Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a383030303a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a383030303a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          qkUQcJqstfqZlz5czVBgVUoV4B0DCyPfON4yklWCOkI=
Subject key identifier:   B9:A4:DC:6D:82:26:B3:4D:24:71:9F:27:AC:6F:07:AB:A2:85:7A:69
Certificate issuer:       /CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
Certificate serial:       335C4010B440FFBF6B511A6361889E21BBC21F00
Authority key identifier: 3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a383030303a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Tue 01 Jul 2025 22:46:26 +0000
ROA not before:           Tue 01 Jul 2025 22:41:26 +0000
ROA not after:            Tue 30 Jun 2026 22:46:26 +0000
asID:                     264422
IP address blocks:        2804:1e58:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 06:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:5c:40:10:b4:40:ff:bf:6b:51:1a:63:61:88:9e:21:bb:c2:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
        Validity
            Not Before: Jul  1 22:41:26 2025 GMT
            Not After : Jun 30 22:46:26 2026 GMT
        Subject: CN=B9A4DC6D8226B34D24719F27AC6F07ABA2857A69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fa:4e:c8:d9:d2:2f:35:7e:e7:fa:0a:b9:82:
                    68:e4:97:70:6b:d0:24:b1:fd:04:de:30:bd:f2:5a:
                    c2:35:fc:50:32:70:31:7b:06:14:8a:95:d3:14:d9:
                    8d:8c:7b:fd:a1:38:95:bb:c0:3b:40:71:45:86:28:
                    04:1a:7e:0e:c4:87:21:d2:84:4a:6b:0b:f8:b4:0b:
                    cf:3d:31:07:56:8d:1b:28:70:9c:b1:44:5c:cc:d1:
                    f7:a7:34:24:48:98:5b:9f:3c:74:7b:5d:24:54:b9:
                    4f:11:9d:98:e7:af:f7:37:a8:d3:c8:5f:b6:62:b3:
                    33:42:43:4b:0f:e4:fd:26:82:1c:9c:6b:fd:b4:49:
                    75:71:17:45:4c:5e:5f:4d:55:ee:17:85:34:b7:d3:
                    10:a9:17:4a:dd:44:fe:24:7a:e8:54:ed:84:29:99:
                    61:bc:fa:df:f9:f0:67:56:f8:ee:fe:6b:a3:e3:1d:
                    1d:14:9d:dc:c6:bd:d7:36:11:69:bf:f2:44:95:28:
                    b3:68:95:e6:29:9a:2b:f5:84:0e:12:79:87:e4:01:
                    15:9f:36:7b:dc:89:30:13:01:ec:6b:45:20:9d:a6:
                    3b:cf:61:0e:6f:5e:35:32:36:74:5b:7e:62:c1:19:
                    51:f5:87:db:db:0a:6d:e8:40:95:6a:c0:95:51:1b:
                    31:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A4:DC:6D:82:26:B3:4D:24:71:9F:27:AC:6F:07:AB:A2:85:7A:69
            X509v3 Authority Key Identifier:
                keyid:3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a383030303a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         c6:14:d9:3a:bf:14:a2:f4:f5:70:33:64:bb:6e:0f:61:27:c8:
         08:2d:10:83:21:f3:26:a3:f1:70:cc:29:55:b0:42:68:65:15:
         53:b1:c0:92:a0:db:2b:c7:31:ff:bb:46:49:de:c7:82:38:db:
         73:a4:2d:3d:a1:12:99:90:2b:fc:21:5b:f6:3a:55:ef:e9:88:
         fa:d2:1f:66:0d:11:45:47:f8:cb:ae:02:2a:07:a3:fd:bb:b4:
         6d:d9:29:e7:a0:23:8e:4d:e1:f1:1e:22:6c:9e:13:c8:17:f7:
         62:e4:f9:48:3a:7d:a9:fe:62:14:d9:f9:fd:59:88:7a:4a:cf:
         35:f8:a0:64:55:fd:c2:d1:39:1b:86:75:cf:d0:6b:76:46:cb:
         9a:cf:7b:b3:e9:09:07:d2:96:51:bd:1a:12:d1:29:d6:be:21:
         75:74:be:12:01:ed:4b:5b:74:1b:d0:7f:c8:31:4c:80:67:96:
         67:4a:35:da:b0:99:62:b0:4d:22:7e:60:17:53:95:fb:72:d4:
         5c:07:3e:0b:9a:8a:5b:f6:ee:42:b9:b3:9c:75:af:3a:ae:ae:
         7b:53:0e:9e:38:32:f9:3d:e8:8a:33:3a:b6:7e:cf:3f:b3:1c:
         e0:19:36:2a:34:77:ee:46:38:ff:3c:70:d0:8b:e1:34:b5:1b:
         de:31:85:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 08:53:20 2025 by rpki-client