Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a323030303a3a2f33352d3335203d3e20323637393631.roa
File:                     323830343a353564633a323030303a3a2f33352d3335203d3e20323637393631.roa (raw, json)
Hash identifier:          PjCOucS5GCDoY704ivLA67VIqdDQLIM1GcaF4XYgTAk=
Subject key identifier:   AF:2D:56:0A:BB:1E:D6:3B:98:76:6D:DB:41:54:C8:D1:77:D0:2F:F0
Certificate issuer:       /CN=09B7AECB18318973134EAE9276452AE4B68453CF
Certificate serial:       7AFEB83E6EA20966F5DEA734468BFF948C1EBDA9
Authority key identifier: 09:B7:AE:CB:18:31:89:73:13:4E:AE:92:76:45:2A:E4:B6:84:53:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B7AECB18318973134EAE9276452AE4B68453CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a323030303a3a2f33352d3335203d3e20323637393631.roa
Signing time:             Mon 26 May 2025 16:07:20 +0000
ROA not before:           Mon 26 May 2025 16:02:20 +0000
ROA not after:            Mon 25 May 2026 16:07:20 +0000
asID:                     267961
IP address blocks:        2804:55dc:2000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/09B7AECB18318973134EAE9276452AE4B68453CF.crl
                          rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/09B7AECB18318973134EAE9276452AE4B68453CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B7AECB18318973134EAE9276452AE4B68453CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 12:28:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:fe:b8:3e:6e:a2:09:66:f5:de:a7:34:46:8b:ff:94:8c:1e:bd:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B7AECB18318973134EAE9276452AE4B68453CF
        Validity
            Not Before: May 26 16:02:20 2025 GMT
            Not After : May 25 16:07:20 2026 GMT
        Subject: CN=AF2D560ABB1ED63B98766DDB4154C8D177D02FF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9f:2d:bf:7e:dd:7d:38:78:01:4b:f7:c6:a8:
                    19:c7:4b:fe:a1:d8:8c:63:a1:73:2f:4f:86:36:72:
                    4b:5a:e9:89:65:e1:03:0d:4e:c0:73:85:bb:79:69:
                    ed:0e:fb:15:12:93:8c:f4:14:a0:1f:3e:2f:75:99:
                    33:89:b9:31:23:74:58:e9:3f:7b:d6:a7:0e:98:89:
                    33:48:06:ad:93:22:0e:03:10:69:c3:7c:82:4e:d0:
                    66:1f:67:49:aa:a9:52:7e:ae:8e:f9:d7:27:07:54:
                    70:03:7a:45:b1:cb:01:29:a7:53:0b:64:67:05:24:
                    b9:42:e9:1b:21:30:2a:de:42:55:2a:8b:48:80:48:
                    db:b2:b1:33:96:5f:10:32:45:28:b6:82:b5:81:a3:
                    c1:e1:a9:4e:06:89:9a:21:72:da:b4:d6:7e:32:08:
                    ff:f4:0d:93:f3:1d:a0:fa:f6:29:6d:bb:1f:61:84:
                    97:28:e7:7f:bc:ec:09:07:08:60:48:d5:dc:c4:e7:
                    50:3f:1a:09:86:34:0d:6c:56:cb:fb:18:58:89:f2:
                    3c:e2:a6:71:8d:35:34:23:56:f6:ec:7c:13:8c:66:
                    04:73:cd:03:ae:78:08:43:b5:a7:5a:0b:44:4c:a5:
                    2c:ca:22:a8:df:5b:92:14:96:63:f7:74:8a:3e:a8:
                    a2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:2D:56:0A:BB:1E:D6:3B:98:76:6D:DB:41:54:C8:D1:77:D0:2F:F0
            X509v3 Authority Key Identifier:
                keyid:09:B7:AE:CB:18:31:89:73:13:4E:AE:92:76:45:2A:E4:B6:84:53:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/09B7AECB18318973134EAE9276452AE4B68453CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B7AECB18318973134EAE9276452AE4B68453CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a323030303a3a2f33352d3335203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55dc:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         6d:a7:e7:f1:63:9e:8d:be:78:55:33:91:de:40:f5:45:e5:38:
         62:53:1c:8d:30:fe:28:52:b9:af:dc:29:4d:91:0c:c2:58:80:
         0c:9b:9c:42:ee:79:47:cb:0a:35:6b:2d:b3:f9:2d:c8:6a:e5:
         fa:ad:52:f5:cb:6f:72:da:89:b9:df:d4:e1:da:e1:bf:e7:be:
         c1:87:8e:82:18:1b:a7:21:15:66:37:8e:47:d7:0c:0a:3f:ba:
         ff:ef:ea:25:15:c6:51:c9:c1:86:15:58:d7:58:98:7c:31:33:
         6d:9f:1c:d6:06:63:85:8b:dd:4f:31:c2:12:58:82:22:ab:d0:
         19:21:ea:22:40:36:8e:de:a9:c6:16:e2:b1:11:43:97:9c:3a:
         8b:4f:ba:40:10:0e:94:0c:a7:1f:3d:39:d9:cc:a1:c2:76:a0:
         73:46:58:e3:1e:f0:67:11:3f:82:89:dc:82:9f:bc:9d:b7:3a:
         66:4f:f1:95:18:7a:e7:a6:b8:58:21:6f:7a:63:b8:62:9e:33:
         12:24:d9:fe:0f:af:c8:78:5a:1c:01:2a:eb:3d:14:9c:28:57:
         f6:67:ce:3a:22:70:38:a6:c5:5e:b9:1e:62:a0:4f:26:9e:70:
         78:bf:b3:68:4b:e6:1a:74:a7:41:cd:e5:6d:c8:b4:58:9e:71:
         4c:c0:32:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:14:09 2025 by rpki-client