Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a363030303a3a2f33352d3335203d3e20323637393631.roa
File:                     323830343a353564633a363030303a3a2f33352d3335203d3e20323637393631.roa (raw, json)
Hash identifier:          QG2FYqaYSQEsTDpspjCQypMIQKxGgakvMvEX5wKvMus=
Subject key identifier:   A5:CB:C9:91:8D:64:49:38:87:8B:B3:52:46:72:7D:26:09:09:F1:6A
Certificate issuer:       /CN=5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60
Certificate serial:       6AB4176900EA3A01ABBBDB3A01610BC46E6C9A28
Authority key identifier: 5B:8A:BC:40:57:DF:F8:AB:24:E1:4E:53:57:6B:0E:9E:C7:23:CF:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a363030303a3a2f33352d3335203d3e20323637393631.roa
Signing time:             Wed 10 Jun 2026 19:37:02 +0000
ROA not before:           Wed 10 Jun 2026 19:32:02 +0000
ROA not after:            Wed 09 Jun 2027 19:37:02 +0000
asID:                     267961
IP address blocks:        2804:55dc:6000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60.crl
                          rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:b4:17:69:00:ea:3a:01:ab:bb:db:3a:01:61:0b:c4:6e:6c:9a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60
        Validity
            Not Before: Jun 10 19:32:02 2026 GMT
            Not After : Jun  9 19:37:02 2027 GMT
        Subject: CN=A5CBC9918D644938878BB35246727D260909F16A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0d:db:01:68:87:96:89:ef:95:ce:aa:7a:a5:
                    9e:d3:4e:cc:fc:c7:00:5b:f9:20:40:10:ec:8a:b4:
                    8e:c0:7d:ea:a3:98:35:35:27:6e:38:9e:49:ce:13:
                    ee:38:d6:a8:d0:f1:b7:5c:b0:94:d5:25:24:09:2a:
                    94:dc:1b:29:d5:7e:4f:74:fb:85:37:83:6e:f3:5c:
                    94:21:59:ca:01:88:89:6b:d4:38:ce:7c:3b:0c:1f:
                    7a:c1:20:35:6c:de:a2:20:c0:6f:07:56:02:4d:60:
                    eb:7c:47:18:00:7a:32:3e:4f:f9:d0:b4:50:fd:5f:
                    85:48:3a:03:d5:10:7e:a2:ab:c1:f5:a3:df:38:e2:
                    c6:1e:46:41:40:0e:a1:bf:10:b4:57:f3:dd:e0:c5:
                    b9:e5:76:8d:79:6b:7d:47:4f:f7:a9:0c:7e:35:4f:
                    fc:af:10:3c:48:2c:3f:9b:fb:83:d8:c6:93:f1:46:
                    7f:3b:27:c3:58:3f:59:6f:15:30:cf:d6:f4:c6:55:
                    63:0f:8e:8b:1f:9b:5a:0f:76:11:4a:66:ec:b3:53:
                    63:5b:e8:62:85:2d:44:75:4c:d9:c0:8d:15:81:7a:
                    7b:3d:2f:c3:17:04:a8:6d:61:d5:ed:e1:f1:5a:e0:
                    54:36:91:a8:0f:22:e4:84:bd:ea:04:51:29:61:cd:
                    6a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:CB:C9:91:8D:64:49:38:87:8B:B3:52:46:72:7D:26:09:09:F1:6A
            X509v3 Authority Key Identifier:
                keyid:5B:8A:BC:40:57:DF:F8:AB:24:E1:4E:53:57:6B:0E:9E:C7:23:CF:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a363030303a3a2f33352d3335203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55dc:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         55:39:a7:14:80:cd:cc:8e:37:73:78:81:ce:a9:c2:11:49:a4:
         d8:11:f2:03:5d:79:76:00:ec:8b:40:e4:5e:61:c4:f6:a1:d2:
         34:a4:f8:bc:a7:91:d8:c0:17:1c:ea:4c:32:97:ed:dc:b1:25:
         fa:6b:cd:09:21:01:9a:8d:6b:91:de:f7:12:d4:43:55:f6:fc:
         f3:18:c3:9f:94:c7:ee:c4:62:92:75:20:34:37:c3:70:29:fb:
         4f:a1:1c:b0:f0:de:4d:01:8b:20:39:38:cc:32:e7:07:1a:80:
         66:0c:e5:c6:47:52:b3:66:7a:66:73:62:d4:31:d0:31:08:32:
         f1:c8:e5:28:6a:93:c5:8d:a5:59:66:c5:ff:4b:69:8b:99:2d:
         81:32:9f:50:f4:97:97:15:62:31:2b:b5:6f:93:75:dc:ac:8f:
         ef:c9:bf:f4:c1:d7:67:f7:06:3f:b6:2f:bf:3e:3d:9a:6a:6a:
         db:9b:da:da:63:2c:aa:46:6b:2e:e0:eb:c4:36:33:0b:09:74:
         0d:2a:a1:7b:1c:2a:bd:9d:9b:76:6f:c2:1c:0c:69:e1:7a:5a:
         d9:51:30:7c:5c:2d:91:fb:51:74:18:bb:c5:54:2e:fc:e4:c0:
         cb:9e:4c:d9:c2:78:2e:6b:cd:7c:c2:a2:25:b5:81:1e:88:92:
         d5:8f:30:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:14:40 2026 by rpki-client