Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a383030303a3a2f33362d3336203d3e20323632343438.roa
File:                     323830343a6234343a383030303a3a2f33362d3336203d3e20323632343438.roa (raw, json)
Hash identifier:          Vaj6w6tyGypGM3kmCm8raNIuLfv6g/sfsy/DvY2DrBU=
Subject key identifier:   06:51:CE:C6:C4:36:6F:75:D2:DE:39:17:AF:80:4D:B0:0D:9E:8D:FD
Certificate issuer:       /CN=4F10D220B7D557A965AE8B26DDEB1BDDB166AE97
Certificate serial:       5FC10981F08FB6BF02BEBD1EA4AA63C687202FDD
Authority key identifier: 4F:10:D2:20:B7:D5:57:A9:65:AE:8B:26:DD:EB:1B:DD:B1:66:AE:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a383030303a3a2f33362d3336203d3e20323632343438.roa
Signing time:             Mon 11 Aug 2025 22:52:45 +0000
ROA not before:           Mon 11 Aug 2025 22:47:45 +0000
ROA not after:            Mon 10 Aug 2026 22:52:45 +0000
asID:                     262448
IP address blocks:        2804:b44:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.crl
                          rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 04:52:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c1:09:81:f0:8f:b6:bf:02:be:bd:1e:a4:aa:63:c6:87:20:2f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F10D220B7D557A965AE8B26DDEB1BDDB166AE97
        Validity
            Not Before: Aug 11 22:47:45 2025 GMT
            Not After : Aug 10 22:52:45 2026 GMT
        Subject: CN=0651CEC6C4366F75D2DE3917AF804DB00D9E8DFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:46:48:12:3d:3c:bc:3c:0a:dc:c9:ee:9a:01:
                    e0:e0:ac:43:99:0a:63:0f:15:f5:12:82:ab:0f:dd:
                    7e:50:3d:2c:a0:d7:6c:28:0c:9f:70:ea:36:16:1a:
                    8e:a0:8d:f5:e0:03:52:d4:6a:ca:24:3b:9e:49:e2:
                    64:58:7d:a6:af:b5:37:49:31:49:8f:ac:d9:75:98:
                    5d:9f:c8:b8:ab:fe:f9:3f:b6:19:b1:96:3a:8a:fb:
                    5d:6e:1e:99:de:52:80:1f:66:12:c3:45:ec:88:26:
                    20:0e:b9:4d:9c:bf:1f:61:52:32:8d:6c:05:3c:cb:
                    f0:a3:05:45:5c:6f:ef:b7:34:e8:2a:0e:fc:ab:d7:
                    45:02:05:06:36:54:41:85:04:06:4b:10:0c:28:76:
                    50:5e:8d:28:83:f5:1e:5b:14:e4:66:f2:83:d0:1c:
                    05:77:f9:1a:3b:69:d1:8f:49:59:97:78:40:75:f1:
                    66:f0:47:2c:f1:1c:d2:51:fa:18:0a:0e:25:20:b2:
                    eb:05:93:54:88:44:ef:9a:cf:b7:32:2f:c9:c8:d7:
                    69:40:f7:88:af:2d:6e:83:c4:0a:1f:26:4a:6f:ea:
                    a3:8a:72:43:dd:0e:6c:58:cd:67:39:2a:13:44:fc:
                    8d:ea:c3:91:93:2a:d8:d3:7c:a7:f8:65:e1:b5:02:
                    12:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:51:CE:C6:C4:36:6F:75:D2:DE:39:17:AF:80:4D:B0:0D:9E:8D:FD
            X509v3 Authority Key Identifier:
