Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a343030303a3a2f33352d3335203d3e20323637393631.roa
File:                     323830343a353564633a343030303a3a2f33352d3335203d3e20323637393631.roa (raw, json)
Hash identifier:          1GQNM0WWdtKIUrvAVYY1je2lv7TzWA9Izw6W9WHefS0=
Subject key identifier:   32:4A:CE:0E:C8:1E:24:1C:2F:AA:3C:25:3F:B9:24:9C:59:5C:38:55
Certificate issuer:       /CN=09B7AECB18318973134EAE9276452AE4B68453CF
Certificate serial:       1618FAC41D15674532CEF3811D318F50B14AC3C1
Authority key identifier: 09:B7:AE:CB:18:31:89:73:13:4E:AE:92:76:45:2A:E4:B6:84:53:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B7AECB18318973134EAE9276452AE4B68453CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a343030303a3a2f33352d3335203d3e20323637393631.roa
Signing time:             Mon 26 May 2025 16:07:22 +0000
ROA not before:           Mon 26 May 2025 16:02:22 +0000
ROA not after:            Mon 25 May 2026 16:07:22 +0000
asID:                     267961
IP address blocks:        2804:55dc:4000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/09B7AECB18318973134EAE9276452AE4B68453CF.crl
                          rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/09B7AECB18318973134EAE9276452AE4B68453CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B7AECB18318973134EAE9276452AE4B68453CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 21:42:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:18:fa:c4:1d:15:67:45:32:ce:f3:81:1d:31:8f:50:b1:4a:c3:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B7AECB18318973134EAE9276452AE4B68453CF
        Validity
            Not Before: May 26 16:02:22 2025 GMT
            Not After : May 25 16:07:22 2026 GMT
        Subject: CN=324ACE0EC81E241C2FAA3C253FB9249C595C3855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:15:e5:2e:d2:ed:11:4d:39:23:dd:ce:ef:e2:
                    e2:00:3a:11:a3:29:bd:87:c0:ed:6b:2d:bf:ed:76:
                    42:71:05:cf:e8:35:3d:4a:6c:18:8c:85:c8:e6:cb:
                    2e:d7:0d:e8:10:ea:a1:ff:1e:cb:24:9b:97:ef:a3:
                    87:36:3a:1f:1b:64:39:28:d0:86:e7:9f:fb:f2:94:
                    a5:97:c1:a0:94:ad:59:cd:e0:80:62:44:c4:7e:a2:
                    3f:73:1c:fe:22:c3:46:48:f2:d3:37:1d:56:e5:f7:
                    9e:1f:fe:dd:9a:d4:56:8b:45:85:c7:06:77:af:10:
                    b9:92:b5:61:53:f4:11:41:bb:1d:b2:a0:e1:24:b2:
                    33:06:de:82:a4:5c:8b:92:b8:b9:18:28:ad:68:ef:
                    de:c9:98:6e:73:70:99:a6:7b:e0:8d:a9:da:c0:ad:
                    36:3f:14:2c:71:8c:ab:78:9b:4b:01:e4:27:29:a6:
                    72:e2:2f:d6:6c:b7:23:ea:dd:6d:d5:35:3d:a1:19:
                    bc:53:d2:4e:08:cc:5a:34:49:72:77:23:bf:9b:af:
                    0d:f5:9a:8d:3e:18:e5:52:79:48:b6:7e:0e:6d:48:
                    2f:fd:21:61:1c:55:7b:ea:87:75:98:26:2d:a0:28:
                    25:0f:50:ff:e6:d6:04:5f:21:8d:c2:34:b4:3f:44:
                    3b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4A:CE:0E:C8:1E:24:1C:2F:AA:3C:25:3F:B9:24:9C:59:5C:38:55
            X509v3 Authority Key Identifier:
                keyid:09:B7:AE:CB:18:31:89:73:13:4E:AE:92:76:45:2A:E4:B6:84:53:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/09B7AECB18318973134EAE9276452AE4B68453CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B7AECB18318973134EAE9276452AE4B68453CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a343030303a3a2f33352d3335203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55dc:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         54:ac:38:6e:36:76:11:06:5e:bd:31:2a:2a:0b:64:9e:a1:ff:
         73:dd:d0:24:3c:ed:df:67:cf:74:98:7c:80:4a:5b:d6:d9:6f:
         8b:37:0c:69:a1:2d:59:22:86:91:ec:f6:78:9e:10:56:5a:b3:
         e8:15:45:a6:85:e4:8d:ce:62:7f:56:4f:77:72:37:b8:e2:9c:
         cc:a8:16:33:59:50:16:ab:2c:32:da:6c:3e:b3:a8:36:98:d5:
         7b:b6:b4:3e:92:9c:cc:70:8c:5c:7e:09:0e:94:77:5c:73:2e:
         46:6b:49:92:e9:a9:9d:c8:0d:5a:16:6f:ff:86:e8:e0:eb:dd:
         b2:d9:86:91:25:26:c6:04:84:53:fd:d2:61:3f:0c:6a:3d:0e:
         70:d7:0c:89:ac:bf:18:ee:e9:b1:d2:87:c3:f8:64:20:de:f2:
         02:1c:2e:2d:4a:82:5a:d2:35:92:de:ca:38:f9:1f:d3:a8:bc:
         38:96:66:32:a8:ba:9f:7a:5c:7f:68:15:e9:d1:2a:fa:ef:96:
         a8:bd:62:72:da:76:26:3c:1d:19:f0:5a:2c:be:f8:e5:c8:c9:
         65:a7:6f:cc:35:18:08:fa:48:5a:1d:8a:96:98:7f:3a:4d:3b:
         2b:44:76:a9:c7:49:6f:40:d0:68:66:04:c3:2a:54:77:49:d1:
         01:63:65:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 09:02:12 2025 by rpki-client