Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a323030303a3a2f33352d3335203d3e20323637393631.roa
File:                     323830343a353564633a323030303a3a2f33352d3335203d3e20323637393631.roa (raw, json)
Hash identifier:          yFv+OGz0ST4IZ6hS2d5AGVV0EYzNajfdiDHVaapvwbM=
Subject key identifier:   20:02:99:15:82:94:3F:4F:E9:A2:CA:8E:CD:50:ED:27:78:C9:1B:07
Certificate issuer:       /CN=5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60
Certificate serial:       1347AD5A59359F1AB0481ED69FA40B961DA4C27F
Authority key identifier: 5B:8A:BC:40:57:DF:F8:AB:24:E1:4E:53:57:6B:0E:9E:C7:23:CF:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a323030303a3a2f33352d3335203d3e20323637393631.roa
Signing time:             Wed 10 Jun 2026 19:37:04 +0000
ROA not before:           Wed 10 Jun 2026 19:32:04 +0000
ROA not after:            Wed 09 Jun 2027 19:37:04 +0000
asID:                     267961
IP address blocks:        2804:55dc:2000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60.crl
                          rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:47:ad:5a:59:35:9f:1a:b0:48:1e:d6:9f:a4:0b:96:1d:a4:c2:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60
        Validity
            Not Before: Jun 10 19:32:04 2026 GMT
            Not After : Jun  9 19:37:04 2027 GMT
        Subject: CN=2002991582943F4FE9A2CA8ECD50ED2778C91B07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:77:c7:01:aa:83:77:4a:45:6a:fb:21:c4:9a:
                    99:94:df:23:7a:a4:04:a9:d8:fc:1e:14:d2:bb:a1:
                    b9:f8:48:6e:46:d3:41:35:cd:d2:19:bb:c5:26:fa:
                    6a:cb:c4:35:91:4c:e7:99:21:ea:27:1e:1c:94:9f:
                    5f:8c:19:37:fe:6d:cf:05:c2:a2:e0:b5:64:d6:61:
                    3b:5b:55:c4:21:9d:3f:c1:8d:c3:bb:08:fd:b6:28:
                    4d:99:64:bb:a1:ff:f7:91:3e:74:5f:02:5a:9c:bd:
                    e2:2f:a7:4b:74:1a:80:59:6b:85:35:8e:b6:a1:f8:
                    25:c5:a8:cb:5f:f7:8b:35:ff:75:b3:9e:68:3e:07:
                    43:7e:3b:34:22:13:10:af:b8:46:a6:83:58:0a:93:
                    7d:06:87:a7:a4:8f:84:13:02:bb:d5:b7:d2:2f:77:
                    49:71:6b:62:50:2f:ae:aa:42:22:eb:c4:f9:2e:8b:
                    95:0c:e6:26:b6:a1:07:11:45:1f:43:44:31:56:28:
                    e9:71:d3:6f:59:3a:71:6f:92:ce:8c:ab:75:5b:0b:
                    b2:75:66:df:93:19:ac:43:75:c3:af:c7:6c:df:01:
                    d0:1d:de:33:6f:92:ab:f1:01:09:ff:75:b6:56:d8:
                    3c:9d:5f:2e:a1:44:a2:6e:30:ab:df:11:ff:0d:fb:
                    f7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:02:99:15:82:94:3F:4F:E9:A2:CA:8E:CD:50:ED:27:78:C9:1B:07
            X509v3 Authority Key Identifier:
                keyid:5B:8A:BC:40:57:DF:F8:AB:24:E1:4E:53:57:6B:0E:9E:C7:23:CF:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a323030303a3a2f33352d3335203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55dc:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         97:d8:8a:f2:3f:c4:9f:0e:1a:fd:b9:5f:3d:e5:d5:fa:09:b5:
         52:84:c3:b1:00:e5:7b:85:98:ef:80:58:ea:6e:05:c8:a8:0b:
         10:50:01:f6:09:31:8c:4f:cc:97:5d:5b:f9:11:82:a7:da:15:
         52:46:d2:c2:2e:f9:a7:85:d3:5c:3d:2c:c5:de:4b:2b:b7:eb:
         78:cc:c9:95:b8:a2:ab:31:7a:cb:6e:73:2d:b4:20:18:58:13:
         23:13:6d:ba:b5:c7:5c:87:e0:c6:29:3e:66:51:67:58:f5:14:
         1b:68:a5:f0:7d:7b:43:91:6d:d3:a1:b0:06:9d:95:23:96:5f:
         37:44:38:97:38:6a:04:05:26:b3:92:85:e6:c8:38:9c:ab:9f:
         24:f2:9f:74:51:6a:b4:f8:2e:59:3d:f3:43:c8:fd:ab:9e:0a:
         7e:c5:37:13:8d:db:42:92:c5:ad:fd:9e:62:52:13:b3:03:97:
         35:52:ee:a0:c0:a5:e8:f9:e4:f9:99:d7:6d:15:a3:f3:2f:8a:
         8b:28:6b:9e:5c:72:ea:02:3e:09:cf:09:32:11:d0:d5:a5:17:
         a1:9e:a6:51:53:48:cb:ea:f3:79:b6:78:12:e7:f0:83:f8:8d:
         1f:ee:ef:5f:81:66:69:24:ca:76:fd:e3:96:70:4f:9b:94:16:
         6a:54:75:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:59:15 2026 by rpki-client