Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a373030313a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a373030313a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          rY8ESjt1+ekBJQAI3poQItelDNSDWo8g5RptmmQPP/A=
Subject key identifier:   CF:FE:1C:98:43:F6:25:AE:22:C3:96:0E:C4:E3:34:DB:62:04:4B:97
Certificate issuer:       /CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
Certificate serial:       25C3E02B4DEEFFAB64863EB180CD147C4C985048
Authority key identifier: 3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a373030313a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Tue 01 Jul 2025 22:46:22 +0000
ROA not before:           Tue 01 Jul 2025 22:41:22 +0000
ROA not after:            Tue 30 Jun 2026 22:46:22 +0000
asID:                     264422
IP address blocks:        2804:1e58:7001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 06:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c3:e0:2b:4d:ee:ff:ab:64:86:3e:b1:80:cd:14:7c:4c:98:50:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
        Validity
            Not Before: Jul  1 22:41:22 2025 GMT
            Not After : Jun 30 22:46:22 2026 GMT
        Subject: CN=CFFE1C9843F625AE22C3960EC4E334DB62044B97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fb:ac:2e:35:dc:22:36:ff:3d:71:63:1b:12:
                    41:ec:74:b1:d5:18:c0:85:c4:e3:e4:f7:76:eb:17:
                    97:6b:55:cb:3f:d4:18:43:2a:7c:87:23:40:27:83:
                    09:23:24:4b:b8:14:da:5f:55:97:86:06:cc:d2:f5:
                    ec:37:cf:06:dc:69:5d:87:b3:02:2a:06:e4:48:56:
                    7e:e6:37:19:b8:41:c7:a6:d2:27:74:ad:36:62:d3:
                    12:61:66:9c:56:ba:42:1f:dc:cc:3b:5e:d7:d8:13:
                    c9:6e:b0:7f:57:41:c7:21:b4:cc:e7:e1:97:09:c9:
                    a0:aa:ec:d5:b4:d3:2a:fe:26:2b:93:ea:c4:45:81:
                    ae:54:d0:5a:33:35:0a:09:49:63:62:1c:ef:ac:5c:
                    5c:0a:cd:18:38:b7:a9:5b:12:c4:f2:5e:94:51:d5:
                    fd:57:d3:58:b4:af:1f:79:8c:ef:92:a3:29:3f:63:
                    4d:84:f8:30:ec:b1:74:1a:64:25:79:82:3f:88:e9:
                    0f:2b:48:42:50:cd:e3:89:d4:62:1c:c2:6b:b4:71:
                    9e:51:3e:e7:40:7e:12:99:c4:3f:44:91:8f:e1:92:
                    c7:27:24:98:b0:92:d0:db:6c:5e:9a:bb:36:aa:e4:
                    83:b3:98:25:d4:63:39:a0:82:c6:e4:a0:c1:27:84:
                    76:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FE:1C:98:43:F6:25:AE:22:C3:96:0E:C4:E3:34:DB:62:04:4B:97
            X509v3 Authority Key Identifier:
                keyid:3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a373030313a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:7001::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:6a:9f:1e:52:d0:b6:7c:7f:a6:48:49:35:16:39:2e:2a:8f:
         1c:f5:18:ed:31:28:6b:7e:3c:cc:2f:71:ba:32:a0:9e:0f:cf:
         4f:cb:15:9b:db:28:d5:f4:44:96:81:ff:e8:3e:87:69:a7:34:
         98:c0:24:22:00:63:7f:50:be:49:5c:2c:2f:11:2b:1e:8b:27:
         b8:b1:be:98:17:e1:f4:64:52:91:5a:fd:5f:a1:2e:e4:a6:07:
         a4:d9:da:ec:dc:12:86:29:47:6a:f4:8a:1a:5a:54:52:1e:8f:
         1a:0a:de:90:83:0a:f2:fa:0f:97:9f:98:00:ae:ba:8b:7d:17:
         53:dc:cc:88:56:de:ad:24:c8:1c:e7:e8:e8:6b:65:d5:de:2e:
         8e:31:84:1d:93:55:5e:ce:a4:e3:1e:93:70:5a:eb:a6:1d:cc:
         7c:aa:a8:32:6a:8a:a9:d7:59:09:da:cc:de:31:33:36:e3:7f:
         20:53:94:08:0c:1e:15:4c:60:0f:b9:71:d9:06:3a:df:42:17:
         75:25:c8:bc:8c:ab:b8:99:f2:15:f3:5b:bd:0a:91:42:34:d0:
         a2:0b:98:19:e5:bc:1d:9b:19:b4:54:3b:a5:e6:74:55:94:82:
         79:cd:7c:29:c8:fc:98:8a:c0:e1:7c:d6:da:c1:ab:40:d9:a2:
         31:13:a2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 08:32:55 2025 by rpki-client