Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/323830343a336234383a3a2f33322d3438203d3e203532353931.roa
File:                     323830343a336234383a3a2f33322d3438203d3e203532353931.roa (raw, json)
Hash identifier:          ztod6gQnMlXKa1/Rc35p3m523y2Rc1FKD5KkcDBAnpk=
Subject key identifier:   C3:38:3E:0B:1D:CB:7A:8F:9E:E1:2D:06:BF:90:28:98:54:49:4D:13
Certificate issuer:       /CN=6F3C98FD5109294099E4EDEB68BB62F2EEA4F181
Certificate serial:       57364ECF204D2BBBC0A7EE06478EBA24148AD661
Authority key identifier: 6F:3C:98:FD:51:09:29:40:99:E4:ED:EB:68:BB:62:F2:EE:A4:F1:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F3C98FD5109294099E4EDEB68BB62F2EEA4F181.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/323830343a336234383a3a2f33322d3438203d3e203532353931.roa
Signing time:             Mon 28 Jul 2025 13:34:08 +0000
ROA not before:           Mon 28 Jul 2025 13:29:08 +0000
ROA not after:            Mon 27 Jul 2026 13:34:08 +0000
asID:                     52591
IP address blocks:        2804:3b48::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/6F3C98FD5109294099E4EDEB68BB62F2EEA4F181.crl
                          rsync://rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/6F3C98FD5109294099E4EDEB68BB62F2EEA4F181.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F3C98FD5109294099E4EDEB68BB62F2EEA4F181.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 13:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:36:4e:cf:20:4d:2b:bb:c0:a7:ee:06:47:8e:ba:24:14:8a:d6:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F3C98FD5109294099E4EDEB68BB62F2EEA4F181
        Validity
            Not Before: Jul 28 13:29:08 2025 GMT
            Not After : Jul 27 13:34:08 2026 GMT
        Subject: CN=C3383E0B1DCB7A8F9EE12D06BF90289854494D13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ec:ef:5d:14:d1:d9:d3:2a:4f:97:ef:9b:30:
                    03:1d:31:79:5f:f7:e6:8a:85:de:91:51:c6:0a:a9:
                    e3:68:e9:32:d0:2f:67:83:5f:2a:ef:e6:64:04:87:
                    75:06:a3:3c:37:b5:7e:d1:74:e9:d5:f7:07:6d:61:
                    c9:59:74:bc:76:f6:90:52:ef:2d:b9:b0:8c:b7:6a:
                    6a:e2:2d:56:a9:5d:97:db:23:21:29:a8:5b:a9:4f:
                    0e:31:97:3d:42:c1:c6:50:0c:c7:e0:8f:30:5c:dd:
                    c1:50:8d:8c:30:42:36:51:56:e2:38:7e:b1:bb:b5:
                    4a:1d:c8:fa:94:a8:1c:3c:63:53:0b:6f:4f:8d:23:
                    14:f1:b1:99:a8:f8:73:49:99:9c:af:6f:3d:5a:17:
                    ee:9b:ec:ee:b6:51:70:15:27:dd:c1:6c:bd:2b:fd:
                    ee:9a:3c:72:13:57:e8:b3:eb:e7:7c:28:63:fb:b6:
                    64:28:1c:6e:be:34:98:18:16:e6:9d:b9:80:47:6b:
                    6d:0b:88:0e:d0:bf:e5:eb:4a:a0:ca:39:b1:01:50:
                    fd:5c:46:a6:28:0e:ce:e0:b1:61:b5:33:4f:b2:2a:
                    76:9e:5f:23:21:6a:c0:7a:2d:27:0c:f8:30:c6:3b:
                    00:ed:b3:cf:6c:d6:e1:5b:a3:24:23:3e:73:33:7e:
                    d3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:38:3E:0B:1D:CB:7A:8F:9E:E1:2D:06:BF:90:28:98:54:49:4D:13
            X509v3 Authority Key Identifier:
                keyid:6F:3C:98:FD:51:09:29:40:99:E4:ED:EB:68:BB:62:F2:EE:A4:F1:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/6F3C98FD5109294099E4EDEB68BB62F2EEA4F181.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F3C98FD5109294099E4EDEB68BB62F2EEA4F181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/323830343a336234383a3a2f33322d3438203d3e203532353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b48::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:ed:6d:66:17:bd:c2:6a:42:9f:d0:1a:fe:2f:cc:63:65:43:
         75:6e:83:e7:18:b4:f8:ee:17:e0:9c:4c:96:ee:d5:a5:ed:7f:
         bb:38:5b:c6:5b:6d:5d:00:18:63:dc:3d:86:70:a2:75:16:d5:
         6e:00:29:b9:95:af:32:6c:ce:8a:e5:d0:fd:e5:1e:ff:91:49:
         46:b2:ab:f3:88:35:bf:cf:1b:08:e7:7e:9b:fc:17:38:e9:9c:
         29:aa:ed:8c:10:54:2b:ef:01:ad:db:c2:c8:fd:fa:c3:d5:52:
         e0:53:53:e0:ed:f2:2b:8c:dc:e0:20:55:55:03:1c:8d:f5:74:
         5f:02:19:95:ac:85:5c:19:0f:14:f0:a6:c3:54:35:01:8f:eb:
         0e:a3:c5:a9:28:e1:c5:42:00:b9:80:1f:c7:4f:1f:b4:4a:32:
         01:8b:cd:c2:8c:8b:45:65:3b:22:3e:27:13:9f:f5:67:b3:96:
         9d:a7:cc:7f:ed:82:3f:d9:a0:e4:5e:8e:5e:32:cf:e2:a8:cd:
         06:82:36:eb:7f:2d:ab:0f:8d:4f:c7:ea:5d:cb:b1:65:f3:69:
         8a:19:41:c5:ee:9e:8c:c8:02:c0:26:bf:f8:d2:b9:a2:e1:a5:
         79:42:fc:ef:de:ae:4c:42:8c:70:e7:f8:df:19:0a:51:be:ad:
         af:91:8d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:17:02 2025 by rpki-client