Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a663030303a3a2f34362d3436203d3e20323634343232.roa
File:                     323830343a316535383a663030303a3a2f34362d3436203d3e20323634343232.roa (raw, json)
Hash identifier:          NeWXwnrAKoJ2JGC8o/1u+GwRFbBRHdwGmYcRYO+ZqYw=
Subject key identifier:   F4:6E:E2:AC:3C:DF:1C:F4:B0:F7:E4:5C:CA:B4:D9:D6:DD:E6:5C:70
Certificate issuer:       /CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
Certificate serial:       2339B2F6CFF4515F6FE00777C645E7371107467E
Authority key identifier: 3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a663030303a3a2f34362d3436203d3e20323634343232.roa
Signing time:             Tue 01 Jul 2025 22:46:29 +0000
ROA not before:           Tue 01 Jul 2025 22:41:29 +0000
ROA not after:            Tue 30 Jun 2026 22:46:29 +0000
asID:                     264422
IP address blocks:        2804:1e58:f000::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 06:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:39:b2:f6:cf:f4:51:5f:6f:e0:07:77:c6:45:e7:37:11:07:46:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
        Validity
            Not Before: Jul  1 22:41:29 2025 GMT
            Not After : Jun 30 22:46:29 2026 GMT
        Subject: CN=F46EE2AC3CDF1CF4B0F7E45CCAB4D9D6DDE65C70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ce:73:d6:d6:83:a7:01:49:6d:4d:98:6b:16:
                    de:a8:19:c6:8b:05:ec:b9:97:b2:86:4a:35:a1:63:
                    06:b0:c4:26:90:b6:07:47:7f:4c:76:93:4e:a3:db:
                    da:32:b9:f7:a5:31:cf:59:43:bb:54:83:d9:6e:f9:
                    4d:a5:7f:b1:14:80:1f:8a:9a:3c:d3:89:6d:35:fd:
                    be:64:e9:44:07:71:d1:22:5a:88:21:d4:3e:ce:ca:
                    7d:4b:92:aa:d2:0d:43:f1:4c:78:5a:db:9e:01:d9:
                    82:b8:36:38:3a:c4:bb:e8:71:14:af:01:20:b1:29:
                    98:e2:ea:a3:03:8f:79:22:49:90:ba:6e:20:7b:f2:
                    07:6a:38:ef:20:60:f5:66:10:73:d9:05:f5:82:98:
                    8d:66:22:1c:e9:47:9c:29:de:94:c8:e1:d4:8c:af:
                    00:13:f9:f8:7f:05:3a:b0:f9:51:ba:ec:c3:fd:d2:
                    f4:17:68:b2:ee:75:4b:f5:50:c8:9e:6f:f0:ca:ce:
                    11:f2:b8:a8:8b:e0:34:94:1e:7f:fe:11:5f:95:82:
                    89:20:72:95:12:11:8a:2d:9d:5b:a6:4b:15:f0:1e:
                    0b:6f:40:7a:68:56:50:d6:58:46:2a:57:0e:09:8e:
                    0b:c7:78:64:fe:c2:14:fd:3c:70:f9:b8:3f:97:e8:
                    13:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6E:E2:AC:3C:DF:1C:F4:B0:F7:E4:5C:CA:B4:D9:D6:DD:E6:5C:70
            X509v3 Authority Key Identifier:
                keyid:3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a663030303a3a2f34362d3436203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:f000::/46

    Signature Algorithm: sha256WithRSAEncryption
         1d:47:4f:5f:58:12:5e:63:b4:0d:81:ef:9c:2f:37:ff:6c:9e:
         08:45:c4:27:ea:92:cf:fe:38:aa:ad:bc:c7:a9:85:3e:1a:9c:
         3b:86:58:3b:6a:24:56:49:7c:ec:56:8e:e2:8a:4d:8e:33:c2:
         e1:34:dc:fa:eb:30:06:06:d1:69:25:7d:ac:16:6d:99:c5:9a:
         1f:89:5d:d9:0a:17:dd:ef:eb:66:db:88:bd:6b:f7:f0:af:5b:
         a9:f7:24:37:b2:3a:e2:bb:df:8b:4d:5d:73:34:d1:f6:80:e5:
         ef:72:39:2a:49:9c:d8:81:a6:bc:58:6d:b1:0e:8c:af:48:60:
         9e:b7:29:bd:3d:fe:e8:9d:9f:9c:41:a3:8d:22:f1:c0:81:7d:
         77:6a:d6:e8:a9:31:a3:24:8c:a5:98:be:05:5b:2b:a8:21:37:
         97:3a:9d:64:56:ec:ee:ea:49:ba:8e:ce:90:3e:e4:76:13:ea:
         45:6a:92:2d:41:31:41:8a:7b:83:89:e0:09:f6:4e:86:ca:1e:
         cc:88:00:47:68:68:5b:63:79:33:d6:72:c0:21:6c:40:a0:60:
         e4:d8:f4:d3:7d:af:60:93:15:06:15:60:f5:d9:7a:7a:1d:94:
         c2:90:84:dd:4c:95:2b:6c:06:53:41:a1:6b:5c:c1:52:ad:34:
         d7:7b:eb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 12:18:24 2025 by rpki-client