Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3eQiFvyfTYAJhqRJXisk9bTH7FNnYAkKooQyv8SPSq1/0/323830343a363435383a3a2f33322d313238203d3e20323639343232.roa
File:                     323830343a363435383a3a2f33322d313238203d3e20323639343232.roa (raw, json)
Hash identifier:          gmAxszHFW/rzrqgklmNuBVdY5QBfbbX3U84Seztf3ZQ=
Subject key identifier:   F7:7A:CE:BF:A4:F0:51:F2:41:50:02:00:1D:8D:7E:CC:F3:EC:D0:5C
Certificate issuer:       /CN=6E1612BFC703CE9ABA3EDC58E4EA33EFA24D8B8A
Certificate serial:       7B8CA584212B20C2AF1A0486B26772FB999FDEC1
Authority key identifier: 6E:16:12:BF:C7:03:CE:9A:BA:3E:DC:58:E4:EA:33:EF:A2:4D:8B:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E1612BFC703CE9ABA3EDC58E4EA33EFA24D8B8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3eQiFvyfTYAJhqRJXisk9bTH7FNnYAkKooQyv8SPSq1/0/323830343a363435383a3a2f33322d313238203d3e20323639343232.roa
Signing time:             Mon 28 Jul 2025 21:38:48 +0000
ROA not before:           Mon 28 Jul 2025 21:33:48 +0000
ROA not after:            Mon 27 Jul 2026 21:38:48 +0000
asID:                     269422
IP address blocks:        2804:6458::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3eQiFvyfTYAJhqRJXisk9bTH7FNnYAkKooQyv8SPSq1/0/6E1612BFC703CE9ABA3EDC58E4EA33EFA24D8B8A.crl
                          rsync://rpki-repo.registro.br/repo/E3eQiFvyfTYAJhqRJXisk9bTH7FNnYAkKooQyv8SPSq1/0/6E1612BFC703CE9ABA3EDC58E4EA33EFA24D8B8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E1612BFC703CE9ABA3EDC58E4EA33EFA24D8B8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Aug 2025 11:50:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:8c:a5:84:21:2b:20:c2:af:1a:04:86:b2:67:72:fb:99:9f:de:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E1612BFC703CE9ABA3EDC58E4EA33EFA24D8B8A
        Validity
            Not Before: Jul 28 21:33:48 2025 GMT
            Not After : Jul 27 21:38:48 2026 GMT
        Subject: CN=F77ACEBFA4F051F2415002001D8D7ECCF3ECD05C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1e:97:bb:5f:98:93:72:b7:8e:dc:c0:6d:d2:
                    2d:7c:8f:8c:28:a4:80:d0:52:a2:07:0e:17:96:ce:
                    47:82:5a:16:2f:7c:88:af:71:6e:aa:08:9f:71:5c:
                    7e:2a:a5:1b:88:18:7b:5f:98:53:36:ad:ee:e9:79:
                    16:54:bb:0d:95:b9:81:b3:57:84:1b:f7:a3:00:e2:
                    63:74:89:82:41:6d:5b:15:dc:5b:c0:2c:cf:d7:03:
                    78:90:d8:6e:9c:23:ec:1d:e2:9b:6f:3c:44:2d:b8:
                    0d:8d:6c:39:17:c8:66:11:c9:60:79:5b:76:48:8f:
                    e1:6e:e4:a9:68:75:b0:6f:d5:c9:fa:ff:f0:00:24:
                    23:24:97:a2:1c:1f:58:07:1a:12:9d:f3:e8:46:c3:
                    30:49:7e:69:5a:c2:04:90:1b:32:04:f4:af:8c:1a:
                    01:65:25:eb:03:46:d2:b9:3f:04:21:ab:25:3a:a6:
                    dc:59:b5:b9:cc:f8:67:ba:1a:c6:cf:8f:69:8c:76:
                    1e:d3:28:f3:8f:52:73:47:a1:f0:b5:0d:de:8c:13:
                    1e:28:07:d2:13:42:73:3b:bc:0b:8b:a7:60:20:f9:
                    b0:12:97:3f:23:76:cb:04:d3:22:91:9f:c6:2f:b6:
                    5a:54:08:39:29:94:e3:69:fd:50:63:a4:b2:e9:e0:
                    f2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7A:CE:BF:A4:F0:51:F2:41:50:02:00:1D:8D:7E:CC:F3:EC:D0:5C
            X509v3 Authority Key Identifier:
