Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/323830343a353863383a313a3a2f34382d3438203d3e20323638313439.roa
File:                     323830343a353863383a313a3a2f34382d3438203d3e20323638313439.roa (raw, json)
Hash identifier:          iSdpiPc8/kuBYk69RkGa8+ScONlv1rzifIdXKxh7nng=
Subject key identifier:   40:77:A2:63:03:CB:64:ED:C3:82:64:75:23:2B:45:CD:6E:6C:4E:79
Certificate issuer:       /CN=62629DD122858DB38443A4A56BD5A3075CCFACA6
Certificate serial:       26C04B9AD9B5679A8CBA7B675868593C0FAD0479
Authority key identifier: 62:62:9D:D1:22:85:8D:B3:84:43:A4:A5:6B:D5:A3:07:5C:CF:AC:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62629DD122858DB38443A4A56BD5A3075CCFACA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/323830343a353863383a313a3a2f34382d3438203d3e20323638313439.roa
Signing time:             Fri 01 Aug 2025 14:32:45 +0000
ROA not before:           Fri 01 Aug 2025 14:27:45 +0000
ROA not after:            Fri 31 Jul 2026 14:32:45 +0000
asID:                     268149
IP address blocks:        2804:58c8:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/62629DD122858DB38443A4A56BD5A3075CCFACA6.crl
                          rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/62629DD122858DB38443A4A56BD5A3075CCFACA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62629DD122858DB38443A4A56BD5A3075CCFACA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 12:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c0:4b:9a:d9:b5:67:9a:8c:ba:7b:67:58:68:59:3c:0f:ad:04:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62629DD122858DB38443A4A56BD5A3075CCFACA6
        Validity
            Not Before: Aug  1 14:27:45 2025 GMT
            Not After : Jul 31 14:32:45 2026 GMT
        Subject: CN=4077A26303CB64EDC3826475232B45CD6E6C4E79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4e:37:42:12:e5:4c:5b:5c:e9:f8:77:4a:c7:
                    28:36:ec:33:e2:c1:f3:32:10:28:82:02:52:35:92:
                    93:05:e9:06:b5:f4:80:24:84:7e:a3:1f:0d:b6:be:
                    48:98:96:11:91:ea:01:cc:c2:f8:d3:17:8b:04:d2:
                    9a:2b:cf:e6:4f:ca:29:2b:32:25:9d:1b:eb:62:16:
                    20:91:b8:5e:bb:cc:aa:9a:6a:4a:bc:69:86:05:0d:
                    c9:4a:ad:51:19:b1:5d:6a:8f:e5:b7:59:c4:db:af:
                    e7:8a:94:c7:72:01:22:89:54:4a:af:00:21:9c:51:
                    c1:9e:90:35:cb:99:e4:cf:3f:9d:c1:fe:b7:b7:08:
                    59:91:31:22:1b:75:9e:c4:4d:97:a3:7c:a4:6a:fe:
                    f2:a8:1e:d3:9c:7e:18:32:98:b2:00:8f:f0:25:cb:
                    e1:1c:7b:2e:a6:0c:2b:c2:b9:e9:9f:8c:e0:c9:bc:
                    14:95:7b:68:33:45:9b:2a:a2:a2:56:61:fa:82:34:
                    3c:18:43:6b:84:19:24:59:fb:90:23:23:a0:bd:b0:
                    37:fe:7d:98:ae:0b:bb:34:19:58:ca:a0:6d:a0:e2:
                    39:c8:c6:99:30:fd:38:53:1b:e8:65:49:a1:92:46:
                    e6:6f:5c:64:49:5d:db:2a:81:c0:38:23:05:e5:44:
                    00:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:77:A2:63:03:CB:64:ED:C3:82:64:75:23:2B:45:CD:6E:6C:4E:79
            X509v3 Authority Key Identifier:
                keyid:62:62:9D:D1:22:85:8D:B3:84:43:A4:A5:6B:D5:A3:07:5C:CF:AC:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/62629DD122858DB38443A4A56BD5A3075CCFACA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62629DD122858DB38443A4A56BD5A3075CCFACA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/323830343a353863383a313a3a2f34382d3438203d3e20323638313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58c8:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:02:3d:83:ba:f0:36:1b:35:29:be:ee:76:0b:0d:6f:87:b5:
         b7:fc:ea:89:e0:fc:88:81:04:24:76:88:99:01:e2:2e:8f:5b:
         02:36:b8:64:71:a8:46:f6:17:bd:f4:f9:7a:39:c4:83:f8:be:
         aa:74:2e:45:15:ff:0b:c1:84:6c:08:2b:06:34:c3:d7:29:18:
         3c:07:e2:33:ac:2a:10:1d:a0:23:49:c5:83:47:91:48:09:e5:
         76:5d:92:a0:02:68:ae:d0:a5:86:12:ae:6e:39:70:b4:78:fe:
         66:24:79:03:9a:dc:8d:01:d5:4e:dc:9a:d6:ea:05:da:9c:60:
         c3:d0:2d:89:e3:3b:cb:c9:e2:a9:be:b1:1c:07:2b:62:b4:b4:
         54:6e:70:ed:09:3c:e7:7f:f3:47:61:4c:07:9a:5f:b5:c5:d9:
         4d:ab:8d:09:df:77:3e:0a:1d:9b:45:0b:94:71:18:ff:a4:4b:
         bb:d9:3d:b4:fe:3c:08:bf:32:70:28:93:7a:eb:d1:66:56:e6:
         af:2a:03:3a:4f:8b:c0:03:d2:9c:2a:67:dd:b9:56:c5:f9:df:
         65:9d:fd:98:19:67:4d:e6:a0:dd:72:35:61:4e:68:e4:e6:62:
         92:97:40:66:bc:cc:4d:c9:57:6b:fc:12:ce:af:8e:4d:2c:38:
         fe:db:e9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:04:56 2025 by rpki-client