Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a383030303a3a2f33352d3335203d3e20323637393631.roa
File:                     323830343a353564633a383030303a3a2f33352d3335203d3e20323637393631.roa (raw, json)
Hash identifier:          H3AP/mF2ATLEuBnUD5TXkYEHFJdbU5rss4Zat9kAaFw=
Subject key identifier:   F1:11:A2:A2:F5:52:C5:42:5E:5E:34:BF:52:F4:0A:0B:EE:28:3A:7C
Certificate issuer:       /CN=DB20EFFC604C0A0B4EA1164B7FD7670E251B3675
Certificate serial:       4B392DE2C4C8F83BD31C65A36B9EAF926889BBEE
Authority key identifier: DB:20:EF:FC:60:4C:0A:0B:4E:A1:16:4B:7F:D7:67:0E:25:1B:36:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB20EFFC604C0A0B4EA1164B7FD7670E251B3675.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a383030303a3a2f33352d3335203d3e20323637393631.roa
Signing time:             Sat 10 May 2025 20:20:28 +0000
ROA not before:           Sat 10 May 2025 20:15:28 +0000
ROA not after:            Sat 09 May 2026 20:20:28 +0000
asID:                     267961
IP address blocks:        2804:55dc:8000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/DB20EFFC604C0A0B4EA1164B7FD7670E251B3675.crl
                          rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/DB20EFFC604C0A0B4EA1164B7FD7670E251B3675.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB20EFFC604C0A0B4EA1164B7FD7670E251B3675.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 18:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:39:2d:e2:c4:c8:f8:3b:d3:1c:65:a3:6b:9e:af:92:68:89:bb:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB20EFFC604C0A0B4EA1164B7FD7670E251B3675
        Validity
            Not Before: May 10 20:15:28 2025 GMT
            Not After : May  9 20:20:28 2026 GMT
        Subject: CN=F111A2A2F552C5425E5E34BF52F40A0BEE283A7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:26:8f:1b:98:9f:36:2b:f9:d4:8d:58:78:dd:
                    f2:36:41:75:b3:c6:c1:30:6d:14:a1:16:bf:cf:ba:
                    57:23:4b:d3:fe:da:54:7b:cf:26:c0:4d:1a:cf:00:
                    83:7a:2c:99:54:27:22:1a:b8:1f:fd:00:a6:9f:fd:
                    b5:42:05:3f:62:2f:7f:a5:90:d5:b7:fe:64:c0:0a:
                    59:1f:15:c5:1f:ef:b6:6d:6a:7f:d9:07:2c:19:82:
                    7d:66:6c:f5:51:e4:9c:f5:06:a1:8d:4c:e9:0d:96:
                    36:88:ad:80:ff:38:2d:d9:23:3a:5c:b4:3a:c5:fe:
                    83:5a:3d:1b:7d:4d:d0:04:8d:d3:77:21:52:71:74:
                    d6:bc:c6:7c:7a:1a:16:c3:f0:d3:9b:01:75:1b:70:
                    bf:1b:4a:aa:91:dc:53:b8:86:e6:d6:d8:44:ca:69:
                    d2:3b:ac:cf:2e:c2:e8:8d:6e:27:0d:14:d0:82:12:
                    77:0d:e3:d5:5f:1f:94:2b:3d:63:0d:b4:57:31:ec:
                    d4:8a:b6:5c:03:8a:f6:33:93:01:9e:7f:98:27:b1:
                    9a:ea:98:82:28:1c:e5:0b:f8:2f:1e:1e:c4:fd:93:
                    53:b0:eb:61:a3:b9:05:54:17:03:93:38:b2:0b:a6:
                    57:e6:0b:8d:a5:c8:a9:58:44:d4:e4:cc:cc:e9:9d:
                    25:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:11:A2:A2:F5:52:C5:42:5E:5E:34:BF:52:F4:0A:0B:EE:28:3A:7C
            X509v3 Authority Key Identifier:
                keyid:DB:20:EF:FC:60:4C:0A:0B:4E:A1:16:4B:7F:D7:67:0E:25:1B:36:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/DB20EFFC604C0A0B4EA1164B7FD7670E251B3675.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB20EFFC604C0A0B4EA1164B7FD7670E251B3675.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a383030303a3a2f33352d3335203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55dc:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         b8:57:99:c6:ae:3a:07:8a:90:9f:f4:f9:4f:b0:b8:d2:9e:37:
         6f:61:1e:aa:af:0d:fd:3f:5b:5d:44:91:07:d5:30:8b:67:c7:
         ce:8f:c1:1d:a3:37:2d:2b:fc:f5:a4:44:44:32:2a:24:6d:4f:
         e5:0b:5e:33:1b:61:18:fa:89:6b:87:c0:6f:5c:3d:15:ec:78:
         3e:e5:86:9e:85:cb:c8:3b:3b:67:af:5e:20:76:68:a6:b5:81:
         4c:f4:bc:b7:6f:96:33:6e:5a:33:c5:88:89:39:92:6b:b6:5f:
         ed:35:04:0e:d2:f5:9c:36:af:5f:17:10:b9:f8:05:11:ac:e8:
         86:83:4b:e3:04:5b:84:ee:b3:12:0f:51:2c:e1:b9:d2:0b:2f:
         75:68:57:d9:44:75:d6:c5:50:f7:7a:95:7f:8c:40:c8:58:f6:
         cb:be:bf:21:4e:18:0f:71:b4:18:6c:dd:e5:96:b1:6b:8e:99:
         99:e4:33:6d:35:ea:a9:d3:1c:99:5a:85:43:f2:2d:07:b7:d4:
         22:8a:33:51:ea:6a:43:a4:f9:3f:47:5a:12:74:a9:8f:a5:63:
         bb:c9:8b:38:a3:15:50:e8:5e:3c:b7:72:0e:eb:c3:b7:ac:5b:
         50:7e:5a:fc:75:45:49:d5:26:ab:03:d5:b6:d9:ec:15:b2:d8:
         b1:45:f0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:58:31 2025 by rpki-client