Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a393030333a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a393030333a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          ZgeMQQw1IJ2rfFgzKW8vmkMWGw2T4Tu0sTDizjDWYPc=
Subject key identifier:   F3:60:BD:87:28:08:BE:15:1D:85:95:06:6A:B0:5D:6E:C7:90:E9:4D
Certificate issuer:       /CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
Certificate serial:       354618473B51224825A7486A77EC8B4C0D2AB837
Authority key identifier: 3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a393030333a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Tue 01 Jul 2025 22:46:22 +0000
ROA not before:           Tue 01 Jul 2025 22:41:22 +0000
ROA not after:            Tue 30 Jun 2026 22:46:22 +0000
asID:                     264422
IP address blocks:        2804:1e58:9003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 06:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:46:18:47:3b:51:22:48:25:a7:48:6a:77:ec:8b:4c:0d:2a:b8:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
        Validity
            Not Before: Jul  1 22:41:22 2025 GMT
            Not After : Jun 30 22:46:22 2026 GMT
        Subject: CN=F360BD872808BE151D8595066AB05D6EC790E94D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3f:ae:6b:54:09:ac:ba:f7:19:6c:f6:8e:7b:
                    59:f8:de:0d:41:df:75:b2:05:4b:76:86:00:c4:0d:
                    0a:44:82:f1:18:e3:62:3a:1e:d1:06:f9:ca:ce:f1:
                    72:74:d9:61:e6:43:1c:bf:9b:c7:26:14:9a:63:83:
                    2f:dc:67:13:a8:67:89:47:9d:f8:71:1f:14:0b:53:
                    29:56:34:46:f7:0c:8d:34:dd:bf:0d:62:48:4b:68:
                    4c:be:84:f3:96:ef:83:9e:4e:65:2c:5b:eb:58:56:
                    a1:21:38:88:1a:8a:62:56:31:1c:f2:e6:9f:49:5c:
                    c1:74:1c:3e:8a:0d:58:38:4c:3f:79:f8:81:3b:5c:
                    2c:c1:21:de:4e:c8:ab:4d:78:69:d7:a5:39:4a:31:
                    32:47:07:32:c9:be:5b:c3:0f:ee:99:cc:fe:26:b0:
                    9a:fa:9f:1d:1a:71:c4:3a:eb:f8:79:fd:60:1c:fe:
                    92:db:95:66:b6:4a:98:cb:fc:73:7a:33:13:3e:61:
                    1c:94:2c:20:51:25:2f:28:c9:6d:d1:ae:c9:ee:9d:
                    44:11:e6:8c:1c:94:5e:00:46:d6:b6:f7:f8:22:05:
                    e6:d3:73:6e:33:e6:50:3e:0f:91:49:35:5a:48:c4:
                    c8:c4:e9:d2:68:d4:45:06:29:d4:09:bb:5f:c8:8d:
                    68:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:60:BD:87:28:08:BE:15:1D:85:95:06:6A:B0:5D:6E:C7:90:E9:4D
            X509v3 Authority Key Identifier:
                keyid:3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a393030333a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:9003::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:14:ae:d7:7c:d6:a9:11:8a:fb:2c:8f:b0:bc:4b:60:23:9a:
