Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a393030303a3a2f34362d3436203d3e20323634343232.roa
File:                     323830343a316535383a393030303a3a2f34362d3436203d3e20323634343232.roa (raw, json)
Hash identifier:          UGXBsSDimM0zJN4GEGLtCJ09/KK/H6euQHPyKsh3mOo=
Subject key identifier:   7C:99:02:35:C3:6A:1E:2F:12:30:36:AE:58:3C:00:23:51:31:D4:22
Certificate issuer:       /CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
Certificate serial:       1FA041D0CC04A0D379CDF09F5F20105E758536F8
Authority key identifier: 3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a393030303a3a2f34362d3436203d3e20323634343232.roa
Signing time:             Tue 01 Jul 2025 22:46:20 +0000
ROA not before:           Tue 01 Jul 2025 22:41:20 +0000
ROA not after:            Tue 30 Jun 2026 22:46:20 +0000
asID:                     264422
IP address blocks:        2804:1e58:9000::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 06:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a0:41:d0:cc:04:a0:d3:79:cd:f0:9f:5f:20:10:5e:75:85:36:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
        Validity
            Not Before: Jul  1 22:41:20 2025 GMT
            Not After : Jun 30 22:46:20 2026 GMT
        Subject: CN=7C990235C36A1E2F123036AE583C00235131D422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8d:46:e8:be:97:35:3e:64:fe:e5:f4:56:27:
                    a8:8b:5a:f5:a8:f7:e2:31:5a:a5:bd:38:27:f7:7a:
                    80:63:20:62:30:ed:04:3b:d0:5c:6b:af:be:f8:95:
                    ab:41:46:5a:89:74:07:5a:0e:77:ba:00:e8:bf:71:
                    ca:e2:9b:ba:7e:61:77:d8:67:e7:fd:54:f0:45:58:
                    06:2f:bf:82:ae:e0:f5:7d:4e:44:59:f9:69:31:f4:
                    f4:4d:02:a9:7f:45:4a:01:96:18:e5:7f:81:28:9d:
                    36:85:6b:73:14:ac:de:87:08:47:46:66:04:a4:62:
                    e7:c4:7b:22:d8:9a:96:59:a1:1a:fc:c8:e3:a2:cc:
                    b1:87:00:7d:7a:a3:d6:3b:31:bc:66:f9:b6:a2:5f:
                    e4:f6:27:4d:8e:47:33:92:14:67:42:37:9c:86:f8:
                    47:c3:2c:78:8b:be:41:92:ec:50:c3:71:1c:b0:a6:
                    c2:f0:17:ab:ef:07:fb:e8:e5:fa:e4:a6:b9:3f:8d:
                    18:90:2e:d1:57:7a:10:5c:e3:89:b7:61:5a:e2:24:
                    9e:6e:d1:00:35:db:76:05:f5:fa:29:cc:e1:1d:d9:
                    f7:1c:e5:00:0e:d9:3a:01:c6:f6:e6:ca:f8:e7:ca:
                    88:dc:a1:d6:a3:69:ee:e8:9f:40:ff:79:cc:78:f9:
                    f1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:99:02:35:C3:6A:1E:2F:12:30:36:AE:58:3C:00:23:51:31:D4:22
            X509v3 Authority Key Identifier:
                keyid:3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a393030303a3a2f34362d3436203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:9000::/46

    Signature Algorithm: sha256WithRSAEncryption
         9e:cc:e5:73:be:0b:fb:eb:56:fe:b4:5e:7c:63:96:c7:05:d2:
         31:52:8e:d7:a8:60:79:bb:61:df:4f:4a:7f:89:04:b0:54:38:
         b6:85:23:13:4e:78:26:71:33:2f:19:72:22:f6:43:65:50:d1:
         bc:c3:32:57:4a:22:b7:f4:7d:4d:a0:c6:2c:bc:7a:56:03:5e:
         86:46:92:3c:83:45:2f:a4:c3:d4:68:6a:9b:33:80:f9:e0:4d:
         b4:7b:54:85:a0:d2:d3:07:35:f8:55:ce:19:0c:48:2c:38:95:
         64:61:07:cc:1e:4e:fb:c2:0c:4e:af:b1:3b:94:1c:4d:7b:80:
         ad:84:51:29:b8:3d:e7:af:0b:fb:77:82:8a:a0:47:a5:fd:c9:
         c3:67:b1:7a:c3:15:05:b9:0f:55:5d:b2:80:4f:86:c5:ee:8d:
         b2:93:97:11:cc:37:4a:ab:6f:ff:80:1e:dd:f0:73:b8:84:1f:
         b4:41:95:33:46:b8:00:2f:8b:65:01:e1:93:d5:56:ed:eb:31:
         16:9f:c3:28:aa:df:d3:6a:e0:74:4e:1a:3f:b2:8b:7c:23:0d:
         f8:44:ad:69:51:01:7f:ef:13:da:6f:2a:88:3d:73:e4:cc:00:
         bc:61:31:a5:9d:ff:ad:86:64:f7:ce:87:9b:9d:83:15:de:da:
         48:a3:eb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 08:44:01 2025 by rpki-client