Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a3a2f34362d3436203d3e20323634343232.roa
File:                     323830343a316535383a3a2f34362d3436203d3e20323634343232.roa (raw, json)
Hash identifier:          esI/J61vV+t2ZzfNAmUuR+azIIGgySSb7tLNwrpS5c4=
Subject key identifier:   F0:67:1D:AF:22:18:A8:79:8B:89:63:ED:FF:F2:D4:3F:44:84:4F:3E
Certificate issuer:       /CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
Certificate serial:       40FE6E7BC9F72113EEEA99FF0A477859AAA1C898
Authority key identifier: 3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a3a2f34362d3436203d3e20323634343232.roa
Signing time:             Tue 01 Jul 2025 22:46:27 +0000
ROA not before:           Tue 01 Jul 2025 22:41:27 +0000
ROA not after:            Tue 30 Jun 2026 22:46:27 +0000
asID:                     264422
IP address blocks:        2804:1e58::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 06:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:fe:6e:7b:c9:f7:21:13:ee:ea:99:ff:0a:47:78:59:aa:a1:c8:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
        Validity
            Not Before: Jul  1 22:41:27 2025 GMT
            Not After : Jun 30 22:46:27 2026 GMT
        Subject: CN=F0671DAF2218A8798B8963EDFFF2D43F44844F3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:eb:7b:2d:ab:54:28:a4:d0:3f:e1:b1:6c:0c:
                    09:fe:d5:bc:09:33:6b:ba:c9:ee:a3:b9:1a:ec:c1:
                    16:f7:19:76:c7:e2:5c:53:dc:5b:c9:39:c1:69:71:
                    3b:d7:c8:e5:b0:ca:ee:b3:1a:f9:26:7e:ff:77:77:
                    12:64:4e:1d:e3:25:a6:17:c2:3f:b5:76:d0:05:b3:
                    75:b9:8c:66:ee:b8:bc:fa:4c:88:b2:c8:5d:a2:6b:
                    95:6a:de:65:bc:11:5b:c8:8b:cf:9c:2b:4f:45:6b:
                    3e:4b:0b:81:36:0d:f2:4d:19:ac:a6:be:4e:66:05:
                    f3:a8:4b:1e:f9:3b:e2:f7:e5:ff:7a:ad:a8:df:4b:
                    ad:59:6d:10:c9:4f:e8:c4:fa:ce:28:3a:2a:e9:33:
                    8c:4f:49:d4:5e:df:3d:ea:29:df:8e:93:d0:34:15:
                    fe:51:ea:da:64:2b:bd:c0:29:c6:fe:4f:c8:1c:00:
                    63:bd:9b:d4:c6:39:69:5e:14:78:01:e7:2d:8a:3d:
                    e3:72:44:e7:e9:67:79:09:4a:3f:8c:9d:0c:53:3e:
                    22:20:57:5a:4b:2c:6c:20:44:f2:fb:4e:40:04:aa:
                    5d:28:d1:60:64:04:29:ab:08:e2:8e:f7:30:a0:3f:
                    dc:d5:3a:04:94:b3:6c:22:42:86:8d:f0:c2:50:85:
                    0a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:67:1D:AF:22:18:A8:79:8B:89:63:ED:FF:F2:D4:3F:44:84:4F:3E
            X509v3 Authority Key Identifier:
                keyid:3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a3a2f34362d3436203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58::/46

    Signature Algorithm: sha256WithRSAEncryption
         38:80:35:df:33:60:52:f3:69:1a:32:66:6f:c7:91:99:06:10:
         64:f5:35:af:ef:29:09:f8:0e:36:4d:4c:5f:a1:3b:c2:26:d6:
         f7:c9:fb:3e:0c:09:96:73:eb:fc:45:39:b9:da:f0:35:88:21:
         af:c6:0d:44:90:8b:1f:78:e7:23:53:78:91:e6:37:85:be:b6:
         2e:c6:7b:ab:dd:ce:69:cc:ec:a1:85:df:2c:20:2e:1e:69:01:
         75:c3:f6:43:0f:16:9a:45:25:e3:f1:9b:3a:2a:f5:32:41:ba:
         8b:c3:81:51:d4:cf:ab:51:d9:e0:fb:0f:3c:8e:64:47:fc:b1:
         4f:a4:9b:ea:18:6d:3d:43:8a:4b:f8:b5:15:7a:7c:88:c8:9d:
         5a:29:c5:ef:77:90:fa:77:cc:6c:5e:d4:57:3f:98:fe:2c:8b:
         01:6d:65:d9:2a:e6:70:aa:5d:d5:bc:47:ac:d1:d3:49:0b:94:
         01:c1:e9:4a:a0:44:13:86:24:bf:e4:cb:fa:6c:36:91:f8:60:
         6b:c8:25:a7:ef:e5:c5:8f:7f:25:c3:33:86:78:40:10:9b:c8:
         a3:f1:6a:e8:2b:2e:89:93:86:1d:f2:c2:0a:45:bd:75:31:40:
         15:13:84:d9:2a:f1:b6:2a:e2:7c:54:98:b7:87:77:80:f6:ec:
         2c:34:3c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 11:55:08 2025 by rpki-client