         5e:b1:70:9a:91:25:44:8b:9e:8c:13:2e:c5:26:8f:d2:99:27:
         dc:ac:40:dd:fa:a5:17:b6:c0:1b:12:3c:c9:d8:45:b1:18:f1:
         4f:13:dd:c0:70:20:30:78:c0:73:3d:56:5a:b3:b5:9c:f8:be:
         f0:f7:29:ce:cc:1f:84:47:6d:94:ab:a3:9e:af:8e:f6:87:c7:
         04:1d:d0:ee:c3:9b:54:fb:11:cd:cb:c1:82:0c:1e:05:66:af:
         63:33:06:06:a5:9d:84:e1:cf:4c:b0:73:08:9d:8a:c2:86:6e:
         cf:25:ce:6a:4c:23:44:cb:e9:d8:af:40:8c:fd:f8:af:fc:98:
         42:38:e8:35:d8:21:04:8e:5e:e1:f4:bf:5a:d9:90:6c:d7:66:
         90:75:11:10:db:1d:33:57:8a:e4:8f:3f:2c:ba:c8:82:c3:89:
         67:2f:b8:de:cd:03:04:48:3f:af:a8:80:1d:f8:b0:91:fc:5f:
         06:91:85:cd:dd:08:ba:1d:39:7c:c1:e0:45:c8:d4:37:69:b5:
         4e:cd:89:ba:fd:76:90:7f:5c:67:8f:5a:73:3a:93:cb:07:c8:
         03:a7:66:d8:99:2f:10:61:34:02:8e:a4:36:b4:af:9b:34:b2:
         09:86:e2:9e
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUNUYYRztRIkglp0hqd+yLTA0quDcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0VEOTk3QUUwRUI3MTc2Q0E4RkIyRjREMzlGQzZENUE5
N0FCRTQxRTAeFw0yNTA3MDEyMjQxMjJaFw0yNjA2MzAyMjQ2MjJaMDMxMTAvBgNV
BAMTKEYzNjBCRDg3MjgwOEJFMTUxRDg1OTUwNjZBQjA1RDZFQzc5MEU5NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnP65rVAmsuvcZbPaOe1n43g1B
33WyBUt2hgDEDQpEgvEY42I6HtEG+crO8XJ02WHmQxy/m8cmFJpjgy/cZxOoZ4lH
nfhxHxQLUylWNEb3DI003b8NYkhLaEy+hPOW74OeTmUsW+tYVqEhOIgaimJWMRzy
5p9JXMF0HD6KDVg4TD95+IE7XCzBId5OyKtNeGnXpTlKMTJHBzLJvlvDD+6ZzP4m
sJr6nx0accQ66/h5/WAc/pLblWa2SpjL/HN6MxM+YRyULCBRJS8oyW3RrsnunUQR
5owclF4ARta29/giBebTc24z5lA+D5FJNVpIxMjE6dJo1EUGKdQJu1/IjWgJAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQU82C9hygIvhUdhZUGarBdbseQ6U0wHwYDVR0j
BBgwFoAUPtmXrg63F2yo+y9NOfxtWper5B4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnRTTXdHdk1ZdWRlUUd0dGtQMWNEdDVEUUdQclNna0J2aHdZemZGd3N2
dkQvMC8zRUQ5OTdBRTBFQjcxNzZDQThGQjJGNEQzOUZDNkQ1QTk3QUJFNDFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFRDk5N0FFMEVCNzE3NkNB
OEZCMkY0RDM5RkM2RDVBOTdBQkU0MUUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ0U013R3ZNWXVkZVFHdHRrUDFjRHQ1RFFHUHJTZ2tCdmh3WXpmRndzdnZELzAv
MzIzODMwMzQzYTMxNjUzNTM4M2EzOTMwMzAzMzNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNDM0MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEHliQAzANBgkqhkiG9w0BAQsF
AAOCAQEAVhSu13zWqRGK+yyPsLxLYCOaXrFwmpElRIuejBMuxSaP0pkn3KxA3fql
F7bAGxI8ydhFsRjxTxPdwHAgMHjAcz1WWrO1nPi+8PcpzswfhEdtlKujnq+O9ofH
BB3Q7sObVPsRzcvBggweBWavYzMGBqWdhOHPTLBzCJ2KwoZuzyXOakwjRMvp2K9A
jP34r/yYQjjoNdghBI5e4fS/WtmQbNdmkHURENsdM1eK5I8/LLrIgsOJZy+43s0D
BEg/r6iAHfiwkfxfBpGFzd0Iuh05fMHgRcjUN2m1Ts2Juv12kH9cZ49aczqTywfI
A6dm2JkvEGE0Ao6kNrSvmzSyCYbing==
-----END CERTIFICATE-----
Generated at Sat Jul 12 08:38:21 2025 by rpki-client