Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6eCUx46GtW4ZAbeM4t5tW4mwbmPockGAE2nwzsce7wAm/0/323830343a363734303a313030303a3a2f33362d313238203d3e20323639363136.roa
File:                     323830343a363734303a313030303a3a2f33362d313238203d3e20323639363136.roa (raw, json)
Hash identifier:          ApMvZDK1FE9EFWW5V83BXjpL9nkKeUIIR5lAsUjIv6o=
Subject key identifier:   7D:0A:76:B9:30:2F:1C:5F:AE:52:29:FF:00:7C:76:94:F0:A7:A2:5D
Certificate issuer:       /CN=E7D355D61F0E519D364119968134CBF512AC1B57
Certificate serial:       374F0BC7F22F1B7F67F6EEDD644EE303E1FE6198
Authority key identifier: E7:D3:55:D6:1F:0E:51:9D:36:41:19:96:81:34:CB:F5:12:AC:1B:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D355D61F0E519D364119968134CBF512AC1B57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6eCUx46GtW4ZAbeM4t5tW4mwbmPockGAE2nwzsce7wAm/0/323830343a363734303a313030303a3a2f33362d313238203d3e20323639363136.roa
Signing time:             Mon 07 Jul 2025 17:26:36 +0000
ROA not before:           Mon 07 Jul 2025 17:21:36 +0000
ROA not after:            Mon 06 Jul 2026 17:26:36 +0000
asID:                     269616
IP address blocks:        2804:6740:1000::/36 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6eCUx46GtW4ZAbeM4t5tW4mwbmPockGAE2nwzsce7wAm/0/E7D355D61F0E519D364119968134CBF512AC1B57.crl
                          rsync://rpki-repo.registro.br/repo/6eCUx46GtW4ZAbeM4t5tW4mwbmPockGAE2nwzsce7wAm/0/E7D355D61F0E519D364119968134CBF512AC1B57.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D355D61F0E519D364119968134CBF512AC1B57.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 01:52:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:4f:0b:c7:f2:2f:1b:7f:67:f6:ee:dd:64:4e:e3:03:e1:fe:61:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7D355D61F0E519D364119968134CBF512AC1B57
        Validity
            Not Before: Jul  7 17:21:36 2025 GMT
            Not After : Jul  6 17:26:36 2026 GMT
        Subject: CN=7D0A76B9302F1C5FAE5229FF007C7694F0A7A25D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c7:0d:20:ef:dc:ec:de:53:18:e3:ba:ea:97:
                    c0:00:9d:47:06:cf:86:de:2b:f4:58:1b:da:12:9c:
                    1c:7a:ab:4b:67:3b:36:b3:2f:30:29:da:26:53:0e:
                    96:8e:6e:04:f0:9f:55:f6:cc:0e:ff:c7:2b:c3:b3:
                    fd:08:cf:a1:7e:72:73:e5:d5:fb:7d:d8:97:53:60:
                    f5:af:74:e7:3a:70:88:c0:c2:b3:50:43:c7:08:15:
                    0d:ef:5a:c6:b1:29:be:87:2c:46:b5:da:f6:98:cf:
                    33:80:6a:5a:f9:c5:d5:3e:fb:78:a9:c9:5a:93:62:
                    fe:1d:6a:cb:3f:ba:09:d4:05:76:fa:4c:02:b9:c9:
                    d6:65:9e:53:74:70:90:37:fd:83:c9:2d:8a:57:ec:
                    f7:3e:81:b8:3d:f3:21:f9:a3:c2:40:6d:a1:3b:55:
                    69:c0:f4:46:92:3b:a9:6e:05:51:b4:ba:69:a6:a6:
                    10:13:cc:6c:b9:b4:77:31:4e:ba:4f:86:b5:93:35:
                    36:e0:6a:4b:62:ab:90:62:df:3c:3a:c6:42:64:5c:
                    71:e7:da:a7:91:cf:a0:16:bf:1c:9f:d0:59:71:30:
                    91:1f:46:97:2f:06:28:3f:1f:04:8a:0e:26:09:e1:
                    d1:a4:01:41:fa:bc:35:b0:0c:d7:81:39:76:cb:d9:
                    6e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0A:76:B9:30:2F:1C:5F:AE:52:29:FF:00:7C:76:94:F0:A7:A2:5D
            X509v3 Authority Key Identifier:
                keyid:E7:D3:55:D6:1F:0E:51:9D:36:41:19:96:81:34:CB:F5:12:AC:1B:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6eCUx46GtW4ZAbeM4t5tW4mwbmPockGAE2nwzsce7wAm/0/E7D355D61F0E519D364119968134CBF512AC1B57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D355D61F0E519D364119968134CBF512AC1B57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6eCUx46GtW4ZAbeM4t5tW4mwbmPockGAE2nwzsce7wAm/0/323830343a363734303a313030303a3a2f33362d313238203d3e20323639363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6740:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         99:36:18:75:c1:86:ac:82:4b:d8:96:e9:cc:46:c8:e7:55:33:
         56:3b:55:d6:48:32:b7:97:04:b5:25:b6:28:ef:d4:a3:35:a2:
         ba:d4:11:5e:d0:c0:68:71:00:f0:22:72:78:ed:e5:70:f4:ef:
         f4:e6:b6:f7:59:52:21:52:7d:46:cc:59:85:bc:42:5f:1d:ef:
         52:1d:de:dd:86:26:ad:96:18:cc:4d:f7:15:10:45:bc:13:72:
         06:87:15:4e:b1:68:a2:d0:61:f3:34:fc:c0:a9:c0:ef:49:28:
         d7:ce:3b:81:f0:13:86:c6:cd:6d:b5:93:af:9a:fd:cd:da:2f:
         be:a3:fe:51:56:dd:e2:12:e3:bc:70:2d:6c:1f:f0:5a:be:0f:
         07:b2:a1:05:43:c5:55:b8:ee:ab:c4:af:ac:de:78:3d:19:6a:
         19:77:4c:dc:0c:4f:44:ec:7c:53:cd:41:0a:e3:fa:3c:73:03:
         8d:94:11:af:53:1f:aa:6a:d6:d5:d5:4f:c5:9e:13:1e:10:f6:
         76:19:4b:82:48:16:af:b3:79:66:4f:fe:d3:4d:44:ed:f8:35:
         fc:f2:1c:ea:72:2a:80:b6:b3:cf:4e:a2:a4:9f:62:3a:ef:8b:
         3e:84:e9:c0:af:85:a9:cc:81:04:d6:6a:6e:50:1d:0d:77:af:
         3b:8f:da:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:00:52 2025 by rpki-client