Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6pkJd12NzyxnZPvRo7G4D3SJr7NB7TaxiQZWdgD9CN9T/1/323830343a3665343a3a2f33322d313238203d3e20323632363132.roa
File:                     323830343a3665343a3a2f33322d313238203d3e20323632363132.roa (raw, json)
Hash identifier:          pc1/ICOZJ33UCPCYR6YeB/YMfOHvkUk65zmJGuApLyg=
Subject key identifier:   4C:A6:44:6E:F7:AC:CF:AA:3C:EF:81:7C:0A:BA:5F:51:4B:AA:3A:5B
Certificate issuer:       /CN=F5169FC8B63F4CF854DC6074714395B0E7B87D37
Certificate serial:       17772B7569BE087D654377B3A8B4A666A53C66E7
Authority key identifier: F5:16:9F:C8:B6:3F:4C:F8:54:DC:60:74:71:43:95:B0:E7:B8:7D:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5169FC8B63F4CF854DC6074714395B0E7B87D37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6pkJd12NzyxnZPvRo7G4D3SJr7NB7TaxiQZWdgD9CN9T/1/323830343a3665343a3a2f33322d313238203d3e20323632363132.roa
Signing time:             Thu 03 Jul 2025 01:43:59 +0000
ROA not before:           Thu 03 Jul 2025 01:38:59 +0000
ROA not after:            Thu 02 Jul 2026 01:43:59 +0000
asID:                     262612
IP address blocks:        2804:6e4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6pkJd12NzyxnZPvRo7G4D3SJr7NB7TaxiQZWdgD9CN9T/1/F5169FC8B63F4CF854DC6074714395B0E7B87D37.crl
                          rsync://rpki-repo.registro.br/repo/6pkJd12NzyxnZPvRo7G4D3SJr7NB7TaxiQZWdgD9CN9T/1/F5169FC8B63F4CF854DC6074714395B0E7B87D37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5169FC8B63F4CF854DC6074714395B0E7B87D37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 00:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:77:2b:75:69:be:08:7d:65:43:77:b3:a8:b4:a6:66:a5:3c:66:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5169FC8B63F4CF854DC6074714395B0E7B87D37
        Validity
            Not Before: Jul  3 01:38:59 2025 GMT
            Not After : Jul  2 01:43:59 2026 GMT
        Subject: CN=4CA6446EF7ACCFAA3CEF817C0ABA5F514BAA3A5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a8:11:91:43:b6:cb:80:7f:85:fd:2b:0c:e4:
                    dc:39:18:02:46:86:d0:a8:54:22:f6:4d:7a:1d:8e:
                    f1:dd:6c:c3:f9:31:a2:59:ee:57:c2:7e:90:ac:63:
                    c1:fe:11:d1:4a:31:ba:7b:63:e8:d3:f9:1c:98:94:
                    34:18:2b:5d:74:c5:8c:4a:16:be:7a:48:73:9f:c4:
                    4b:4b:ca:be:dd:45:70:66:34:44:da:10:40:51:f9:
                    18:5d:74:1f:17:9d:0a:d5:34:07:bc:f3:11:51:8a:
                    c0:e5:61:99:af:7e:03:7b:b2:0f:60:8b:c9:4c:e4:
                    4d:31:54:2f:bf:42:69:dc:fd:fa:86:37:7a:1d:3a:
                    7d:0b:65:67:38:c7:7c:e3:9c:5f:ff:5e:00:9f:59:
                    cc:3a:16:e5:ac:29:fa:e7:85:36:77:b6:2e:c6:a3:
                    50:c5:f1:7c:02:43:6f:4a:f2:72:b8:f3:e7:8e:34:
                    f5:cf:cc:73:f5:6c:5b:6f:bb:f9:b5:d3:28:d2:f6:
                    8a:47:0f:65:7d:93:87:e7:f4:3a:b7:0f:a0:df:f3:
                    77:48:e9:8e:72:67:76:32:03:df:15:e0:e7:42:97:
                    64:b6:c5:87:43:a9:63:c1:ec:d4:e6:b3:fc:7f:e7:
                    b7:ff:2d:cb:b7:6e:7a:9f:44:fc:c7:0f:6a:78:f5:
                    97:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A6:44:6E:F7:AC:CF:AA:3C:EF:81:7C:0A:BA:5F:51:4B:AA:3A:5B
            X509v3 Authority Key Identifier:
                keyid:F5:16:9F:C8:B6:3F:4C:F8:54:DC:60:74:71:43:95:B0:E7:B8:7D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6pkJd12NzyxnZPvRo7G4D3SJr7NB7TaxiQZWdgD9CN9T/1/F5169FC8B63F4CF854DC6074714395B0E7B87D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5169FC8B63F4CF854DC6074714395B0E7B87D37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6pkJd12NzyxnZPvRo7G4D3SJr7NB7TaxiQZWdgD9CN9T/1/323830343a3665343a3a2f33322d313238203d3e20323632363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:60:2f:60:cc:72:fc:63:c0:48:d1:75:f4:65:ec:79:d3:b7:
         fd:f7:b7:42:a2:a7:7e:40:9a:5f:34:2a:d7:0e:92:ed:58:6c:
         ac:99:52:fe:ef:77:42:60:9c:fc:78:63:44:b9:07:88:af:e0:
         07:97:89:20:78:73:4c:c2:57:2c:fb:df:01:31:28:90:75:82:
         b5:bc:d0:44:8c:62:e7:28:ca:a2:38:9b:5f:74:de:93:4e:1a:
         49:66:24:b9:fd:9a:ee:cc:df:86:17:31:70:12:1d:64:52:ed:
         ba:d7:af:41:fc:0b:f0:6a:33:86:fb:71:c6:72:46:86:54:82:
         94:cb:16:07:1c:65:5c:d2:45:22:3b:06:e9:8a:08:65:e5:65:
         63:9d:70:3c:1d:d2:2f:96:5e:b6:d0:ed:c0:9e:6e:9d:77:e1:
         6b:e4:90:b2:ea:a8:b6:a9:71:25:82:62:6d:3d:46:49:20:82:
         db:5e:83:60:a0:6e:e5:cb:f0:95:07:b9:f7:6e:46:65:8b:73:
         e5:a7:50:be:75:e5:ac:63:f2:9f:7a:8d:b6:db:b6:08:00:cf:
         81:36:39:c8:70:7d:e9:9e:ab:13:70:d5:7d:dc:01:d3:f1:40:
         b0:c1:d1:44:ec:4a:19:01:ec:f2:21:d7:15:dc:68:53:a9:8f:
         50:c7:84:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:06:04 2025 by rpki-client