Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a373030303a3a2f34362d3436203d3e20323634343232.roa
File:                     323830343a316535383a373030303a3a2f34362d3436203d3e20323634343232.roa (raw, json)
Hash identifier:          dtoAC3QyB3B3f2yT+H6zQuuzFYi8hGfbiaGOiAUTn9k=
Subject key identifier:   0B:F5:37:DA:D2:B1:2B:70:DE:86:BD:58:9E:AA:BC:D0:49:1A:9D:C7
Certificate issuer:       /CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
Certificate serial:       4F1F2515C95FE21D652C2F1966F30663000220DC
Authority key identifier: 3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a373030303a3a2f34362d3436203d3e20323634343232.roa
Signing time:             Tue 01 Jul 2025 22:46:20 +0000
ROA not before:           Tue 01 Jul 2025 22:41:20 +0000
ROA not after:            Tue 30 Jun 2026 22:46:20 +0000
asID:                     264422
IP address blocks:        2804:1e58:7000::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 06:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:1f:25:15:c9:5f:e2:1d:65:2c:2f:19:66:f3:06:63:00:02:20:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
        Validity
            Not Before: Jul  1 22:41:20 2025 GMT
            Not After : Jun 30 22:46:20 2026 GMT
        Subject: CN=0BF537DAD2B12B70DE86BD589EAABCD0491A9DC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9d:c8:09:78:dc:96:dc:56:50:70:c6:8c:4b:
                    c4:08:a1:97:12:08:8a:ac:07:74:d8:2b:29:16:d5:
                    e4:3c:db:de:a1:82:2a:f2:27:c3:e7:1c:69:8c:8d:
                    c6:8c:4d:1c:55:43:15:de:b8:b5:c8:00:6b:7b:f2:
                    86:8d:cb:03:77:3d:65:d9:4c:4f:0c:16:e9:cb:6f:
                    7a:45:9d:09:8b:f2:06:b9:17:0f:5e:e2:9b:23:9f:
                    d9:5a:8c:a8:35:b6:67:f7:12:82:d5:75:8e:52:d0:
                    1f:71:4e:57:5c:e0:51:04:aa:29:71:43:94:97:93:
                    07:52:05:95:05:37:d6:ce:81:cf:b7:1c:7d:42:e9:
                    a5:c2:d0:25:b4:28:3e:3c:97:dd:c9:7b:02:d6:29:
                    70:58:0a:7c:76:96:dc:d1:de:1b:76:7c:30:d7:13:
                    a4:70:ff:8e:c4:25:22:1d:0f:98:19:a3:fb:f3:7d:
                    44:ab:ba:e6:d8:e8:30:b5:13:05:90:cf:e0:c3:a7:
                    76:0f:6a:b2:c7:c6:8f:28:3d:23:a9:ae:bc:ef:31:
                    53:9e:14:e7:72:44:32:ce:0a:2f:8a:67:24:8a:1e:
                    97:bc:43:15:98:e5:de:79:b4:3e:32:b8:e5:ad:66:
                    88:03:a6:e0:d8:04:f3:d9:46:e5:af:89:3f:24:47:
                    10:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F5:37:DA:D2:B1:2B:70:DE:86:BD:58:9E:AA:BC:D0:49:1A:9D:C7
            X509v3 Authority Key Identifier:
                keyid:3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a373030303a3a2f34362d3436203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:7000::/46

