Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a373030323a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a373030323a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          TnNrORqQ5CWlr5UyC69Tn5Pkd23OyQGkcIPtanExsF8=
Subject key identifier:   1E:7D:96:5E:D4:8E:84:35:D9:4B:26:FF:6A:B7:70:56:61:9B:97:CA
Certificate issuer:       /CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
Certificate serial:       7703CE304A6736BA5384BA88AAF1990AE227E1CF
Authority key identifier: 3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a373030323a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Tue 01 Jul 2025 22:46:17 +0000
ROA not before:           Tue 01 Jul 2025 22:41:17 +0000
ROA not after:            Tue 30 Jun 2026 22:46:17 +0000
asID:                     264422
IP address blocks:        2804:1e58:7002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 06:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:03:ce:30:4a:67:36:ba:53:84:ba:88:aa:f1:99:0a:e2:27:e1:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
        Validity
            Not Before: Jul  1 22:41:17 2025 GMT
            Not After : Jun 30 22:46:17 2026 GMT
        Subject: CN=1E7D965ED48E8435D94B26FF6AB77056619B97CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:49:f6:42:41:bf:53:64:e3:63:6b:e8:31:73:
                    10:c9:2f:55:10:27:c2:be:df:c8:06:64:b0:71:5c:
                    70:69:48:f1:57:24:dc:bb:ab:5d:de:8c:28:03:b4:
                    84:49:9b:7f:fb:ba:39:00:57:f0:6a:f5:35:8b:85:
                    cc:f2:83:d2:50:72:e5:9b:9e:85:24:ed:a8:16:96:
                    3f:b4:7a:44:8f:98:05:86:a3:33:14:89:58:03:9e:
                    29:6a:3b:98:a9:78:9f:bd:f6:7a:db:6b:0f:17:c3:
                    ca:15:15:3e:cb:8a:8f:00:0a:0c:c9:fc:95:8a:79:
                    f2:9b:20:11:e1:0d:4e:93:30:6c:c9:31:1e:6f:5b:
                    fd:b9:5b:9d:d6:0f:ae:f2:1d:48:99:ea:db:4a:2c:
                    83:80:bd:b9:d6:52:c6:06:4e:3a:fb:f3:7a:d9:ac:
                    bf:0c:f6:0f:ce:26:01:c7:d0:97:1a:45:5c:35:33:
                    63:e3:c1:73:ac:45:85:ae:1a:25:60:bd:61:c1:44:
                    13:b5:9c:83:c9:2b:c6:3a:47:a1:17:16:54:bd:43:
                    71:19:d1:39:93:b8:8f:22:7c:4e:2e:5c:88:5b:65:
                    c0:34:a4:e6:67:11:a4:8f:d8:72:f4:ad:a0:4d:e9:
                    cc:b4:46:9d:61:90:f4:ff:af:71:23:80:21:e3:d2:
                    58:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7D:96:5E:D4:8E:84:35:D9:4B:26:FF:6A:B7:70:56:61:9B:97:CA
            X509v3 Authority Key Identifier:
                keyid:3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a373030323a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:7002::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:bc:85:1d:80:e0:ce:5b:cf:35:6a:c5:10:1d:28:15:11:82:
         c6:18:82:52:d1:16:07:37:8d:cb:69:3d:32:b0:38:8a:d0:ec:
         77:0c:87:bd:c6:7c:69:0f:a9:2f:69:50:a3:2a:df:68:c1:3e:
         c6:71:83:f0:ab:78:d3:3d:4e:8c:4f:03:54:b4:cc:e5:41:91:
         7e:b1:9e:51:24:1f:08:e4:c4:90:3b:a5:0d:4b:59:51:57:3b:
         8e:1f:d7:0b:6d:06:1e:81:07:d1:4b:23:de:c8:36:dd:82:aa:
         5e:c6:9e:c2:e2:00:41:7e:a0:c8:96:fa:98:00:97:a9:ea:4a:
         22:33:a2:54:69:4c:17:35:83:77:ca:3a:b4:50:1a:cb:26:f9:
         0c:02:74:50:ad:32:54:82:bc:19:cf:a1:53:9a:c4:1e:bc:b6:
         8b:a6:cb:9b:46:92:5a:98:32:d4:6c:3c:b6:47:68:f2:06:ad:
         a1:72:76:4f:26:c1:56:28:5b:db:16:ec:9a:f3:7f:33:cc:20:
         d5:cb:68:32:ef:c4:f0:33:50:05:1b:65:e5:50:8f:a9:03:54:
         5d:7d:4d:89:fd:bd:c2:09:e0:ba:5c:f7:ea:95:a5:2d:d2:19:
         ed:3b:f1:8f:d3:45:42:b9:5b:b8:45:ac:9e:47:3e:2d:a9:de:
         b1:fd:40:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 08:34:50 2025 by rpki-client