Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a353030303a3a2f33362d3336203d3e20323632343438.roa
File:                     323830343a6234343a353030303a3a2f33362d3336203d3e20323632343438.roa (raw, json)
Hash identifier:          GbVC1258oNKAZG+r6udJdOp1Ev/mPmeRvmy4vWHVMYU=
Subject key identifier:   D1:D6:0C:A3:4D:A8:80:33:43:B7:3C:B3:BC:E7:88:D7:F8:84:C2:CC
Certificate issuer:       /CN=4F10D220B7D557A965AE8B26DDEB1BDDB166AE97
Certificate serial:       4F28CF44B9815F5ECA500D534F79795A4AFC91B7
Authority key identifier: 4F:10:D2:20:B7:D5:57:A9:65:AE:8B:26:DD:EB:1B:DD:B1:66:AE:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a353030303a3a2f33362d3336203d3e20323632343438.roa
Signing time:             Mon 11 Aug 2025 22:52:56 +0000
ROA not before:           Mon 11 Aug 2025 22:47:56 +0000
ROA not after:            Mon 10 Aug 2026 22:52:56 +0000
asID:                     262448
IP address blocks:        2804:b44:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.crl
                          rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 04:52:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:28:cf:44:b9:81:5f:5e:ca:50:0d:53:4f:79:79:5a:4a:fc:91:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F10D220B7D557A965AE8B26DDEB1BDDB166AE97
        Validity
            Not Before: Aug 11 22:47:56 2025 GMT
            Not After : Aug 10 22:52:56 2026 GMT
        Subject: CN=D1D60CA34DA8803343B73CB3BCE788D7F884C2CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:50:46:20:9c:b9:fb:d7:4e:47:96:01:b0:7d:
                    c5:e1:3f:0b:fd:de:eb:3d:d3:ff:59:42:69:fb:97:
                    08:4d:7f:7e:88:fd:1b:ad:0f:1e:06:da:c6:dd:f4:
                    4a:a8:b8:cf:b0:51:18:57:7c:00:01:58:1b:61:b3:
                    f4:b6:df:94:a1:5f:f2:8d:5d:6e:a1:e6:bd:ac:2f:
                    87:0d:b5:b8:d6:e7:d8:ba:3c:57:01:b3:fa:62:e2:
                    99:f7:5a:01:86:ae:ba:43:cf:6a:26:a4:44:e8:e2:
                    c3:1d:18:03:4a:6f:8c:dc:a5:dc:fa:43:d6:bc:aa:
                    5c:b6:3a:b2:c0:79:60:c1:80:0e:1d:e1:bb:97:ed:
                    61:fc:1f:3c:38:f0:48:2a:f0:37:44:f9:a5:47:e5:
                    9f:d8:e8:53:c8:91:94:53:ec:53:50:c3:c9:11:a3:
                    3d:5a:37:e1:c9:6b:d1:6a:29:23:aa:96:fb:b4:ef:
                    ad:3e:b3:5a:70:d8:8a:b8:11:75:98:c5:5d:33:f0:
                    13:d8:c9:51:09:33:7e:ea:af:8a:30:98:e3:a1:e7:
                    2d:9c:01:d3:d0:57:08:db:19:03:0f:6a:48:30:c0:
                    c8:81:ba:29:fc:6f:82:4b:f8:07:00:f5:1a:15:93:
                    b4:b7:81:d4:4c:f3:e7:dd:d2:d8:5e:8f:80:5f:fb:
                    2c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D6:0C:A3:4D:A8:80:33:43:B7:3C:B3:BC:E7:88:D7:F8:84:C2:CC
            X509v3 Authority Key Identifier:
                keyid:4F:10:D2:20:B7:D5:57:A9:65:AE:8B:26:DD:EB:1B:DD:B1:66:AE:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a353030303a3a2f33362d3336203d3e20323632343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b44:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a0:8e:cb:24:75:c6:d5:5a:1e:c9:84:53:5a:cb:b5:e3:96:1f:
         32:83:93:ef:99:21:cf:89:87:60:ad:62:a9:2e:8a:73:ac:d8:
         ef:a6:89:2b:a2:29:eb:0e:4c:18:ca:a8:fc:0a:6b:8c:4d:8d:
         2f:63:78:0d:65:62:ee:ee:50:2b:87:77:d7:6e:35:a9:6d:59:
         3b:7a:0f:f7:cc:29:89:24:64:a6:87:25:fd:c9:a7:4c:56:4e:
         43:a1:f4:04:1d:4e:df:50:cc:ef:6c:e3:1f:78:c8:64:73:87:
         12:e4:52:91:a7:92:e8:82:0e:67:2a:5c:a1:8a:17:fc:70:a5:
         51:f3:43:cf:bc:7b:cf:12:09:17:66:ea:db:3d:42:37:ed:84:
         3a:fb:4b:47:70:70:e1:d7:8d:01:93:2d:5f:4e:89:11:ff:76:
         8f:31:1d:3c:26:ab:d0:5f:63:5b:4a:ee:fe:e0:a9:06:58:25:
         a9:d1:0f:67:43:b8:68:7e:ba:3b:f8:0a:98:42:6d:94:93:55:
         15:af:f7:ad:e5:4e:dc:72:21:c5:ae:3f:dd:f5:67:ca:8b:fa:
         38:fe:d9:54:a0:34:71:6f:66:c4:5a:5a:66:54:59:70:03:c7:
         d2:3f:9c:41:81:e2:3a:71:60:32:74:0b:d8:55:71:28:fc:4c:
         90:8f:af:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 20:16:32 2025 by rpki-client