Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ReLAaV4xbkck6iW8RecStyxe3RA6N5h7hcDXABxYi5u/0/323830343a363431343a3a2f33322d313238203d3e20323639343033.roa
File:                     323830343a363431343a3a2f33322d313238203d3e20323639343033.roa (raw, json)
Hash identifier:          TXu6Bd9rx8rdxxd+L5vshG+EFZ6i7gzIUQaxq5oxECM=
Subject key identifier:   22:D8:78:63:ED:6B:19:DF:C7:A3:52:74:81:DD:06:5A:AD:50:27:88
Certificate issuer:       /CN=46E84850835B7708ECE5E3073FFEA7A8DF9BEA60
Certificate serial:       653FB82A6C21257BCD75B0C257AA3F6D8DD3C8BC
Authority key identifier: 46:E8:48:50:83:5B:77:08:EC:E5:E3:07:3F:FE:A7:A8:DF:9B:EA:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ReLAaV4xbkck6iW8RecStyxe3RA6N5h7hcDXABxYi5u/0/323830343a363431343a3a2f33322d313238203d3e20323639343033.roa
Signing time:             Mon 12 May 2025 14:34:47 +0000
ROA not before:           Mon 12 May 2025 14:29:47 +0000
ROA not after:            Mon 11 May 2026 14:34:47 +0000
asID:                     269403
IP address blocks:        2804:6414::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ReLAaV4xbkck6iW8RecStyxe3RA6N5h7hcDXABxYi5u/0/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.crl
                          rsync://rpki-repo.registro.br/repo/ReLAaV4xbkck6iW8RecStyxe3RA6N5h7hcDXABxYi5u/0/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Jun 2025 12:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:3f:b8:2a:6c:21:25:7b:cd:75:b0:c2:57:aa:3f:6d:8d:d3:c8:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E84850835B7708ECE5E3073FFEA7A8DF9BEA60
        Validity
            Not Before: May 12 14:29:47 2025 GMT
            Not After : May 11 14:34:47 2026 GMT
        Subject: CN=22D87863ED6B19DFC7A3527481DD065AAD502788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:84:23:0f:58:fe:f8:58:52:f4:6c:61:84:c1:
                    76:af:29:5a:db:a5:94:c2:88:5c:8d:eb:58:fc:4d:
                    88:be:27:a6:29:0b:e8:22:a7:6f:81:aa:41:97:c4:
                    d4:b5:cb:e2:63:72:fc:ec:cb:cc:2a:66:6f:7d:0f:
                    c6:63:9f:27:c1:14:1f:5c:20:d3:3e:02:47:10:4d:
                    45:08:d6:58:6b:c5:37:6d:31:ea:a6:d0:c0:f7:35:
                    9b:81:50:a9:55:4a:70:80:b1:e4:ee:83:d4:e2:7c:
                    6c:5b:f7:f7:9e:00:e6:af:ff:48:e1:f5:d5:12:b1:
                    8e:db:73:4c:68:f4:f5:f2:31:9b:11:67:9f:8a:ca:
                    a0:3a:72:7d:9b:25:eb:80:7d:5b:38:d0:51:9d:73:
                    e3:39:f4:39:ff:df:27:59:af:69:fd:cf:a3:b2:bb:
                    ac:09:a5:de:e3:4a:1f:b0:73:f4:bb:4b:65:66:97:
                    dc:96:7f:f0:f3:38:5c:c4:78:50:b2:12:09:5c:1f:
                    17:33:e0:44:2b:cb:8c:ce:63:22:73:95:3f:23:e8:
                    7f:5e:35:ed:c7:29:bf:ff:e6:ce:5b:db:56:87:8d:
                    d7:f7:ae:75:9a:71:ef:31:f0:de:da:4d:e2:74:e4:
                    6b:f9:38:52:62:1d:77:8f:9d:e9:f3:49:da:4c:44:
                    4a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D8:78:63:ED:6B:19:DF:C7:A3:52:74:81:DD:06:5A:AD:50:27:88
            X509v3 Authority Key Identifier:
                keyid:46:E8:48:50:83:5B:77:08:EC:E5:E3:07:3F:FE:A7:A8:DF:9B:EA:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ReLAaV4xbkck6iW8RecStyxe3RA6N5h7hcDXABxYi5u/0/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ReLAaV4xbkck6iW8RecStyxe3RA6N5h7hcDXABxYi5u/0/323830343a363431343a3a2f33322d313238203d3e20323639343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6414::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:1a:f8:71:a0:8c:5e:5f:d4:f8:3f:de:8d:6d:f9:16:42:11:
         78:f7:4c:e4:7c:f5:c8:67:9d:93:f1:f7:10:ad:6c:c3:24:39:
         5e:aa:91:19:22:0b:66:55:94:1c:8a:37:6d:93:c2:60:2d:76:
         d1:6d:36:31:40:57:71:7e:05:1c:35:09:fb:f8:65:7e:2e:9a:
         b1:16:46:ab:c7:c5:a4:89:a9:5f:54:f3:99:00:5b:92:ef:bc:
         68:48:69:99:58:52:ee:84:00:e5:49:71:f1:10:76:91:25:2b:
         74:63:f5:8b:8d:6b:5e:99:29:cd:b0:e8:96:6f:6a:7d:71:b7:
         2a:25:8c:d2:99:c4:37:23:b6:22:48:f5:d0:30:63:0a:59:09:
         50:67:01:fa:65:eb:7e:4b:89:90:a4:18:25:a2:1b:17:b3:24:
         b4:da:88:27:a0:76:04:95:b9:83:d2:b3:d4:72:f2:fb:6c:53:
         a8:f9:53:77:9a:b9:f8:93:c0:0f:aa:aa:13:6e:c6:66:e1:89:
         fa:80:f0:81:e8:f9:91:99:b8:d8:67:64:58:3c:a6:c6:28:63:
         68:05:2f:ad:04:91:42:39:dd:f0:00:70:52:ae:12:de:11:9a:
         ed:07:a4:02:22:e8:0a:df:37:2b:e9:33:0b:23:c6:a1:11:dc:
         48:ca:6b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:39:49 2025 by rpki-client