Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/323830343a366536633a383030303a3a2f33342d3334203d3e20323730353936.roa
File:                     323830343a366536633a383030303a3a2f33342d3334203d3e20323730353936.roa (raw, json)
Hash identifier:          HbjQpnv7QcfAlkrzeVDmUvWsDAuW/3z/NGn1q0T7Pd0=
Subject key identifier:   DF:3F:8E:BE:05:8A:0D:2B:8D:2A:AC:3C:E4:87:86:1C:D7:F4:56:DE
Certificate issuer:       /CN=7F46E725B7708034062721804237B31B8C88616E
Certificate serial:       78CCA73909E9B83B8D58F0E8FFEA507EDBD2AC02
Authority key identifier: 7F:46:E7:25:B7:70:80:34:06:27:21:80:42:37:B3:1B:8C:88:61:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F46E725B7708034062721804237B31B8C88616E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/323830343a366536633a383030303a3a2f33342d3334203d3e20323730353936.roa
Signing time:             Mon 28 Jul 2025 16:46:18 +0000
ROA not before:           Mon 28 Jul 2025 16:41:18 +0000
ROA not after:            Mon 27 Jul 2026 16:46:18 +0000
asID:                     270596
IP address blocks:        2804:6e6c:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/7F46E725B7708034062721804237B31B8C88616E.crl
                          rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/7F46E725B7708034062721804237B31B8C88616E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F46E725B7708034062721804237B31B8C88616E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 03:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:cc:a7:39:09:e9:b8:3b:8d:58:f0:e8:ff:ea:50:7e:db:d2:ac:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F46E725B7708034062721804237B31B8C88616E
        Validity
            Not Before: Jul 28 16:41:18 2025 GMT
            Not After : Jul 27 16:46:18 2026 GMT
        Subject: CN=DF3F8EBE058A0D2B8D2AAC3CE487861CD7F456DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:18:13:88:45:a1:1f:86:eb:13:3a:f5:e0:0e:
                    31:e5:19:c2:81:63:09:7c:ef:71:1b:18:f8:b0:57:
                    eb:96:78:ab:54:f4:74:0a:85:f1:ec:1c:63:f5:8a:
                    1a:96:2c:4d:90:2b:ee:85:48:f1:da:eb:a5:5e:cd:
                    9c:81:a2:99:0f:68:2f:46:7f:16:5f:c5:40:23:9d:
                    ce:2a:07:f0:83:7b:97:42:5a:2e:01:ef:14:be:76:
                    47:a4:96:91:9e:65:64:ca:03:95:db:99:39:39:5c:
                    26:ba:87:c1:8c:9d:a9:33:a8:f5:cc:92:12:a4:6d:
                    ba:c5:8b:fd:49:7b:a8:ed:d7:9b:ac:e2:58:01:f8:
                    0c:4c:01:9b:3b:bd:82:f0:a4:4d:1e:21:4c:e6:d2:
                    12:85:50:5f:76:bd:f4:7d:03:7c:7f:05:11:34:ce:
                    75:cc:2d:0b:e8:9e:9b:1c:75:ec:e5:ed:04:e0:ff:
                    37:dd:11:35:4f:04:5b:ed:5a:68:9c:b0:c1:dc:0b:
                    4a:83:3e:16:8d:ee:40:52:0d:74:30:7f:9a:be:69:
                    83:76:ea:dd:bf:e7:4c:d5:b2:51:2a:ee:e8:ac:55:
                    83:9d:a6:b4:ba:28:a0:6d:95:83:db:c5:55:84:bd:
                    69:6f:21:13:b3:b5:f1:33:fd:79:03:4c:cf:fe:d5:
                    15:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3F:8E:BE:05:8A:0D:2B:8D:2A:AC:3C:E4:87:86:1C:D7:F4:56:DE
            X509v3 Authority Key Identifier:
                keyid:7F:46:E7:25:B7:70:80:34:06:27:21:80:42:37:B3:1B:8C:88:61:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/7F46E725B7708034062721804237B31B8C88616E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F46E725B7708034062721804237B31B8C88616E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/323830343a366536633a383030303a3a2f33342d3334203d3e20323730353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e6c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0e:8c:39:1f:65:40:63:16:95:bd:48:7f:c7:ca:90:e0:67:72:
         4c:71:0d:d8:14:cc:e7:b7:78:d8:5f:d2:6e:8d:d6:22:bc:79:
         d6:93:e7:31:3e:1b:55:1e:ae:52:e5:b7:3c:15:20:96:20:a8:
         79:ff:58:5a:6f:72:64:89:d9:d7:1f:22:ac:38:e8:89:9a:e9:
         b8:58:88:63:7f:ed:9a:e3:78:fa:89:0b:c2:f8:53:c3:ec:cb:
         1e:9a:8f:a3:db:76:9d:25:ae:87:6b:36:e2:7e:fa:96:e4:74:
         6a:22:3b:3a:f7:94:96:c9:34:44:b3:5d:7a:86:80:7f:cc:fe:
         38:3d:82:b7:d4:a4:8d:3e:81:f6:d4:25:9e:e8:87:3f:f6:42:
         d6:a9:3c:c2:38:a6:8a:6e:15:1e:8a:96:92:6c:80:50:fd:eb:
         52:0a:53:0b:44:be:5d:2f:11:56:90:44:f8:63:5a:d5:09:9b:
         89:37:ec:9b:88:ba:05:d5:d4:a9:da:bb:d4:56:fd:b9:0f:a4:
         24:e6:fa:83:80:fe:b3:81:6e:07:b9:1a:7a:94:4e:0f:63:b0:
         44:9d:28:5c:86:4d:2e:63:f5:68:9d:66:b9:c6:64:c0:09:3a:
         1c:b1:3c:fb:8d:01:d3:e4:ac:0b:66:82:1c:ad:e6:35:79:aa:
         ab:fa:db:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:54:07 2025 by rpki-client