Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a653030313a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a653030313a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          gc/RO3VYfR8jQtKe736jaJvuk7T+HuQe7DSqIRUu3JQ=
Subject key identifier:   B7:86:C2:E8:E0:17:73:F5:CD:22:FC:38:19:7A:8E:D2:D2:2B:2A:D3
Certificate issuer:       /CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
Certificate serial:       1191700E49B2D0066F218D1595FD256ED9E23BFC
Authority key identifier: 3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a653030313a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Tue 01 Jul 2025 22:46:29 +0000
ROA not before:           Tue 01 Jul 2025 22:41:29 +0000
ROA not after:            Tue 30 Jun 2026 22:46:29 +0000
asID:                     264422
IP address blocks:        2804:1e58:e001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 06:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:91:70:0e:49:b2:d0:06:6f:21:8d:15:95:fd:25:6e:d9:e2:3b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
        Validity
            Not Before: Jul  1 22:41:29 2025 GMT
            Not After : Jun 30 22:46:29 2026 GMT
        Subject: CN=B786C2E8E01773F5CD22FC38197A8ED2D22B2AD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:23:64:f7:51:df:5e:df:32:51:65:90:a4:08:
                    15:9d:84:6c:cd:fc:ac:39:2d:41:44:a8:78:2b:69:
                    f1:86:57:29:1f:18:9a:5c:67:3f:32:0d:3e:4e:e8:
                    65:be:5e:6c:cc:cf:9a:0e:24:da:3e:8d:88:f7:7f:
                    0d:08:d7:df:4a:42:90:f7:b6:a0:da:95:df:80:4b:
                    d8:fe:02:87:bf:92:20:87:64:78:a4:e8:dc:9b:73:
                    9e:e9:89:2b:87:cf:eb:92:a4:29:27:5f:2b:d2:5c:
                    c8:71:37:6c:f7:57:57:58:02:af:1c:15:a1:38:5e:
                    fa:f9:90:c9:8c:4d:fb:44:fa:31:a5:b2:14:42:b2:
                    4b:5a:e7:0d:f2:ed:d5:8c:19:81:4f:99:46:29:57:
                    bc:c9:67:51:26:bc:f6:86:93:cc:cb:92:0e:b3:60:
                    08:9a:21:8a:e8:a6:22:5a:a6:02:fc:a6:a0:e7:34:
                    3f:b4:89:b5:29:4d:85:ac:1c:67:5e:d8:94:46:dd:
                    4b:f6:80:9d:f4:d6:95:4f:73:a8:86:60:42:3c:91:
                    23:62:52:85:90:20:b6:3f:bc:5c:91:33:f5:39:ce:
                    1f:40:e6:ac:15:c4:a5:9f:2a:62:d2:19:c1:94:c1:
                    02:13:95:f5:a0:9f:9f:21:62:d6:06:1c:30:ce:59:
                    8e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:86:C2:E8:E0:17:73:F5:CD:22:FC:38:19:7A:8E:D2:D2:2B:2A:D3
            X509v3 Authority Key Identifier:
                keyid:3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a653030313a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:e001::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:6e:19:56:09:31:8d:01:3f:8d:08:33:84:21:78:25:1f:a1:
         87:e1:70:2d:d7:98:48:db:1b:8c:42:a6:bd:6b:48:10:b3:ce:
         fb:a8:b9:4e:9f:f7:98:a2:4b:ea:8e:ed:97:68:0b:c5:11:58:
         79:63:d3:cf:0f:fe:35:9d:91:d4:36:54:99:bf:33:b8:5e:8f:
         ce:2b:11:ed:e6:8a:38:f8:5a:cb:e1:51:a8:f6:2f:6d:ce:e5:
         95:dd:3a:19:7a:23:1b:bb:da:a7:0d:47:c3:ba:0f:fe:5e:98:
         9d:8b:d9:1f:1e:01:d6:8c:94:2d:44:45:d0:e8:ec:03:7d:f6:
         2e:1d:ce:88:02:e0:a2:03:97:0d:62:27:73:9e:12:a1:7c:14:
         76:07:e9:9e:a7:79:6d:7a:07:cd:b6:18:76:ae:73:b8:87:a1:
         55:72:ff:37:03:5e:ed:43:69:ad:d2:5c:90:12:67:c9:ca:62:
         dc:f8:e8:66:08:f9:9c:cb:50:32:9a:f6:1a:87:21:2a:11:3f:
         00:e2:d8:d1:80:3c:43:e8:79:71:a8:84:05:ae:8a:f2:6c:9c:
         87:a9:bc:72:c2:cd:2d:6a:82:4e:58:cc:4d:97:51:34:63:f7:
         6b:f4:f7:1d:e6:a7:b1:ba:44:86:23:39:0c:52:f6:82:10:44:
         dc:28:86:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 12:09:23 2025 by rpki-client