Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a323030303a3a2f33362d3336203d3e20323637353630.roa
File:                     323830343a343334383a323030303a3a2f33362d3336203d3e20323637353630.roa (raw, json)
Hash identifier:          OSR0T7AilKcNz0FrgkEjdFalR8DuNGADovI0y/Nz8PU=
Subject key identifier:   6B:67:82:13:52:43:B0:DA:64:BD:69:7E:7C:33:E0:93:14:43:6A:44
Certificate issuer:       /CN=D6E514A5A677DB731A91891D5052D588E5FAFBD8
Certificate serial:       03EA447D87FE7391BF0E804503593BDF02F903AF
Authority key identifier: D6:E5:14:A5:A6:77:DB:73:1A:91:89:1D:50:52:D5:88:E5:FA:FB:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E514A5A677DB731A91891D5052D588E5FAFBD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a323030303a3a2f33362d3336203d3e20323637353630.roa
Signing time:             Thu 26 Jun 2025 00:57:02 +0000
ROA not before:           Thu 26 Jun 2025 00:52:02 +0000
ROA not after:            Thu 25 Jun 2026 00:57:02 +0000
asID:                     267560
IP address blocks:        2804:4348:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/D6E514A5A677DB731A91891D5052D588E5FAFBD8.crl
                          rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/D6E514A5A677DB731A91891D5052D588E5FAFBD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E514A5A677DB731A91891D5052D588E5FAFBD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Jul 2025 08:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ea:44:7d:87:fe:73:91:bf:0e:80:45:03:59:3b:df:02:f9:03:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6E514A5A677DB731A91891D5052D588E5FAFBD8
        Validity
            Not Before: Jun 26 00:52:02 2025 GMT
            Not After : Jun 25 00:57:02 2026 GMT
        Subject: CN=6B6782135243B0DA64BD697E7C33E09314436A44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:42:8d:7d:5b:52:a4:84:b8:f4:8f:2e:f0:80:
                    26:86:e1:26:cb:9d:4d:25:16:c7:bf:44:dd:2c:6e:
                    01:40:93:2c:e0:0c:d3:c0:b4:c8:92:b1:52:ba:1e:
                    44:18:52:e7:5a:a4:25:2c:a3:95:da:57:a3:5f:0b:
                    7c:03:96:4c:ff:d0:0b:88:06:b4:8e:97:da:49:38:
                    44:4b:c7:4b:a0:28:03:7e:63:67:6f:20:ed:68:d0:
                    76:88:3c:d7:78:5a:7c:ce:0d:93:72:84:4b:2a:a3:
                    5a:94:ad:89:5a:d1:fb:b5:df:bc:3d:3d:bb:ed:49:
                    6c:35:7f:fd:bf:b9:0b:7a:0c:ce:bb:8a:38:2d:15:
                    c2:37:7c:e3:f3:9d:83:75:39:06:c2:ca:66:a4:6e:
                    0b:cc:a3:6f:68:43:f1:21:b7:4b:80:91:b1:e6:88:
                    af:d0:6d:63:bb:7f:f0:7e:38:13:46:c4:de:aa:d1:
                    1f:43:39:96:fa:d4:eb:45:0f:17:e1:98:de:2c:9f:
                    f0:f4:0c:97:2b:ce:9b:cc:0d:da:95:61:e9:ed:1a:
                    2b:ec:26:e0:18:5d:be:c9:d9:82:ee:89:e4:c0:02:
                    c1:bf:ca:9e:b1:2a:b4:2a:9d:28:2f:a0:c4:92:c8:
                    8a:5a:b0:50:f6:45:7c:2b:4e:d1:10:4b:4c:b5:5e:
                    bd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:67:82:13:52:43:B0:DA:64:BD:69:7E:7C:33:E0:93:14:43:6A:44
            X509v3 Authority Key Identifier:
                keyid:D6:E5:14:A5:A6:77:DB:73:1A:91:89:1D:50:52:D5:88:E5:FA:FB:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/D6E514A5A677DB731A91891D5052D588E5FAFBD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E514A5A677DB731A91891D5052D588E5FAFBD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a323030303a3a2f33362d3336203d3e20323637353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4348:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         06:54:33:77:e9:32:69:6e:43:0c:57:e0:fb:2d:ac:37:72:e0:
         f8:84:86:e2:ba:54:e8:3f:71:8f:a3:c1:cb:9d:ae:eb:56:57:
         b8:f5:4d:ec:e4:ab:69:81:73:a0:c3:ea:2d:f7:8e:33:a1:49:
         a2:46:14:f4:35:ab:77:94:73:51:f5:dc:2a:bc:6a:75:78:68:
         85:2f:c6:6e:bc:c3:70:d3:b6:6f:91:39:21:72:f7:47:4e:75:
         a9:29:7f:aa:05:1c:8d:9f:a1:95:cb:32:f5:c4:fe:e6:c7:2e:
         b4:a5:f7:20:c1:ef:cf:66:a8:a9:b2:e2:d0:e1:fc:d9:58:04:
         26:5a:37:df:0c:be:2d:5f:ff:0c:56:db:ce:dd:50:45:07:bb:
         b3:22:4b:85:52:2b:b9:09:a4:bc:f2:12:12:e0:b0:2d:0a:a5:
         46:32:a2:bb:06:55:b1:f7:6c:f9:ce:f8:dc:0d:58:2e:bf:80:
         dd:97:c9:4c:bd:d0:fc:1a:1a:ab:01:c3:1e:dd:65:6d:65:da:
         ae:c7:ee:3e:9f:17:84:33:7f:58:8c:a8:0d:c0:b3:53:69:68:
         d3:73:33:23:92:7a:ad:b5:4c:af:fe:3a:da:73:bd:c9:a9:66:
         e0:2c:54:72:21:61:65:0f:f0:07:a3:e8:57:ad:c8:66:b5:de:
         b1:20:e7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 20:53:53 2025 by rpki-client