Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xCoqL6ZK3Mhdb1SXrThYFnw2pyDrMGDmJpBDgdgooFt/0/323830343a363737633a3a2f33322d3438203d3e20323639363331.roa
File:                     323830343a363737633a3a2f33322d3438203d3e20323639363331.roa (raw, json)
Hash identifier:          gMITwHfyYryr9yXOSSXpxLNoHRwtnVtESAms9DB954Y=
Subject key identifier:   07:87:C0:55:27:47:7B:4C:E8:29:1D:8F:95:9D:F6:34:6C:8A:E6:56
Certificate issuer:       /CN=E9E392EB9046EB1DE4097105335663977865C06D
Certificate serial:       42CE59FF0609EAD47BF330BC6F34BCA159DCC448
Authority key identifier: E9:E3:92:EB:90:46:EB:1D:E4:09:71:05:33:56:63:97:78:65:C0:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9E392EB9046EB1DE4097105335663977865C06D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xCoqL6ZK3Mhdb1SXrThYFnw2pyDrMGDmJpBDgdgooFt/0/323830343a363737633a3a2f33322d3438203d3e20323639363331.roa
Signing time:             Sat 14 Jun 2025 13:53:21 +0000
ROA not before:           Sat 14 Jun 2025 13:48:21 +0000
ROA not after:            Sat 13 Jun 2026 13:53:21 +0000
asID:                     269631
IP address blocks:        2804:677c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xCoqL6ZK3Mhdb1SXrThYFnw2pyDrMGDmJpBDgdgooFt/0/E9E392EB9046EB1DE4097105335663977865C06D.crl
                          rsync://rpki-repo.registro.br/repo/6xCoqL6ZK3Mhdb1SXrThYFnw2pyDrMGDmJpBDgdgooFt/0/E9E392EB9046EB1DE4097105335663977865C06D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9E392EB9046EB1DE4097105335663977865C06D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 04:19:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ce:59:ff:06:09:ea:d4:7b:f3:30:bc:6f:34:bc:a1:59:dc:c4:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9E392EB9046EB1DE4097105335663977865C06D
        Validity
            Not Before: Jun 14 13:48:21 2025 GMT
            Not After : Jun 13 13:53:21 2026 GMT
        Subject: CN=0787C05527477B4CE8291D8F959DF6346C8AE656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:60:e1:d3:2c:1e:f3:64:62:ea:f2:2c:c1:2b:
                    8e:da:f6:f0:e6:64:fa:1f:34:44:64:9b:c0:d3:71:
                    68:39:0f:ec:61:98:ec:73:4e:f8:99:e2:db:ff:1d:
                    a7:d6:3f:5c:42:ec:fc:70:db:af:ec:7f:d0:e5:77:
                    1c:0b:52:4a:ff:c7:44:96:3b:b2:59:97:19:eb:29:
                    92:61:c4:90:eb:96:ea:e8:82:20:58:f8:1f:84:3c:
                    73:67:c4:3c:64:47:dc:7c:d6:5f:1f:35:3b:69:95:
                    07:98:59:6a:1b:b2:48:9d:c5:75:96:8c:a5:e7:1a:
                    02:8a:f8:77:e0:56:8d:69:7a:52:14:b8:d9:96:a1:
                    58:14:38:4c:f2:ab:47:c4:f1:41:51:35:c9:a3:d5:
                    7d:e1:4d:d4:34:f2:a9:e6:b2:83:5a:e2:72:b2:5f:
                    c5:4b:59:af:f6:a8:6a:0b:bd:58:87:52:30:5f:66:
                    45:25:0f:54:2c:49:4d:bd:f2:2e:1f:c8:4d:3b:ca:
                    12:e8:6d:3a:cd:8c:7b:67:8e:55:f6:a3:0d:44:39:
                    1c:a4:44:79:02:aa:27:e1:8f:81:90:1a:76:2b:46:
                    5a:1f:ae:34:c5:c4:e0:83:ee:5e:b5:05:da:73:09:
                    e3:5c:55:70:12:ef:e6:c8:3f:b3:e0:71:ca:e4:b5:
                    8c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:87:C0:55:27:47:7B:4C:E8:29:1D:8F:95:9D:F6:34:6C:8A:E6:56
            X509v3 Authority Key Identifier:
                keyid:E9:E3:92:EB:90:46:EB:1D:E4:09:71:05:33:56:63:97:78:65:C0:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xCoqL6ZK3Mhdb1SXrThYFnw2pyDrMGDmJpBDgdgooFt/0/E9E392EB9046EB1DE4097105335663977865C06D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9E392EB9046EB1DE4097105335663977865C06D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xCoqL6ZK3Mhdb1SXrThYFnw2pyDrMGDmJpBDgdgooFt/0/323830343a363737633a3a2f33322d3438203d3e20323639363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:677c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:58:bc:70:30:2d:2a:c9:f8:27:0e:d4:c0:80:bf:67:0a:fc:
         53:38:5f:0b:cb:11:ef:0c:cb:aa:81:1f:bb:87:4f:a3:87:5d:
         5f:ab:46:36:f7:cd:d9:ba:a2:d7:cb:fb:b0:2f:0e:79:42:19:
         56:13:e2:f7:a1:e8:4e:7d:8d:a9:48:4b:ac:2e:9c:cf:00:b2:
         30:a3:fc:49:34:b0:44:9d:6b:ab:33:2d:01:92:30:c3:9f:63:
         bf:9f:9f:86:2a:29:a3:c4:7f:88:94:5e:f4:69:b9:f2:c6:e7:
         24:f9:90:17:fb:01:96:fd:3d:cd:69:b5:76:fc:74:63:f3:c2:
         e2:0f:cc:48:c2:21:e9:50:88:d4:e8:7b:b9:3d:f5:17:b0:0c:
         ed:0c:21:63:f7:1d:f4:c5:96:6b:6f:3e:6c:6b:a8:72:3b:bd:
         e8:0d:ce:af:59:5d:b3:b5:59:67:65:8f:0c:ff:d5:2d:a3:8c:
         41:d3:cf:04:de:dd:d0:41:37:66:f2:1b:ab:c7:03:ef:d8:e6:
         da:df:f7:42:d5:0a:f7:9d:6a:48:21:90:e5:ea:63:79:11:42:
         23:27:a3:71:cf:b7:59:6a:5a:d0:dd:b6:aa:2f:c3:9f:fa:93:
         dd:d9:fd:e6:52:23:ce:2b:49:90:62:ef:f9:56:bb:a6:25:ed:
         08:eb:c9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 17:34:03 2025 by rpki-client