Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a653030303a3a2f33352d3335203d3e20323637393631.roa
File:                     323830343a353564633a653030303a3a2f33352d3335203d3e20323637393631.roa (raw, json)
Hash identifier:          Yk4Jel8E1uTX7720UqDRHKOnGGGPyCOGIpCnJ3LBcVY=
Subject key identifier:   B4:BD:1D:73:AB:CD:6E:7E:AE:C9:B2:79:C5:19:55:29:D9:0E:1C:42
Certificate issuer:       /CN=5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60
Certificate serial:       46967A5F1FAC4DFAEDFE407240F758F1CAB82ED3
Authority key identifier: 5B:8A:BC:40:57:DF:F8:AB:24:E1:4E:53:57:6B:0E:9E:C7:23:CF:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a653030303a3a2f33352d3335203d3e20323637393631.roa
Signing time:             Wed 10 Jun 2026 19:37:00 +0000
ROA not before:           Wed 10 Jun 2026 19:32:00 +0000
ROA not after:            Wed 09 Jun 2027 19:37:00 +0000
asID:                     267961
IP address blocks:        2804:55dc:e000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60.crl
                          rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:96:7a:5f:1f:ac:4d:fa:ed:fe:40:72:40:f7:58:f1:ca:b8:2e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60
        Validity
            Not Before: Jun 10 19:32:00 2026 GMT
            Not After : Jun  9 19:37:00 2027 GMT
        Subject: CN=B4BD1D73ABCD6E7EAEC9B279C5195529D90E1C42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f2:e5:d5:5f:f8:fa:12:22:b7:ba:62:6a:64:
                    f2:02:80:c8:6f:30:5e:c1:58:1d:03:76:28:01:47:
                    3d:83:6c:6d:87:d9:78:4a:8a:30:b4:27:38:c0:29:
                    3c:c0:fc:6d:25:29:b9:25:b4:1f:f3:73:fe:14:54:
                    ab:b4:d8:bf:cf:d8:07:d1:fe:f1:32:ec:d7:1f:ae:
                    02:ce:fb:7a:8c:c7:0c:33:c6:1e:b3:51:62:a5:5b:
                    ae:68:6f:7e:2b:1f:63:2b:8b:18:f8:f1:8d:ff:78:
                    fb:f3:49:aa:e1:13:11:ba:65:81:5b:b3:fe:e3:4a:
                    53:b4:3d:7e:d7:05:30:75:53:54:16:26:ca:7f:b4:
                    46:f7:9d:37:1b:e5:33:95:b8:cb:01:3f:8d:a6:7e:
                    a3:af:f8:ba:5a:2a:34:b2:60:90:a1:b7:64:7b:89:
                    b1:f4:5f:d7:7c:38:fd:88:41:f3:e1:a0:b4:d2:76:
                    dd:51:1d:3e:bb:cb:bf:cb:73:16:bd:8a:0a:71:c6:
                    d9:a0:85:ad:93:f0:f9:c6:d5:76:00:58:bc:8c:3a:
                    39:04:2d:87:2b:cf:14:db:f4:f4:01:b8:4f:1a:e0:
                    db:a7:44:e0:c1:1d:86:d0:9f:52:2c:66:79:1b:7e:
                    10:41:b7:4a:4d:34:07:7e:e6:77:40:46:72:bd:08:
                    a4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:BD:1D:73:AB:CD:6E:7E:AE:C9:B2:79:C5:19:55:29:D9:0E:1C:42
            X509v3 Authority Key Identifier:
                keyid:5B:8A:BC:40:57:DF:F8:AB:24:E1:4E:53:57:6B:0E:9E:C7:23:CF:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a653030303a3a2f33352d3335203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55dc:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         a1:03:05:9f:a2:72:d6:74:fd:84:39:b3:9c:99:af:46:85:cd:
         5a:05:93:a3:1d:9f:a6:a6:e1:c8:df:d9:3e:7d:ca:b9:74:43:
         97:20:e7:f1:2d:a2:df:51:5f:24:d6:9f:90:c4:fa:c9:36:38:
         bc:cb:e8:6c:b4:ca:4b:a7:64:99:f2:11:a3:0a:f4:25:09:2b:
         26:61:a4:71:84:94:9b:a8:14:05:f3:65:d1:ea:92:bf:fa:52:
         fe:07:cc:2f:bd:45:64:f6:22:87:b5:84:2b:fe:95:cd:e3:db:
         b6:51:0e:4c:74:02:e4:28:a9:51:05:e4:8a:02:2a:e5:d8:7d:
         58:4a:52:8b:a7:b5:f7:0b:a8:09:b7:51:37:91:4d:4a:3b:9d:
         1b:35:92:ec:17:de:b3:5c:17:99:cd:8c:8d:8e:10:2f:c4:97:
         b4:9b:a5:b2:6a:7d:17:e6:71:4e:4a:f0:a3:77:28:fc:64:0e:
         1b:c4:fd:ff:b8:63:2c:64:64:62:0a:d9:8e:4d:f0:78:79:d6:
         bc:22:2a:1a:14:6b:2f:bf:6e:f0:4e:47:73:57:68:67:81:21:
         66:00:d9:58:d9:74:49:8f:90:57:23:ed:e2:76:b6:52:d6:da:
         85:4c:55:ab:03:13:67:f8:3c:f6:20:72:c4:05:7d:fd:7f:13:
         95:5f:41:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:14:40 2026 by rpki-client