                keyid:6E:16:12:BF:C7:03:CE:9A:BA:3E:DC:58:E4:EA:33:EF:A2:4D:8B:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3eQiFvyfTYAJhqRJXisk9bTH7FNnYAkKooQyv8SPSq1/0/6E1612BFC703CE9ABA3EDC58E4EA33EFA24D8B8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E1612BFC703CE9ABA3EDC58E4EA33EFA24D8B8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3eQiFvyfTYAJhqRJXisk9bTH7FNnYAkKooQyv8SPSq1/0/323830343a363435383a3a2f33322d313238203d3e20323639343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6458::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:ed:29:e5:6f:51:f1:bb:f7:b1:47:32:d7:ad:b3:80:ad:e6:
         9d:9a:bf:f7:49:93:e1:77:d7:f9:52:c0:1b:de:d0:de:7e:99:
         49:bb:1f:79:3a:e2:de:ef:50:c0:5e:18:17:50:e4:e2:d4:b8:
         c2:30:04:6b:63:d4:bb:d4:a4:47:08:d9:d2:14:51:f5:d5:3b:
         59:99:c5:31:72:c1:10:1c:b9:01:79:77:a6:ac:ff:e7:3b:d5:
         b1:bb:f8:d9:c8:e2:cb:8f:9e:10:9a:45:66:12:e1:8e:ce:8f:
         a4:4f:46:1f:b1:5b:ff:bd:32:3f:14:41:e1:39:1d:d0:7f:49:
         e4:44:89:06:ec:bb:30:39:e9:6e:22:98:20:e8:e0:d3:eb:4a:
         ef:54:e9:25:fc:66:2c:df:05:7a:16:26:2b:55:4a:98:ae:46:
         8b:11:fc:f4:32:50:07:fe:dc:68:e4:6a:b8:53:8c:ea:7a:4e:
         f2:75:cc:45:d7:ee:fd:a1:39:55:81:65:55:a7:3d:f1:a3:33:
         d9:31:2f:73:b7:2b:78:50:4e:19:8c:72:a4:12:32:e2:32:8a:
         86:be:12:b0:28:ca:1c:8a:d8:72:86:54:eb:94:e7:dc:30:0c:
         c6:77:3a:d4:bc:d8:83:ed:c5:00:27:c7:80:13:07:f3:15:38:
         22:a6:bb:81
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUe4ylhCErIMKvGgSGsmdy+5mf3sEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkUxNjEyQkZDNzAzQ0U5QUJBM0VEQzU4RTRFQTMzRUZB
MjREOEI4QTAeFw0yNTA3MjgyMTMzNDhaFw0yNjA3MjcyMTM4NDhaMDMxMTAvBgNV
BAMTKEY3N0FDRUJGQTRGMDUxRjI0MTUwMDIwMDFEOEQ3RUNDRjNFQ0QwNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRHpe7X5iTcreO3MBt0i18j4wo
pIDQUqIHDheWzkeCWhYvfIivcW6qCJ9xXH4qpRuIGHtfmFM2re7peRZUuw2VuYGz
V4Qb96MA4mN0iYJBbVsV3FvALM/XA3iQ2G6cI+wd4ptvPEQtuA2NbDkXyGYRyWB5
W3ZIj+Fu5KlodbBv1cn6//AAJCMkl6IcH1gHGhKd8+hGwzBJfmlawgSQGzIE9K+M
GgFlJesDRtK5PwQhqyU6ptxZtbnM+Ge6GsbPj2mMdh7TKPOPUnNHofC1Dd6MEx4o
B9ITQnM7vAuLp2Ag+bASlz8jdssE0yKRn8YvtlpUCDkplONp/VBjpLLp4PIxAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU93rOv6TwUfJBUAIAHY1+zPPs0FwwHwYDVR0j
BBgwFoAUbhYSv8cDzpq6PtxY5Ooz76JNi4owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTNlUWlGdnlmVFlBSmhxUkpYaXNrOWJUSDdGTm5ZQWtLb29ReXY4U1BT
cTEvMC82RTE2MTJCRkM3MDNDRTlBQkEzRURDNThFNEVBMzNFRkEyNEQ4QjhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZFMTYxMkJGQzcwM0NFOUFC
QTNFREM1OEU0RUEzM0VGQTI0RDhCOEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UzZVFpRnZ5ZlRZQUpocVJKWGlzazliVEg3Rk5uWUFrS29vUXl2OFNQU3ExLzAv
MzIzODMwMzQzYTM2MzQzNTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzkzNDMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGRYMA0GCSqGSIb3DQEBCwUAA4IBAQBj7Snl
b1Hxu/exRzLXrbOAreadmr/3SZPhd9f5UsAb3tDefplJux95OuLe71DAXhgXUOTi
1LjCMARrY9S71KRHCNnSFFH11TtZmcUxcsEQHLkBeXemrP/nO9Wxu/jZyOLLj54Q
mkVmEuGOzo+kT0YfsVv/vTI/FEHhOR3Qf0nkRIkG7LswOeluIpgg6ODT60rvVOkl
/GYs3wV6FiYrVUqYrkaLEfz0MlAH/txo5Gq4U4zqek7ydcxF1+79oTlVgWVVpz3x
ozPZMS9ztyt4UE4ZjHKkEjLiMoqGvhKwKMocithyhlTrlOfcMAzGdzrUvNiD7cUA
J8eAEwfzFTgipruB
-----END CERTIFICATE-----
Generated at Tue Aug 5 16:40:52 2025 by rpki-client