:00:13:4a:2e:6c:f4:ad:ab:88:a0:a2:
         71:a7:24:fe:05:4a:ad:40:65:4f:65:f3:e3:ad:07:77:cf:59:
         48:bf:e8:4f:91:7b:ab:3b:da:02:10:95:55:d8:52:e0:11:ce:
         db:8a:2b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:50 2025 by rpki-client