Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a383030333a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a383030333a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          S1mVIKYPDy0h0TzTuD81QVFSIfk5xrnMZEUxqwSMzzQ=
Subject key identifier:   00:EB:F2:87:10:97:F2:12:89:64:15:8B:4E:69:6B:16:B8:94:C0:11
Certificate issuer:       /CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
Certificate serial:       79E11A77D8699D0F02C6E1C8C06A271AB0AF7A97
Authority key identifier: 3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a383030333a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Tue 01 Jul 2025 22:46:18 +0000
ROA not before:           Tue 01 Jul 2025 22:41:18 +0000
ROA not after:            Tue 30 Jun 2026 22:46:18 +0000
asID:                     264422
IP address blocks:        2804:1e58:8003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 06:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e1:1a:77:d8:69:9d:0f:02:c6:e1:c8:c0:6a:27:1a:b0:af:7a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
        Validity
            Not Before: Jul  1 22:41:18 2025 GMT
            Not After : Jun 30 22:46:18 2026 GMT
        Subject: CN=00EBF2871097F2128964158B4E696B16B894C011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:87:e9:92:9f:31:ba:f2:e3:dd:58:5d:80:8d:
                    a3:12:f8:9b:82:f7:44:54:a3:4f:d2:1e:cf:21:8f:
                    80:97:57:90:fd:3d:d6:e9:c4:ba:62:75:28:b5:dc:
                    a8:2d:1d:c0:49:32:4e:2c:37:87:1e:63:70:b6:44:
                    c2:3d:ec:f1:7e:53:de:b4:ce:17:06:0c:e2:75:d3:
                    02:5e:63:8a:b8:a1:dc:9c:a5:61:0c:f1:68:61:22:
                    f1:b2:90:05:33:f8:e6:e2:1f:19:85:f2:60:d9:88:
                    55:14:1c:f8:1d:a1:2b:22:f4:96:a1:08:95:fa:e9:
                    d7:99:86:c7:b0:ca:7f:fe:17:a8:87:e6:d2:df:66:
                    3e:7b:ef:2d:bd:61:7f:e3:2f:05:d1:ee:22:46:9a:
                    89:44:fb:16:8e:ac:bf:5a:8f:a9:5b:02:58:5e:91:
                    85:3a:3f:cc:d9:71:87:29:d4:09:c1:c4:be:cf:dc:
                    0d:3a:8b:e1:78:0d:91:17:69:47:8e:f8:f3:86:12:
                    bc:03:39:5d:22:7d:ca:a1:71:60:dc:fd:6b:46:da:
                    4d:12:b4:b5:4e:27:4a:f8:bd:a4:4e:29:66:f0:f6:
                    c0:0b:f6:67:20:c0:f9:26:0b:c0:a4:f3:c8:94:fb:
                    57:80:30:2e:b1:58:02:2a:3b:cf:18:5e:7d:8a:9a:
                    90:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:EB:F2:87:10:97:F2:12:89:64:15:8B:4E:69:6B:16:B8:94:C0:11
            X509v3 Authority Key Identifier:
                keyid:3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a383030333a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:8003::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:35:3b:00:a6:ec:3c:3d:9f:a8:b3:17:b6:37:73:b3:6b:8d:
