Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a3230303a3a2f34382d3438203d3e20323637353630.roa
File:                     323830343a343334383a3230303a3a2f34382d3438203d3e20323637353630.roa (raw, json)
Hash identifier:          m1v06LuJNwbZXdDC/AkdjBo2NW4C5ahH3JZ56mMJZ/o=
Subject key identifier:   73:47:A8:31:80:03:76:9E:AB:CD:08:F7:5F:AA:F3:32:9E:5E:E6:80
Certificate issuer:       /CN=D6E514A5A677DB731A91891D5052D588E5FAFBD8
Certificate serial:       2EAACD8278C28E42AB410E6692AAC8DB1521C64C
Authority key identifier: D6:E5:14:A5:A6:77:DB:73:1A:91:89:1D:50:52:D5:88:E5:FA:FB:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E514A5A677DB731A91891D5052D588E5FAFBD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a3230303a3a2f34382d3438203d3e20323637353630.roa
Signing time:             Thu 26 Jun 2025 00:57:03 +0000
ROA not before:           Thu 26 Jun 2025 00:52:03 +0000
ROA not after:            Thu 25 Jun 2026 00:57:03 +0000
asID:                     267560
IP address blocks:        2804:4348:200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/D6E514A5A677DB731A91891D5052D588E5FAFBD8.crl
                          rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/D6E514A5A677DB731A91891D5052D588E5FAFBD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E514A5A677DB731A91891D5052D588E5FAFBD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Jul 2025 08:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:aa:cd:82:78:c2:8e:42:ab:41:0e:66:92:aa:c8:db:15:21:c6:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6E514A5A677DB731A91891D5052D588E5FAFBD8
        Validity
            Not Before: Jun 26 00:52:03 2025 GMT
            Not After : Jun 25 00:57:03 2026 GMT
        Subject: CN=7347A8318003769EABCD08F75FAAF3329E5EE680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:91:05:04:3a:71:0c:27:3b:73:74:6c:a9:b2:
                    3c:ab:f2:f7:c2:5a:15:2d:3f:55:65:16:b4:36:2b:
                    d8:6d:b1:9e:a2:b4:89:db:14:dc:9c:2a:a3:de:71:
                    17:3d:9e:69:88:5f:51:16:f9:c9:17:79:36:f2:21:
                    e1:33:29:7e:81:23:8e:f2:a4:12:69:92:3b:7e:97:
                    94:7e:48:a1:d9:be:49:e9:d8:40:fe:b4:87:b9:93:
                    5d:21:86:fb:8c:07:a0:ce:23:89:8b:7d:6b:8b:81:
                    36:af:31:f8:66:89:a4:cc:db:f5:d0:4d:1f:04:0c:
                    a2:46:28:4b:d6:3a:e2:6e:85:05:d0:26:3a:21:19:
                    35:13:ff:39:1a:62:ea:df:ba:e7:7e:50:39:db:2f:
                    72:43:fb:c3:3c:42:c8:42:da:1f:73:07:c5:10:b9:
                    18:1d:a6:9e:51:b3:34:9a:4f:6f:66:f8:a2:ed:a2:
                    dd:5d:b1:6b:55:3d:c4:00:48:b9:ca:12:08:d9:0a:
                    ee:f7:78:20:34:25:50:d0:d3:e8:cf:1c:1f:c7:b3:
                    7b:32:7d:79:a2:be:46:0b:6b:04:cc:ac:ba:cd:d2:
                    20:83:85:f8:a0:77:88:0a:cd:39:44:01:4f:87:25:
                    7d:85:2f:bd:fc:80:53:6b:2a:70:2a:eb:16:0a:26:
                    28:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:47:A8:31:80:03:76:9E:AB:CD:08:F7:5F:AA:F3:32:9E:5E:E6:80
            X509v3 Authority Key Identifier:
                keyid:D6:E5:14:A5:A6:77:DB:73:1A:91:89:1D:50:52:D5:88:E5:FA:FB:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/D6E514A5A677DB731A91891D5052D588E5FAFBD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E514A5A677DB731A91891D5052D588E5FAFBD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a3230303a3a2f34382d3438203d3e20323637353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4348:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:32:0c:c9:4f:59:c5:b9:ff:56:12:c3:6e:6d:7e:9d:8f:9e:
         b7:b7:c0:15:00:00:16:f6:3f:8b:32:da:62:d0:71:58:85:97:
         75:0d:cb:d8:5b:98:1f:8c:94:48:84:d3:e4:09:7a:a9:6c:90:
         1a:6b:b6:09:dc:60:20:57:1e:42:3b:d8:a0:78:2c:df:bc:36:
         e9:9d:c7:c0:f4:26:99:2c:67:de:a8:58:43:25:62:a0:44:d8:
         82:1f:a8:13:c2:80:d3:9c:60:98:06:13:7d:0a:10:9a:dc:a5:
         f1:0d:3b:04:43:8c:2b:29:72:a2:04:d3:01:ef:5d:7d:0e:86:
         0c:75:2c:cd:58:23:a0:5f:6a:63:41:8c:ff:9a:14:9c:4e:f0:
         b9:ab:7b:57:ee:41:97:82:c8:d2:e3:a1:d4:ee:a2:2c:1c:fb:
         4e:8d:e3:85:94:84:dd:2b:23:5c:57:2c:70:4f:b4:d5:bb:e3:
         ef:3b:4a:2f:e0:d6:3e:d3:76:17:9f:ca:3f:e3:ee:2f:6d:9b:
         83:44:9b:97:cc:1d:f0:0a:99:91:12:11:21:05:94:b8:d0:1b:
         f8:c9:ec:20:81:3b:31:5e:3c:3f:9a:ac:9e:97:b6:36:f9:fb:
         9a:35:ef:4c:46:88:d8:ab:e8:dd:2d:80:1d:5c:0a:c2:93:54:
         02:22:63:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 20:54:35 2025 by rpki-client