Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a323030303a3a2f33352d3335203d3e20323637393631.roa
File:                     323830343a353564633a323030303a3a2f33352d3335203d3e20323637393631.roa (raw, json)
Hash identifier:          k/1JsOh1u76pCzPyD3+oZpJ28x+LST7deMuAFrrnxkg=
Subject key identifier:   7E:69:4F:74:B1:02:F8:A6:7F:61:4D:A5:9E:FF:1A:D2:05:B0:8D:E6
Certificate issuer:       /CN=DB20EFFC604C0A0B4EA1164B7FD7670E251B3675
Certificate serial:       10C36F3724813E11642E01ACE0843D5E0BBC0B6E
Authority key identifier: DB:20:EF:FC:60:4C:0A:0B:4E:A1:16:4B:7F:D7:67:0E:25:1B:36:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB20EFFC604C0A0B4EA1164B7FD7670E251B3675.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a323030303a3a2f33352d3335203d3e20323637393631.roa
Signing time:             Sat 10 May 2025 20:20:28 +0000
ROA not before:           Sat 10 May 2025 20:15:28 +0000
ROA not after:            Sat 09 May 2026 20:20:28 +0000
asID:                     267961
IP address blocks:        2804:55dc:2000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/DB20EFFC604C0A0B4EA1164B7FD7670E251B3675.crl
                          rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/DB20EFFC604C0A0B4EA1164B7FD7670E251B3675.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB20EFFC604C0A0B4EA1164B7FD7670E251B3675.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 02:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c3:6f:37:24:81:3e:11:64:2e:01:ac:e0:84:3d:5e:0b:bc:0b:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB20EFFC604C0A0B4EA1164B7FD7670E251B3675
        Validity
            Not Before: May 10 20:15:28 2025 GMT
            Not After : May  9 20:20:28 2026 GMT
        Subject: CN=7E694F74B102F8A67F614DA59EFF1AD205B08DE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9a:dd:37:6a:be:4c:2c:65:52:05:de:8b:1e:
                    02:2c:be:f1:5a:de:71:d1:1d:8b:2f:3a:81:b4:54:
                    97:0d:5c:d1:15:0f:4d:12:a6:81:90:8b:73:e5:7b:
                    78:52:07:db:75:11:52:b9:f3:86:77:f3:83:8b:1d:
                    f7:03:58:a3:7f:7a:ec:09:ff:33:d1:8d:57:2a:97:
                    c9:13:90:f9:d9:73:60:3f:29:14:c6:33:55:d6:28:
                    97:d8:b8:39:95:30:57:77:14:9c:a8:da:80:87:1c:
                    0a:e3:60:ac:17:45:56:68:24:8b:6c:29:26:68:49:
                    9d:fe:7c:ec:22:44:95:75:d2:7b:93:a7:0c:0a:87:
                    56:af:82:4c:fc:8e:64:46:61:19:97:83:57:1d:13:
                    44:60:a2:2e:a3:29:ae:57:9e:c8:55:4b:04:d0:e3:
                    03:82:4c:c1:ad:b1:02:c0:49:5e:fe:44:c7:d9:c5:
                    55:99:32:45:16:c0:73:c1:e0:09:1b:b9:c5:f4:a3:
                    34:f1:53:17:2b:9b:fc:15:98:84:9e:b1:1e:5d:47:
                    28:84:df:c2:5c:ed:b2:e6:1e:38:85:ab:d0:2c:d6:
                    f4:3f:81:a8:d6:b3:74:87:bd:cd:41:3b:85:28:e6:
                    3a:b3:80:72:56:ee:54:62:ed:6c:a8:79:bc:6c:0c:
                    f9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:69:4F:74:B1:02:F8:A6:7F:61:4D:A5:9E:FF:1A:D2:05:B0:8D:E6
            X509v3 Authority Key Identifier:
                keyid:DB:20:EF:FC:60:4C:0A:0B:4E:A1:16:4B:7F:D7:67:0E:25:1B:36:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/DB20EFFC604C0A0B4EA1164B7FD7670E251B3675.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB20EFFC604C0A0B4EA1164B7FD7670E251B3675.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a323030303a3a2f33352d3335203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55dc:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         00:3e:75:23:b1:d2:bb:fd:f3:a3:49:7a:1b:73:aa:88:9e:d9:
         31:a9:4d:d2:08:8c:46:4b:bc:45:01:f3:bd:31:3b:3b:ec:f4:
         3b:e6:c0:e1:c8:d6:5e:c7:a9:e7:ab:90:b3:36:60:f2:07:ae:
         fc:7a:f9:cc:b0:26:01:35:c9:8e:29:a3:1a:5a:ae:ed:41:fa:
         81:c6:3c:c4:c2:f9:e4:2d:dc:6a:04:61:d8:c0:47:45:99:d4:
         cc:db:77:57:a6:2f:dc:f7:21:e4:43:20:85:6f:2d:0e:8e:92:
         28:39:35:e4:bd:9b:ea:2a:27:14:18:5e:51:94:79:bb:18:f0:
         4a:03:05:db:41:21:1d:0a:30:2d:35:49:b2:25:55:40:3e:6c:
         49:c6:84:98:3b:84:5e:ae:73:fa:35:46:0f:f9:27:02:e3:ce:
         fe:e5:2a:26:04:cb:74:c1:76:a5:0c:02:99:8f:70:a0:3d:3f:
         54:e3:e6:db:ee:9c:cf:58:0a:94:a2:d4:8b:a1:ba:3f:1c:fb:
         09:65:99:22:db:09:f5:0d:f7:80:3a:ea:08:38:fd:a5:59:33:
         af:8a:3a:f2:bc:d6:9a:c2:a5:e1:35:7f:17:ec:14:96:28:f3:
         dd:d7:e9:43:c9:b1:da:5a:07:27:d9:dd:b8:7a:e5:d9:1f:ed:
         2b:13:2b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:07:39 2025 by rpki-client