         ba:af:7f:eb:34:49:d4:20:f2:44:c6:77:5a:b2:6d:7a:4a:4e:
         f1:34:3a:75:b5:47:90:03:3c:da:31:3e:8d:b5:e7:0b:eb:fb:
         ce:41:ee:b8:0f:03:6f:ec:86:64:2b:d5:12:dd:81:6d:a3:ab:
         36:4e:9c:7f:55:81:55:b7:da:6d:57:2f:4a:5d:ad:cf:3d:78:
         3b:9c:c1:50:f5:55:7a:20:77:e1:27:1b:7c:94:58:4b:4e:a2:
         6a:eb:b8:c5:70:02:c9:09:44:01:f9:00:11:11:21:7c:2b:0a:
         21:4e:9a:f0:9e:70:01:aa:65:c2:88:8e:df:b8:8c:27:79:27:
         11:11:23:84:93:d6:f8:28:9d:02:77:21:22:fa:3e:1b:b2:c8:
         fd:8b:27:98:72:9a:d0:d3:95:3f:89:4d:6f:8f:6a:3d:f6:ae:
         14:af:73:a1:8f:c0:a7:5b:ab:37:45:32:57:63:d2:5b:47:f9:
         08:86:dd:f7:2f:1f:d5:43:59:08:0d:18:5a:76:b7:18:f7:b0:
         f9:11:87:b4:08:3d:28:4b:ec:64:c6:a8:fd:4c:c6:aa:68:16:
         94:83:9d:a0:09:6f:29:0a:40:c6:43:77:5d:a3:60:b6:b6:d7:
         6f:af:41:5a
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUeeEad9hpnQ8CxuHIwGonGrCvepcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0VEOTk3QUUwRUI3MTc2Q0E4RkIyRjREMzlGQzZENUE5
N0FCRTQxRTAeFw0yNTA3MDEyMjQxMThaFw0yNjA2MzAyMjQ2MThaMDMxMTAvBgNV
BAMTKDAwRUJGMjg3MTA5N0YyMTI4OTY0MTU4QjRFNjk2QjE2Qjg5NEMwMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCAh+mSnzG68uPdWF2AjaMS+JuC
90RUo0/SHs8hj4CXV5D9PdbpxLpidSi13KgtHcBJMk4sN4ceY3C2RMI97PF+U960
zhcGDOJ10wJeY4q4odycpWEM8WhhIvGykAUz+ObiHxmF8mDZiFUUHPgdoSsi9Jah
CJX66deZhsewyn/+F6iH5tLfZj577y29YX/jLwXR7iJGmolE+xaOrL9aj6lbAlhe
kYU6P8zZcYcp1AnBxL7P3A06i+F4DZEXaUeO+POGErwDOV0ifcqhcWDc/WtG2k0S
tLVOJ0r4vaROKWbw9sAL9mcgwPkmC8Ck88iU+1eAMC6xWAIqO88YXn2KmpAHAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUAOvyhxCX8hKJZBWLTmlrFriUwBEwHwYDVR0j
BBgwFoAUPtmXrg63F2yo+y9NOfxtWper5B4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnRTTXdHdk1ZdWRlUUd0dGtQMWNEdDVEUUdQclNna0J2aHdZemZGd3N2
dkQvMC8zRUQ5OTdBRTBFQjcxNzZDQThGQjJGNEQzOUZDNkQ1QTk3QUJFNDFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFRDk5N0FFMEVCNzE3NkNB
OEZCMkY0RDM5RkM2RDVBOTdBQkU0MUUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ0U013R3ZNWXVkZVFHdHRrUDFjRHQ1RFFHUHJTZ2tCdmh3WXpmRndzdnZELzAv
MzIzODMwMzQzYTMxNjUzNTM4M2EzODMwMzAzMzNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNDM0MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEHliAAzANBgkqhkiG9w0BAQsF
AAOCAQEACzU7AKbsPD2fqLMXtjdzs2uNuq9/6zRJ1CDyRMZ3WrJtekpO8TQ6dbVH
kAM82jE+jbXnC+v7zkHuuA8Db+yGZCvVEt2BbaOrNk6cf1WBVbfabVcvSl2tzz14
O5zBUPVVeiB34ScbfJRYS06iauu4xXACyQlEAfkAEREhfCsKIU6a8J5wAaplwoiO
37iMJ3knEREjhJPW+CidAnchIvo+G7LI/YsnmHKa0NOVP4lNb49qPfauFK9zoY/A
p1urN0UyV2PSW0f5CIbd9y8f1UNZCA0YWna3GPew+RGHtAg9KEvsZMao/UzGqmgW
lIOdoAlvKQpAxkN3XaNgtrbXb69BWg==
-----END CERTIFICATE-----
Generated at Sat Jul 12 08:47:26 2025 by rpki-client