    Signature Algorithm: sha256WithRSAEncryption
         82:cb:d4:b2:29:67:65:10:6c:1b:9d:bd:25:b0:f3:e5:68:4c:
         7e:5b:8a:4e:e7:6b:b6:b6:11:22:93:89:aa:89:8b:40:6f:c4:
         a3:b5:72:14:7c:37:c8:43:f3:e3:89:b8:e3:99:df:d0:f2:28:
         ee:9a:20:8d:3f:7c:df:01:d6:13:8f:8f:60:df:01:2a:0a:52:
         b6:63:a2:c0:79:33:5e:9d:f2:3c:18:57:e6:17:57:12:41:d3:
         9f:8b:cc:5c:0a:a5:c8:06:5f:3f:b8:66:44:8a:ea:e7:c1:94:
         0c:b2:7b:c2:a3:ed:07:ef:2b:8f:34:51:31:1e:fb:7e:03:f0:
         b2:27:07:a5:9c:a5:d0:b8:bb:63:2f:39:d3:e6:4c:89:a8:77:
         26:44:70:60:51:54:5e:85:cb:3f:9b:29:59:a2:dd:6a:65:6e:
         eb:a6:30:fb:2c:eb:4b:f1:e2:aa:09:0d:75:41:20:5c:6a:a0:
         d8:c9:24:46:35:d0:7e:e1:a8:11:e6:6a:e6:ea:5f:68:84:4c:
         e7:ed:7d:69:a7:6e:2f:80:5e:b3:03:94:2f:82:8e:d4:85:c7:
         1c:50:9c:f6:3f:06:c2:03:25:ec:9b:d5:31:52:5b:ea:7c:66:
         9a:82:26:02:3e:af:4a:5c:1d:10:ef:dc:80:e9:28:4f:30:ab:
         f5:e3:36:b0
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUTx8lFclf4h1lLC8ZZvMGYwACINwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0VEOTk3QUUwRUI3MTc2Q0E4RkIyRjREMzlGQzZENUE5
N0FCRTQxRTAeFw0yNTA3MDEyMjQxMjBaFw0yNjA2MzAyMjQ2MjBaMDMxMTAvBgNV
BAMTKDBCRjUzN0RBRDJCMTJCNzBERTg2QkQ1ODlFQUFCQ0QwNDkxQTlEQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOncgJeNyW3FZQcMaMS8QIoZcS
CIqsB3TYKykW1eQ8296hgiryJ8PnHGmMjcaMTRxVQxXeuLXIAGt78oaNywN3PWXZ
TE8MFunLb3pFnQmL8ga5Fw9e4psjn9lajKg1tmf3EoLVdY5S0B9xTldc4FEEqilx
Q5SXkwdSBZUFN9bOgc+3HH1C6aXC0CW0KD48l93JewLWKXBYCnx2ltzR3ht2fDDX
E6Rw/47EJSIdD5gZo/vzfUSruubY6DC1EwWQz+DDp3YParLHxo8oPSOprrzvMVOe
FOdyRDLOCi+KZySKHpe8QxWY5d55tD4yuOWtZogDpuDYBPPZRuWviT8kRxBnAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUC/U32tKxK3Dehr1Ynqq80EkanccwHwYDVR0j
BBgwFoAUPtmXrg63F2yo+y9NOfxtWper5B4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnRTTXdHdk1ZdWRlUUd0dGtQMWNEdDVEUUdQclNna0J2aHdZemZGd3N2
dkQvMC8zRUQ5OTdBRTBFQjcxNzZDQThGQjJGNEQzOUZDNkQ1QTk3QUJFNDFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFRDk5N0FFMEVCNzE3NkNB
OEZCMkY0RDM5RkM2RDVBOTdBQkU0MUUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ0U013R3ZNWXVkZVFHdHRrUDFjRHQ1RFFHUHJTZ2tCdmh3WXpmRndzdnZELzAv
MzIzODMwMzQzYTMxNjUzNTM4M2EzNzMwMzAzMDNhM2EyZjM0MzYyZDM0MzYyMDNk
M2UyMDMyMzYzNDM0MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAigEHlhwADANBgkqhkiG9w0BAQsF
AAOCAQEAgsvUsilnZRBsG529JbDz5WhMfluKTudrtrYRIpOJqomLQG/Eo7VyFHw3
yEPz44m445nf0PIo7pogjT983wHWE4+PYN8BKgpStmOiwHkzXp3yPBhX5hdXEkHT
n4vMXAqlyAZfP7hmRIrq58GUDLJ7wqPtB+8rjzRRMR77fgPwsicHpZyl0Li7Yy85
0+ZMiah3JkRwYFFUXoXLP5spWaLdamVu66Yw+yzrS/HiqgkNdUEgXGqg2MkkRjXQ
fuGoEeZq5upfaIRM5+19aaduL4BeswOUL4KO1IXHHFCc9j8GwgMl7JvVMVJb6nxm
moImAj6vSlwdEO/cgOkoTzCr9eM2sA==
-----END CERTIFICATE-----
Generated at Sat Jul 12 12:26:18 2025 by rpki-client