Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a633030303a3a2f33352d3335203d3e20323637393631.roa
File:                     323830343a353564633a633030303a3a2f33352d3335203d3e20323637393631.roa (raw, json)
Hash identifier:          np1jqQMR3/lJKXAlveJforFy3ETieWN6bOwuFDnr7iQ=
Subject key identifier:   18:8C:4F:A6:4B:6B:4F:7C:41:FA:6C:86:1E:0C:B4:0C:98:13:F3:6D
Certificate issuer:       /CN=09B7AECB18318973134EAE9276452AE4B68453CF
Certificate serial:       32A5FB720BC10D5DAC592CD29AD175565FF98B7C
Authority key identifier: 09:B7:AE:CB:18:31:89:73:13:4E:AE:92:76:45:2A:E4:B6:84:53:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B7AECB18318973134EAE9276452AE4B68453CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a633030303a3a2f33352d3335203d3e20323637393631.roa
Signing time:             Mon 26 May 2025 16:07:21 +0000
ROA not before:           Mon 26 May 2025 16:02:21 +0000
ROA not after:            Mon 25 May 2026 16:07:21 +0000
asID:                     267961
IP address blocks:        2804:55dc:c000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/09B7AECB18318973134EAE9276452AE4B68453CF.crl
                          rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/09B7AECB18318973134EAE9276452AE4B68453CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B7AECB18318973134EAE9276452AE4B68453CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 21:42:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a5:fb:72:0b:c1:0d:5d:ac:59:2c:d2:9a:d1:75:56:5f:f9:8b:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B7AECB18318973134EAE9276452AE4B68453CF
        Validity
            Not Before: May 26 16:02:21 2025 GMT
            Not After : May 25 16:07:21 2026 GMT
        Subject: CN=188C4FA64B6B4F7C41FA6C861E0CB40C9813F36D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4b:8e:57:25:0f:38:60:e1:61:5d:a4:33:f3:
                    31:ea:3d:47:3c:d5:80:99:31:4e:c8:43:f9:ca:c2:
                    a8:ed:0b:4a:24:26:f1:cf:cd:54:ee:fe:a8:b2:e0:
                    3f:4e:79:25:72:01:a0:6b:d8:39:ce:59:96:01:24:
                    fc:36:0a:b4:af:5d:47:5d:2b:21:64:29:37:6a:09:
                    7d:36:e5:1b:ee:02:4e:78:ac:48:e7:63:20:d8:1b:
                    5e:a6:8b:22:9d:1b:df:cb:b2:c4:1b:68:62:b1:96:
                    b7:39:fa:ab:7c:16:7a:92:e6:c5:60:5a:43:fa:db:
                    40:84:d3:25:23:13:c8:a4:f4:e7:c3:2d:52:3c:9f:
                    0d:3d:e5:87:6b:6d:ce:bf:04:ea:84:67:3a:30:31:
                    9d:fd:f2:6e:83:1c:34:ad:e4:87:80:08:af:19:a3:
                    93:29:6d:09:cd:aa:0f:5d:fc:eb:a7:9a:b6:3b:2b:
                    9c:5c:ca:54:86:63:aa:23:00:2a:77:e6:4f:cf:57:
                    f3:86:9b:ef:d2:c1:e9:74:ee:65:ac:1f:ec:cc:a3:
                    81:1c:98:c5:53:ce:bc:d6:d8:1d:5d:9b:0e:ad:a4:
                    9e:df:19:f2:19:0b:c0:f4:0b:84:a6:52:f2:39:fa:
                    08:4e:e0:6d:40:cf:38:49:e8:71:82:ee:80:1e:f8:
                    2b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8C:4F:A6:4B:6B:4F:7C:41:FA:6C:86:1E:0C:B4:0C:98:13:F3:6D
            X509v3 Authority Key Identifier:
                keyid:09:B7:AE:CB:18:31:89:73:13:4E:AE:92:76:45:2A:E4:B6:84:53:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/09B7AECB18318973134EAE9276452AE4B68453CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B7AECB18318973134EAE9276452AE4B68453CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a633030303a3a2f33352d3335203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55dc:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         0d:66:4b:dc:97:f5:84:5d:ad:f4:68:4f:2c:99:d8:49:48:95:
         a1:14:71:d6:2b:9c:37:d9:bf:94:67:d0:1a:77:82:1c:9a:6f:
         a1:1f:8a:ad:88:d1:30:55:7f:95:86:9e:89:47:ec:fd:df:73:
         71:47:e9:59:ac:d7:b6:6a:31:77:d7:a6:58:df:a9:64:01:46:
         02:bc:30:38:7c:a2:d4:4c:da:4f:e4:d1:a5:f9:7b:0b:5d:79:
         1f:f1:5e:71:d5:68:79:cb:f3:3e:e4:d5:b2:45:e3:47:59:83:
         df:e8:48:93:ec:b9:ae:ba:04:11:d8:2f:ed:bd:ca:48:59:c7:
         83:6a:98:ef:21:3c:7a:c6:6a:e8:37:d1:4c:fb:bc:62:69:56:
         d6:30:56:56:d1:23:9e:e2:4e:61:5e:3a:9b:79:68:f7:0b:c2:
         0c:c5:ad:b1:05:be:cd:c7:f1:cb:94:9e:9f:62:42:e3:cd:3b:
         41:77:12:1a:c3:ae:7a:cb:f2:e6:59:53:d8:a7:6f:e1:bb:15:
         3d:cb:c6:68:31:e4:78:d2:49:91:37:a9:fd:28:f1:75:69:0e:
         60:2b:73:f2:19:da:7c:87:13:fe:2c:fa:c3:01:c1:5c:f3:39:
         bb:90:90:17:16:e2:50:1f:63:35:4e:0a:d5:91:7e:ed:d5:8e:
         76:f8:9d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 09:00:52 2025 by rpki-client