Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a313a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a313a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          GdhIlpYKnDqkJ19wep5Y71Ic6cYI/Zctaq10E/Epqv4=
Subject key identifier:   51:5B:6A:9E:09:D6:32:B6:B9:CC:D9:6C:9A:82:AD:DD:EA:F0:06:32
Certificate issuer:       /CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
Certificate serial:       14120C342628279D5BFC5C1C0131A20708D41313
Authority key identifier: 3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a313a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Tue 01 Jul 2025 22:46:26 +0000
ROA not before:           Tue 01 Jul 2025 22:41:26 +0000
ROA not after:            Tue 30 Jun 2026 22:46:26 +0000
asID:                     264422
IP address blocks:        2804:1e58:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 06:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:12:0c:34:26:28:27:9d:5b:fc:5c:1c:01:31:a2:07:08:d4:13:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
        Validity
            Not Before: Jul  1 22:41:26 2025 GMT
            Not After : Jun 30 22:46:26 2026 GMT
        Subject: CN=515B6A9E09D632B6B9CCD96C9A82ADDDEAF00632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ae:41:15:33:ab:75:fe:58:1d:53:2b:e7:42:
                    1b:03:e2:c1:a8:88:1d:f6:e8:b6:a5:77:42:4c:2c:
                    61:f6:27:45:cc:f7:eb:d0:86:ae:3b:07:d9:e4:22:
                    9c:f8:99:d3:a4:f5:c8:b5:77:de:45:5a:2a:c8:d2:
                    69:42:78:a3:b0:77:f8:23:eb:77:49:af:19:01:85:
                    69:81:77:52:98:48:79:57:2c:96:be:2a:98:52:5e:
                    aa:d8:10:4d:38:28:97:f5:bb:19:8a:e0:43:39:f0:
                    bb:63:c5:d2:6c:4c:96:03:2f:6f:3e:27:08:f9:3a:
                    18:42:2b:c6:95:75:f8:ff:43:70:8a:8b:2e:03:45:
                    3f:3a:2a:ef:63:30:df:9c:b8:a2:73:13:9b:bf:83:
                    18:73:aa:99:21:37:03:50:d4:30:7c:e9:78:6a:f4:
                    76:b5:c1:3a:16:ad:8c:7d:61:ac:40:65:55:15:ff:
                    fb:06:86:50:b3:f1:6c:fb:e5:2e:43:d3:12:c3:7b:
                    8a:c1:c5:0f:65:10:3e:12:0e:43:69:95:aa:63:c8:
                    f7:bd:12:e7:6b:d7:6c:b2:e4:5b:f2:a4:d7:1b:32:
                    2b:1a:92:bb:b9:7d:92:da:35:e1:ca:6a:ab:7e:ba:
                    20:9c:e3:9c:be:7d:ee:fb:fa:41:23:aa:92:1e:74:
                    48:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5B:6A:9E:09:D6:32:B6:B9:CC:D9:6C:9A:82:AD:DD:EA:F0:06:32
            X509v3 Authority Key Identifier:
                keyid:3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a313a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         c4:f3:65:a6:e5:ae:92:7a:be:65:05:1b:72:9e:d8:54:c6:b2:
         6c:ab:ad:50:1c:fb:b1:9b:7d:ef:ed:d9:53:c7:bd:8f:e6:8c:
         23:40:62:c4:df:d2:f9:41:5d:42:9a:30:68:55:ae:cb:7b:6e:
         dc:31:e2:0d:38:cd:95:62:30:2c:9b:98:57:8a:a6:37:cd:55:
         4e:fd:7b:37:1d:ba:30:ea:7f:48:6a:87:a2:c3:cc:c3:e9:7c:
         76:1e:83:0b:c3:85:41:42:cc:e4:c7:4c:7e:35:2a:d8:e7:e1:
         3e:4d:eb:54:52:af:80:8a:4e:4c:8d:7a:2b:27:ba:25:a3:0d:
         a1:5d:13:ec:81:8d:dc:64:64:12:b7:5f:44:ae:d5:10:c3:97:
         d3:b5:a6:c4:fe:48:6f:ac:dc:30:11:8c:c0:6a:3a:4d:a1:13:
         49:ab:b1:8a:04:08:62:71:02:e5:dd:55:ec:31:28:3b:af:07:
         64:6e:83:e9:ab:6d:fa:ad:fe:62:14:c2:0e:e8:15:09:93:aa:
         f3:5d:40:e5:04:f0:73:eb:3f:f3:be:2f:59:d1:70:a5:92:51:
         e5:d2:a0:94:0a:49:6d:71:05:a6:05:1f:19:31:30:89:24:11:
         39:08:21:28:d0:a4:83:ca:12:a8:b9:a0:82:af:f2:fe:14:ec:
         c6:c5:e9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 08:25:24 2025 by rpki-client