Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a3a2f33322d3332203d3e20323637353630.roa
File:                     323830343a343334383a3a2f33322d3332203d3e20323637353630.roa (raw, json)
Hash identifier:          o26NhON4w6emVNCc7KJjiMW8V5welRS0nMnmFlt9QZk=
Subject key identifier:   30:05:E6:58:8A:50:67:E0:9E:47:19:4A:F6:BC:22:98:DF:84:E8:C5
Certificate issuer:       /CN=5757B4F80D8B38607E29B24387063FFFF6B2B426
Certificate serial:       076977D62C6595EA5A6BA041F2D8E1E6C6BBFE40
Authority key identifier: 57:57:B4:F8:0D:8B:38:60:7E:29:B2:43:87:06:3F:FF:F6:B2:B4:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5757B4F80D8B38607E29B24387063FFFF6B2B426.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a3a2f33322d3332203d3e20323637353630.roa
Signing time:             Thu 05 Jun 2025 19:41:21 +0000
ROA not before:           Thu 05 Jun 2025 19:36:21 +0000
ROA not after:            Thu 04 Jun 2026 19:41:21 +0000
asID:                     267560
IP address blocks:        2804:4348::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/5757B4F80D8B38607E29B24387063FFFF6B2B426.crl
                          rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/5757B4F80D8B38607E29B24387063FFFF6B2B426.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5757B4F80D8B38607E29B24387063FFFF6B2B426.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 22:55:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:69:77:d6:2c:65:95:ea:5a:6b:a0:41:f2:d8:e1:e6:c6:bb:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5757B4F80D8B38607E29B24387063FFFF6B2B426
        Validity
            Not Before: Jun  5 19:36:21 2025 GMT
            Not After : Jun  4 19:41:21 2026 GMT
        Subject: CN=3005E6588A5067E09E47194AF6BC2298DF84E8C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8d:29:cd:c9:58:30:89:a1:e3:32:4c:5b:ff:
                    a7:2f:4b:51:98:af:3c:a5:6e:92:14:1f:ca:e3:c1:
                    68:06:b9:96:b3:fd:ce:f7:e1:c7:7b:d6:96:7a:d2:
                    0f:2c:f8:b3:a8:b2:ad:b6:1b:71:94:bb:2d:7e:c6:
                    60:bd:4c:80:84:e3:36:dd:2f:66:a7:98:cd:4d:df:
                    c9:88:be:57:bf:21:2d:af:68:9e:46:e5:61:7f:4e:
                    d3:9b:28:22:3b:89:95:41:05:8b:28:32:b2:d4:68:
                    dc:ae:d2:0e:fa:e0:96:92:a4:ad:40:69:fe:6a:2f:
                    36:26:57:02:36:55:e9:ab:cf:4c:3b:80:1c:e7:e2:
                    fa:2d:0d:e0:99:23:63:fe:74:60:7c:4c:88:54:f1:
                    fa:fa:12:f7:50:60:0f:b2:82:ae:db:53:a6:f1:81:
                    1c:11:cc:39:3f:fb:1f:40:02:73:4a:62:cd:ac:2c:
                    59:0f:5e:28:88:4a:7a:66:dc:6c:e0:c8:8b:ca:79:
                    c6:40:76:a6:80:3b:d0:81:18:aa:c3:99:cf:9b:6f:
                    dd:66:17:53:60:a1:f2:55:7c:20:a8:48:0e:df:f0:
                    26:68:28:bc:f8:6e:da:2d:5e:d5:09:2e:ba:76:54:
                    23:e3:12:ec:7e:6b:f8:52:7b:5c:5a:cf:24:dd:cd:
                    7b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:05:E6:58:8A:50:67:E0:9E:47:19:4A:F6:BC:22:98:DF:84:E8:C5
            X509v3 Authority Key Identifier:
                keyid:57:57:B4:F8:0D:8B:38:60:7E:29:B2:43:87:06:3F:FF:F6:B2:B4:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/5757B4F80D8B38607E29B24387063FFFF6B2B426.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5757B4F80D8B38607E29B24387063FFFF6B2B426.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a3a2f33322d3332203d3e20323637353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4348::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:cb:1a:83:07:61:2c:7f:ef:72:79:18:12:46:07:fa:5f:a2:
         e6:a7:fc:63:43:5a:87:c7:89:6f:e9:27:7f:9e:47:29:a5:42:
         c9:5c:d8:01:f4:58:3d:c4:59:69:dd:2b:9a:2f:92:5c:5b:5f:
         8e:8e:ad:02:3b:3d:45:89:c1:f8:29:54:51:95:02:9e:94:99:
         81:13:6f:57:be:97:aa:8e:4c:79:f9:9a:a5:42:8d:73:39:22:
         e7:16:b2:f7:a2:ec:7c:30:51:8d:49:c4:3d:4a:f6:b1:d1:35:
         6f:7f:d4:66:a2:72:16:26:5e:c3:c2:fc:79:a3:5a:24:4e:90:
         ff:2d:1a:c2:3f:eb:80:30:10:8a:6c:50:aa:87:75:3c:4d:a2:
         21:5b:2f:43:c4:bb:73:28:03:d1:77:26:84:04:96:a9:9b:0c:
         76:b4:43:18:3d:fb:7d:07:8b:12:d6:0f:d6:6f:18:84:2f:0b:
         e5:31:96:6b:ea:07:7f:ec:7a:17:50:a9:26:9e:d5:d2:34:a3:
         36:0c:ff:c8:97:54:8c:c0:19:b6:da:72:02:dd:50:98:20:ef:
         99:ce:f1:5f:9e:7c:65:cc:5d:d8:a0:db:4e:7c:7a:04:25:6f:
         e9:1a:59:b4:57:09:0b:5b:f8:49:a2:c7:f7:2c:c6:c3:b8:99:
         0f:73:fa:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 19:22:03 2025 by rpki-client