Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a653030303a3a2f33352d3335203d3e20323637393631.roa
File:                     323830343a353564633a653030303a3a2f33352d3335203d3e20323637393631.roa (raw, json)
Hash identifier:          rXcdWv2XsGgfuGDJqRfKjhPPwxthK+UiZLLc+6Ft2AM=
Subject key identifier:   33:41:98:87:70:AF:2B:50:02:E0:E2:05:2F:DD:67:BE:63:8A:17:CA
Certificate issuer:       /CN=DB20EFFC604C0A0B4EA1164B7FD7670E251B3675
Certificate serial:       24382AFC30A3730C46366E63E2D25EFADAC52479
Authority key identifier: DB:20:EF:FC:60:4C:0A:0B:4E:A1:16:4B:7F:D7:67:0E:25:1B:36:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB20EFFC604C0A0B4EA1164B7FD7670E251B3675.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a653030303a3a2f33352d3335203d3e20323637393631.roa
Signing time:             Sat 10 May 2025 20:20:25 +0000
ROA not before:           Sat 10 May 2025 20:15:25 +0000
ROA not after:            Sat 09 May 2026 20:20:25 +0000
asID:                     267961
IP address blocks:        2804:55dc:e000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/DB20EFFC604C0A0B4EA1164B7FD7670E251B3675.crl
                          rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/DB20EFFC604C0A0B4EA1164B7FD7670E251B3675.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB20EFFC604C0A0B4EA1164B7FD7670E251B3675.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 18:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:38:2a:fc:30:a3:73:0c:46:36:6e:63:e2:d2:5e:fa:da:c5:24:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB20EFFC604C0A0B4EA1164B7FD7670E251B3675
        Validity
            Not Before: May 10 20:15:25 2025 GMT
            Not After : May  9 20:20:25 2026 GMT
        Subject: CN=3341988770AF2B5002E0E2052FDD67BE638A17CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:14:05:bf:95:71:8c:4f:07:71:c4:51:3f:ca:
                    1f:55:b5:43:a1:e5:ae:ba:53:d7:90:af:da:9f:10:
                    5e:7e:63:af:6c:90:7e:25:1d:16:26:b8:a2:f2:96:
                    38:8a:51:a0:a0:54:b2:f4:62:80:2d:1d:5b:14:73:
                    35:9f:bc:d6:42:40:9a:92:d6:88:a8:80:c8:3b:18:
                    23:1a:da:01:24:c3:18:22:2f:69:35:d3:74:f6:e2:
                    30:60:a9:a9:14:ad:30:a9:ba:6b:ac:30:93:2c:d0:
                    8e:a2:5d:7c:1c:cb:68:65:8e:32:1e:cf:ba:17:fb:
                    16:a8:01:0e:5a:f0:e0:c6:07:38:92:39:d0:38:29:
                    b2:0a:ca:05:2c:be:33:b5:10:ce:b9:ea:9c:ee:a7:
                    f7:5d:bc:16:3c:82:c7:35:ff:b1:12:e3:a4:d1:fc:
                    a7:97:52:c1:93:b3:67:b7:c2:75:c2:06:6c:49:8e:
                    6a:6e:a5:1c:48:d2:a3:fb:b7:1b:7a:97:c7:66:a8:
                    eb:6d:10:84:60:0c:39:9e:f7:26:34:eb:b1:54:5d:
                    85:19:9a:22:49:08:d6:40:05:4d:53:7b:3d:6b:e7:
                    e7:98:e6:ea:7b:33:67:1f:54:48:1b:a6:28:4a:34:
                    38:02:e3:1b:a5:7d:d9:ce:80:0e:2d:d9:f9:73:1e:
                    c2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:41:98:87:70:AF:2B:50:02:E0:E2:05:2F:DD:67:BE:63:8A:17:CA
            X509v3 Authority Key Identifier:
                keyid:DB:20:EF:FC:60:4C:0A:0B:4E:A1:16:4B:7F:D7:67:0E:25:1B:36:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/DB20EFFC604C0A0B4EA1164B7FD7670E251B3675.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB20EFFC604C0A0B4EA1164B7FD7670E251B3675.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a653030303a3a2f33352d3335203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55dc:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         00:76:c9:45:af:7e:26:44:1d:d5:ae:d2:de:69:d6:2c:07:56:
         5f:7f:ee:74:75:5b:a9:be:a9:e9:d1:1f:00:70:78:0b:97:30:
         de:7d:5f:57:44:87:23:bf:3e:c2:d5:c7:40:f2:ca:90:29:cc:
         10:71:d4:a6:cb:6e:4f:f5:05:a1:5b:a4:5b:97:6b:04:05:70:
         dd:ac:60:aa:fa:f2:04:18:c8:ca:bc:eb:52:d5:6a:c0:a0:ca:
         de:9b:88:67:20:7a:fa:03:28:34:f0:55:6e:69:64:86:3c:1c:
         2f:52:83:55:85:c2:f6:f5:35:56:4b:cd:f6:65:c3:96:72:ed:
         7d:b3:14:cc:0f:f3:4f:7f:ac:43:76:99:dd:ec:3c:c1:54:3b:
         99:ea:4a:52:c3:8f:71:d6:e1:e8:02:fd:90:33:ab:80:bf:9f:
         94:c5:b8:3f:dc:0f:0f:9e:7b:8b:7a:dc:3a:6f:92:49:1d:59:
         2d:12:5c:2f:0b:b5:9d:46:57:d3:5d:7f:ae:af:8e:18:3d:df:
         00:62:ca:55:36:b7:58:82:96:ff:dc:56:f5:d4:c2:05:97:25:
         95:57:7b:46:89:2d:ce:3a:f7:54:56:c2:48:d5:57:fe:04:3b:
         95:d8:ac:91:3c:06:50:a6:00:26:fa:f2:21:6a:4d:e7:83:49:
         c4:cc:58:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:17:33 2025 by rpki-client