Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a343030303a3a2f33352d3335203d3e20323637393631.roa
File:                     323830343a353564633a343030303a3a2f33352d3335203d3e20323637393631.roa (raw, json)
Hash identifier:          bkaj0RwKDwRh1Zie7SkeEu+86AVYTfCcyblAQLFbK3A=
Subject key identifier:   EE:AC:22:3A:63:25:CF:B2:26:F4:70:C2:CD:9D:9E:FF:46:86:13:F0
Certificate issuer:       /CN=D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9
Certificate serial:       7BAEEA0FAD174C6F228DA32CE931C3BFAF6F2AD9
Authority key identifier: D2:AE:FA:F2:B7:60:F9:72:62:D0:C9:4D:C2:7C:0D:3B:1B:7D:B5:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a343030303a3a2f33352d3335203d3e20323637393631.roa
Signing time:             Wed 23 Apr 2025 23:40:50 +0000
ROA not before:           Wed 23 Apr 2025 23:35:50 +0000
ROA not after:            Wed 22 Apr 2026 23:40:50 +0000
asID:                     267961
IP address blocks:        2804:55dc:4000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.crl
                          rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 17:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ae:ea:0f:ad:17:4c:6f:22:8d:a3:2c:e9:31:c3:bf:af:6f:2a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9
        Validity
            Not Before: Apr 23 23:35:50 2025 GMT
            Not After : Apr 22 23:40:50 2026 GMT
        Subject: CN=EEAC223A6325CFB226F470C2CD9D9EFF468613F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:68:c2:3f:2e:07:5e:0b:4c:b6:a8:64:9b:a5:
                    e8:11:02:f9:14:42:5f:20:b3:0c:13:bb:58:8d:2f:
                    3a:b1:c1:7b:f1:df:3e:a4:d8:63:d7:57:a3:aa:81:
                    05:fc:34:e1:91:ab:2d:3c:7e:d3:a9:08:cf:28:c3:
                    b7:ac:5a:53:fd:06:a4:40:74:a3:6d:ab:f7:0b:85:
                    ca:2f:3e:a2:dd:a4:83:5d:fa:01:fd:8b:94:e3:81:
                    ab:26:79:e5:83:ae:10:9a:55:75:a3:4d:3c:9c:06:
                    48:2d:d5:24:e3:8b:21:36:bd:63:3c:6e:57:15:8e:
                    19:b9:8d:69:0b:75:68:df:4a:f5:13:0b:fa:f0:bc:
                    01:d2:1a:bd:d6:78:44:61:73:94:29:7c:a2:a4:ae:
                    db:4a:a4:04:72:7d:c4:39:39:57:7e:6d:24:85:52:
                    99:1c:77:09:30:d8:59:e6:09:3d:06:e3:9f:d3:d2:
                    74:97:d6:de:6e:2a:91:25:cc:e3:6e:69:7d:64:31:
                    68:6f:ad:f2:81:83:15:5b:71:b2:38:b8:ba:ea:fe:
                    e3:cf:f6:3a:9e:89:38:76:75:ae:e0:ad:3e:f0:29:
                    38:aa:be:dd:a1:6e:2c:c0:55:a7:9d:cb:3b:e4:54:
                    2a:18:ab:6d:b2:80:4a:64:f6:d2:51:bd:6b:6b:5d:
                    91:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AC:22:3A:63:25:CF:B2:26:F4:70:C2:CD:9D:9E:FF:46:86:13:F0
            X509v3 Authority Key Identifier:
                keyid:D2:AE:FA:F2:B7:60:F9:72:62:D0:C9:4D:C2:7C:0D:3B:1B:7D:B5:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a343030303a3a2f33352d3335203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55dc:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         69:aa:24:92:c9:be:c4:86:00:28:23:a0:cd:60:bb:c1:91:ed:
         46:70:e9:ab:10:10:43:b3:c0:dc:1e:72:1f:64:6f:2c:49:15:
         6d:ce:d8:7d:ef:0b:9b:0e:e2:77:80:92:96:3f:3c:72:91:ef:
         3b:d2:f7:ff:4c:c5:9e:a4:77:ef:35:10:9d:75:08:e3:0c:36:
         8c:b1:0e:a4:fb:52:b3:5a:0c:8e:83:e8:27:3b:66:7b:3c:dd:
         e3:39:0c:89:40:e4:2e:d0:f5:ab:7c:2e:05:75:7d:45:c0:d6:
         35:b9:6b:57:e6:b8:01:76:c8:40:d2:2b:4b:69:8c:22:c6:5c:
         65:22:16:ec:17:48:fe:a2:d9:1c:43:34:f5:19:94:b6:7a:70:
         eb:8c:25:24:5b:6d:2e:5e:81:6e:01:b3:d5:7c:51:45:77:60:
         c0:20:4c:4e:7e:34:2d:03:06:64:00:e8:cb:b2:c8:b0:fa:ee:
         4c:1b:71:fc:9a:6f:e4:55:b2:26:25:86:e4:a0:bb:d3:ed:df:
         9f:a8:69:24:ff:54:fb:6c:5c:d7:a5:55:f9:e8:39:2b:ef:eb:
         0b:03:c8:de:56:01:8c:5c:2d:12:f7:e9:cd:b5:2c:ed:ab:ec:
         91:37:0b:1d:4d:72:a9:f9:30:c8:6b:2a:7d:a7:9a:3c:18:f5:
         6a:29:93:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:01:57 2025 by rpki-client on console.sobornost.net