                keyid:4F:10:D2:20:B7:D5:57:A9:65:AE:8B:26:DD:EB:1B:DD:B1:66:AE:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/323830343a6234343a383030303a3a2f33362d3336203d3e20323632343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b44:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2a:ac:ad:13:9e:03:f7:c0:1c:46:26:e5:13:40:29:59:06:b7:
         93:1d:eb:d1:f3:58:53:fc:6e:9f:23:fa:e5:eb:06:7f:18:4f:
         b3:d9:e6:91:db:2f:fe:c1:a3:ca:72:5c:91:5d:eb:fa:11:30:
         82:56:8c:30:1e:d9:69:19:d2:5a:8a:dd:dd:f5:8d:a5:0b:bc:
         35:56:d5:8d:75:c5:84:32:56:3a:0f:5e:68:e1:8e:50:be:56:
         7d:05:35:2d:3b:f1:88:3a:7a:d5:9c:61:d6:c1:ad:c5:f2:1e:
         c6:21:6a:6f:a7:6b:10:a9:3c:d3:fc:9d:9a:b8:1e:e2:e8:aa:
         c1:59:fb:0a:43:76:54:f6:e4:3d:76:ec:00:bd:16:e2:62:a2:
         9d:a6:f5:d9:0b:fc:91:a2:0c:40:45:3c:bb:5c:f2:90:fb:42:
         74:db:a1:28:a5:f8:3e:1a:7c:38:cd:8d:c7:f7:7d:e1:cf:1e:
         42:ca:7f:89:b1:fc:1b:73:f2:a7:94:fa:2a:e7:72:c4:5e:11:
         ea:0c:04:b2:11:6f:91:86:e9:f7:1a:c5:ee:cb:10:79:a9:06:
         ae:8e:a6:6e:e8:69:79:12:66:9d:a8:ac:a2:c9:c8:32:b0:f7:
         47:05:ac:64:50:74:e6:9f:00:4d:4b:15:f3:5c:c2:8b:be:15:
         65:9b:55:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUX8EJgfCPtr8Cvr0epKpjxocgL90wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEYxMEQyMjBCN0Q1NTdBOTY1QUU4QjI2RERFQjFCRERC
MTY2QUU5NzAeFw0yNTA4MTEyMjQ3NDVaFw0yNjA4MTAyMjUyNDVaMDMxMTAvBgNV
BAMTKDA2NTFDRUM2QzQzNjZGNzVEMkRFMzkxN0FGODA0REIwMEQ5RThERkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkRkgSPTy8PArcye6aAeDgrEOZ
CmMPFfUSgqsP3X5QPSyg12woDJ9w6jYWGo6gjfXgA1LUasokO55J4mRYfaavtTdJ
MUmPrNl1mF2fyLir/vk/thmxljqK+11uHpneUoAfZhLDReyIJiAOuU2cvx9hUjKN
bAU8y/CjBUVcb++3NOgqDvyr10UCBQY2VEGFBAZLEAwodlBejSiD9R5bFORm8oPQ
HAV3+Ro7adGPSVmXeEB18WbwRyzxHNJR+hgKDiUgsusFk1SIRO+az7cyL8nI12lA
94ivLW6DxAofJkpv6qOKckPdDmxYzWc5KhNE/I3qw5GTKtjTfKf4ZeG1AhI/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUBlHOxsQ2b3XS3jkXr4BNsA2ejf0wHwYDVR0j
BBgwFoAUTxDSILfVV6llrosm3esb3bFmrpcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3ZQYU1FZlBXOFl1WXpHTFYxTXR1U3dwNUw0Skhuc3FiWmdXNG9FWkpN
Uk0vMC80RjEwRDIyMEI3RDU1N0E5NjVBRThCMjZEREVCMUJEREIxNjZBRTk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGMTBEMjIwQjdENTU3QTk2
NUFFOEIyNkRERUIxQkREQjE2NkFFOTcuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d2UGFNRWZQVzhZdVl6R0xWMU10dVN3cDVMNEpIbnNxYlpnVzRvRVpKTVJNLzAv
MzIzODMwMzQzYTYyMzQzNDNhMzgzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl
MjAzMjM2MzIzNDM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBAtEgDANBgkqhkiG9w0BAQsFAAOC
AQEAKqytE54D98AcRiblE0ApWQa3kx3r0fNYU/xunyP65esGfxhPs9nmkdsv/sGj
ynJckV3r+hEwglaMMB7ZaRnSWord3fWNpQu8NVbVjXXFhDJWOg9eaOGOUL5WfQU1
LTvxiDp61Zxh1sGtxfIexiFqb6drEKk80/ydmrge4uiqwVn7CkN2VPbkPXbsAL0W
4mKinab12Qv8kaIMQEU8u1zykPtCdNuhKKX4Php8OM2Nx/d94c8eQsp/ibH8G3Py
p5T6KudyxF4R6gwEshFvkYbp9xrF7ssQeakGro6mbuhpeRJmnaisosnIMrD3RwWs
ZFB05p8ATUsV81zCi74VZZtVnw==
-----END CERTIFICATE-----
Generated at Wed Aug 20 20:19:27 2025 by rpki-client