Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a666666633a3a2f34362d3436203d3e20323634343232.roa
File:                     323830343a316535383a666666633a3a2f34362d3436203d3e20323634343232.roa (raw, json)
Hash identifier:          1rmunayl7xotAN+ZGN+dH56QUKCFeW3pakbNVfzUULM=
Subject key identifier:   84:EC:57:49:DA:87:3F:35:6B:C7:71:A2:1D:16:CA:6D:2E:89:B3:F2
Certificate issuer:       /CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
Certificate serial:       2774DA4473BF4E13C1DBA2F527DF7F52CB5D5109
Authority key identifier: 3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a666666633a3a2f34362d3436203d3e20323634343232.roa
Signing time:             Tue 01 Jul 2025 22:46:27 +0000
ROA not before:           Tue 01 Jul 2025 22:41:27 +0000
ROA not after:            Tue 30 Jun 2026 22:46:27 +0000
asID:                     264422
IP address blocks:        2804:1e58:fffc::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 06:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:74:da:44:73:bf:4e:13:c1:db:a2:f5:27:df:7f:52:cb:5d:51:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
        Validity
            Not Before: Jul  1 22:41:27 2025 GMT
            Not After : Jun 30 22:46:27 2026 GMT
        Subject: CN=84EC5749DA873F356BC771A21D16CA6D2E89B3F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f8:d3:4d:a7:e0:6d:bf:c7:37:c4:bb:70:e9:
                    dd:b2:5d:f2:90:a8:32:26:d9:b4:d3:b2:26:ef:98:
                    84:58:48:f4:c2:85:96:57:2f:57:e7:d1:55:29:95:
                    64:01:70:2c:29:ad:94:9f:19:7d:3d:4e:43:37:87:
                    48:f9:bc:fb:07:93:c8:79:7e:d5:e7:03:d7:c1:25:
                    ec:ce:29:c5:e6:13:b2:9b:ed:75:41:0b:d0:13:5e:
                    23:ed:f4:dd:64:14:b5:be:7a:82:5f:f4:c8:1d:68:
                    d2:1b:f7:8b:04:6c:ae:df:49:90:e1:04:5e:38:45:
                    0b:5c:95:5a:c4:bf:de:60:8b:20:b5:3f:df:2b:1f:
                    df:4c:7b:2a:bd:c9:2d:41:c0:aa:67:1f:32:10:f4:
                    bc:cb:c4:e4:60:be:a6:eb:cd:2e:9c:fe:aa:06:15:
                    67:75:48:98:0b:85:4f:32:ed:d7:b8:37:64:ad:66:
                    47:08:d5:a7:6d:1c:d2:1c:cc:64:0a:76:b6:57:e6:
                    c1:68:89:50:5f:43:29:f4:4c:e4:83:54:53:14:b6:
                    1e:ed:f6:30:4c:f5:26:97:d3:2c:18:d8:7a:b0:d2:
                    1f:67:ce:67:2d:9b:66:9a:e1:ee:fd:a2:f2:15:f3:
                    c5:c6:20:40:8a:ed:a0:1e:e9:0c:fc:58:d1:e0:7f:
                    6d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EC:57:49:DA:87:3F:35:6B:C7:71:A2:1D:16:CA:6D:2E:89:B3:F2
            X509v3 Authority Key Identifier:
                keyid:3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a666666633a3a2f34362d3436203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:fffc::/46

    Signature Algorithm: sha256WithRSAEncryption
         09:aa:f3:39:93:09:ac:fd:1e:81:20:db:e9:81:08:52:cb:7a:
         4b:44:4e:2d:ed:dc:1d:b7:4c:fa:69:bc:06:12:91:55:0a:7c:
         58:93:98:96:e4:81:73:8c:e1:89:14:96:e3:ee:96:a8:2a:ff:
         db:ad:bb:3a:ee:9c:1e:0c:31:18:6c:25:01:3b:5f:b3:48:a9:
         45:35:b4:50:83:7e:0e:d2:44:75:f4:11:16:2c:d9:f3:ef:13:
         67:6d:f7:be:a7:b7:ed:36:9e:64:d8:8e:99:ed:dd:23:70:e1:
         8c:f4:bf:16:03:23:53:cc:11:68:0d:8b:54:43:31:da:33:a7:
         cc:59:a1:0a:24:18:52:d4:42:f3:85:a4:a7:3c:db:b6:04:66:
         12:17:f4:c7:4b:f2:a7:6b:d3:c8:16:6f:0c:1e:9b:8f:84:c0:
         1f:a2:c6:07:4d:31:05:f6:ee:ff:47:2b:51:be:26:59:7b:3c:
         ac:e3:e0:3f:e2:cd:42:57:7a:45:f5:68:07:6b:4f:e1:77:af:
         12:c1:a6:c7:d6:c7:4e:8d:71:23:a6:a3:cc:04:a8:ac:7e:b2:
         fb:62:78:6a:1e:22:36:b5:27:d8:16:ce:f9:7e:61:0c:57:5b:
         e6:0a:cf:3c:df:74:d1:21:b8:b1:17:ff:81:d6:30:8d:72:62:
         17:27:98:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 08:43:29 2025 by rpki-client