Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a383030303a3a2f34362d3436203d3e20323634343232.roa
File:                     323830343a316535383a383030303a3a2f34362d3436203d3e20323634343232.roa (raw, json)
Hash identifier:          zSV3m1zWegPHHsQwGH1vkiNA5l2QePIa+neBL2XwQwo=
Subject key identifier:   90:E1:35:C6:23:B1:51:06:A6:00:F7:1D:32:C7:3F:1C:EF:A1:25:8B
Certificate issuer:       /CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
Certificate serial:       456BF586813D9BB859BD87BB6471A9F2EB480182
Authority key identifier: 3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a383030303a3a2f34362d3436203d3e20323634343232.roa
Signing time:             Tue 01 Jul 2025 22:46:18 +0000
ROA not before:           Tue 01 Jul 2025 22:41:18 +0000
ROA not after:            Tue 30 Jun 2026 22:46:18 +0000
asID:                     264422
IP address blocks:        2804:1e58:8000::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 06:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:6b:f5:86:81:3d:9b:b8:59:bd:87:bb:64:71:a9:f2:eb:48:01:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
        Validity
            Not Before: Jul  1 22:41:18 2025 GMT
            Not After : Jun 30 22:46:18 2026 GMT
        Subject: CN=90E135C623B15106A600F71D32C73F1CEFA1258B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ef:31:30:96:6e:72:e6:1f:a9:55:fe:ef:b7:
                    87:b3:51:1b:f2:c5:1a:76:b9:5f:d8:04:64:2d:75:
                    d2:e2:ea:20:9c:c5:1b:e2:03:4c:6d:9f:7e:0e:22:
                    0e:ff:67:64:07:db:df:05:c9:94:52:93:f2:89:c2:
                    53:58:ff:b2:2d:e7:1d:5f:29:1b:66:4e:18:56:4a:
                    68:cb:0a:c4:51:55:01:21:28:b6:26:9a:ae:d3:dd:
                    d8:62:3d:b6:26:6b:a0:4d:8b:10:18:f9:cf:03:d3:
                    4c:10:9f:b7:27:c7:48:42:46:a6:dd:62:fc:69:55:
                    3b:92:ed:11:88:c9:f1:1f:a5:a7:eb:4c:b0:f4:8f:
                    f5:aa:fb:7e:12:04:25:4e:a7:95:69:55:29:79:b7:
                    d0:c9:a8:3e:e9:fa:dd:ea:77:7f:80:8e:24:df:f4:
                    4c:12:6a:57:62:a1:fe:e1:b9:ae:3c:c7:62:b9:bd:
                    56:29:96:28:71:fc:60:62:14:85:5a:ef:ca:8f:79:
                    43:33:d6:f4:c4:5f:32:d1:ae:9a:8c:25:52:71:35:
                    3c:ff:eb:a6:04:7e:ec:c9:45:00:eb:ac:cf:c8:f5:
                    92:34:da:81:8d:13:96:82:5c:c6:3b:47:98:a4:2c:
                    1f:74:11:67:23:d9:9f:60:a8:15:e6:a5:ef:1f:e0:
                    78:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E1:35:C6:23:B1:51:06:A6:00:F7:1D:32:C7:3F:1C:EF:A1:25:8B
            X509v3 Authority Key Identifier:
                keyid:3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a383030303a3a2f34362d3436203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:8000::/46

    Signature Algorithm: sha256WithRSAEncryption
         07:05:47:f5:ab:58:b4:7f:32:b0:52:23:43:3f:72:a0:fb:86:
         a8:40:0c:c3:11:92:fa:9a:72:b7:01:81:93:11:c2:06:e2:02:
         3e:6d:bf:26:1a:3a:0c:ed:94:18:27:2d:0f:b0:42:12:4e:0d:
         99:fe:80:9e:9a:04:e9:9f:38:4c:d4:83:bd:26:96:de:f8:09:
         c1:e5:76:8f:9d:1e:74:dc:21:d7:4d:83:21:20:e2:c5:1b:98:
         da:e7:93:0a:b4:b5:25:17:2c:f9:aa:85:05:36:df:c2:66:1b:
         63:b3:72:33:d1:50:8e:02:85:9c:3c:33:8a:f0:0f:50:37:d9:
         5d:88:01:9f:29:1e:41:60:62:29:03:2e:7f:09:94:25:80:90:
         bf:1d:1e:e8:8c:d3:6c:e8:cf:ba:99:6c:7d:c8:32:74:75:43:
         3f:e4:05:1b:39:60:19:93:0e:db:1f:68:a0:18:36:16:a3:a7:
         41:d8:d3:14:9e:c5:c8:d4:f9:4a:77:be:33:3b:c1:2b:21:c4:
         40:9c:21:e8:f5:1e:5f:fc:d5:bc:94:bc:b6:ec:65:c3:c1:c6:
         a9:05:25:e7:c2:9e:3c:bd:ba:44:b5:df:d5:c4:2a:d0:96:91:
         db:35:6d:64:d1:17:7c:1b:b5:30:7d:76:40:50:a7:d2:3f:84:
         4a:6d:e2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 12:35:44 2025 by rpki-client