Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a653030323a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a653030323a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          0QsrzjFDY2hshuVevCoZ6+5oPsFDFlRE3B6TGlmKANw=
Subject key identifier:   1D:63:E9:91:18:8C:2E:3A:68:F0:3A:B0:02:3C:73:66:A5:13:A7:50
Certificate issuer:       /CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
Certificate serial:       2BD4635999B86B43C97EE585C7ED6937A83025F5
Authority key identifier: 3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a653030323a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Tue 01 Jul 2025 22:46:25 +0000
ROA not before:           Tue 01 Jul 2025 22:41:25 +0000
ROA not after:            Tue 30 Jun 2026 22:46:25 +0000
asID:                     264422
IP address blocks:        2804:1e58:e002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 06:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d4:63:59:99:b8:6b:43:c9:7e:e5:85:c7:ed:69:37:a8:30:25:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
        Validity
            Not Before: Jul  1 22:41:25 2025 GMT
            Not After : Jun 30 22:46:25 2026 GMT
        Subject: CN=1D63E991188C2E3A68F03AB0023C7366A513A750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:53:72:6f:01:8f:78:b1:2b:4c:38:dc:bc:1f:
                    39:20:af:41:02:b1:88:c4:92:bc:8b:8e:9f:8a:d7:
                    2f:3c:95:ce:86:c8:4c:f6:d1:17:f9:2f:3c:2e:a0:
                    4d:9f:62:76:a7:75:15:dd:fe:9e:8a:32:12:94:86:
                    d7:39:7f:39:70:a3:73:67:ae:25:c4:b8:65:49:95:
                    09:48:21:a2:ae:e9:db:07:d0:5d:ed:fb:f1:ea:7a:
                    c2:c3:15:ad:c6:f9:8a:23:89:7f:f9:45:3f:98:78:
                    a7:e4:0d:af:16:0f:38:ed:7e:a5:03:58:4e:0a:66:
                    01:d1:3c:74:1d:94:2c:f4:c9:8b:1c:a9:2a:21:31:
                    b5:55:dc:e6:f2:eb:b6:eb:ba:a9:7d:26:6d:f4:14:
                    1d:42:50:c1:5c:4e:af:02:b0:a1:f5:b8:7a:0f:f9:
                    e0:50:dd:a8:ff:41:e7:5d:25:ff:29:f9:11:7e:7e:
                    bc:12:55:05:42:56:c4:c1:8f:8d:74:87:7f:96:d2:
                    5e:ba:c7:8a:0e:e2:e2:f2:aa:e5:c8:49:2c:ad:04:
                    1d:00:27:f0:24:f0:e6:92:a4:3f:f4:8f:0b:07:66:
                    c6:d7:23:66:d4:7e:14:3a:62:53:61:51:41:86:67:
                    ba:b3:58:9b:fe:b4:99:b7:cd:bd:ea:52:6f:8b:30:
                    8d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:63:E9:91:18:8C:2E:3A:68:F0:3A:B0:02:3C:73:66:A5:13:A7:50
            X509v3 Authority Key Identifier:
                keyid:3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a653030323a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:e002::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:75:62:cd:ce:3a:70:54:36:b3:fb:e1:28:d2:e1:18:6e:12:
         9d:23:93:92:0b:60:3a:13:2d:11:9d:f7:c4:6d:87:19:d8:79:
         41:21:d6:65:3c:78:d2:84:ce:c2:e8:cb:0c:30:d3:f8:b9:89:
         06:2c:4f:8b:de:ef:89:89:c1:f7:18:b3:7c:51:6e:bd:bb:79:
         fa:e9:1d:97:d1:89:b9:e2:0a:fa:9a:04:6e:a3:4a:86:b9:65:
         7e:f7:f3:50:3d:0e:1f:15:40:68:a8:16:c8:88:f6:3a:41:91:
         b3:d5:f1:0f:df:02:16:d0:42:9c:a8:17:07:97:42:e6:35:f9:
         e0:87:96:ef:97:cb:f9:8b:60:31:b5:d5:09:a6:4e:94:c1:53:
         73:65:5e:01:8f:fd:d2:f6:18:b4:8e:6e:02:f0:f3:ab:d1:bf:
         ca:23:01:07:20:1f:1a:a3:13:37:a5:35:b8:99:eb:dc:68:f8:
         d7:b8:6e:78:c0:7d:97:24:1b:8f:59:5e:f5:3f:f0:08:65:2f:
         a9:1d:17:02:43:25:2e:f5:f8:ea:7d:e3:93:33:55:d1:e6:02:
         3d:c1:e0:4b:2e:b8:69:dc:9a:25:c3:a4:68:9d:6d:b7:70:51:
         c1:c1:3e:45:f6:09:16:c5:4d:4e:3f:84:9f:e2:2d:d0:e7:d4:
         c4:19:3a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 08:38:46 2025 by rpki-client