Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a363030303a3a2f33352d3335203d3e20323637393631.roa
File:                     323830343a353564633a363030303a3a2f33352d3335203d3e20323637393631.roa (raw, json)
Hash identifier:          Uz9IlosHV+7Kr3pOc3jzVI06MmFbvtknLe7vi0fu6oA=
Subject key identifier:   5F:80:E2:A2:58:8C:D8:91:7D:88:C3:57:9F:A6:E5:76:1C:C5:70:3F
Certificate issuer:       /CN=D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9
Certificate serial:       6A836BB93CF68969704571BCB84EB8F7DE6CC8FB
Authority key identifier: D2:AE:FA:F2:B7:60:F9:72:62:D0:C9:4D:C2:7C:0D:3B:1B:7D:B5:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a363030303a3a2f33352d3335203d3e20323637393631.roa
Signing time:             Wed 23 Apr 2025 23:40:50 +0000
ROA not before:           Wed 23 Apr 2025 23:35:50 +0000
ROA not after:            Wed 22 Apr 2026 23:40:50 +0000
asID:                     267961
IP address blocks:        2804:55dc:6000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.crl
                          rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 17:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:83:6b:b9:3c:f6:89:69:70:45:71:bc:b8:4e:b8:f7:de:6c:c8:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9
        Validity
            Not Before: Apr 23 23:35:50 2025 GMT
            Not After : Apr 22 23:40:50 2026 GMT
        Subject: CN=5F80E2A2588CD8917D88C3579FA6E5761CC5703F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b4:e6:73:1d:17:de:8a:78:a6:90:95:ec:e3:
                    d0:17:6b:41:ec:22:21:cb:fb:0d:ea:f7:e3:31:83:
                    3c:f3:08:48:18:a8:dc:cc:23:ff:dc:1e:09:dc:99:
                    73:48:fb:76:1d:f5:a9:f0:e8:5e:6e:a8:08:81:e8:
                    17:91:08:d1:ee:4e:8a:3a:2b:34:4e:fd:44:92:d7:
                    12:b2:30:fc:16:87:3e:8e:36:36:19:6f:48:98:92:
                    16:05:a9:c1:b0:45:cb:db:74:06:a2:4b:e8:18:d7:
                    6e:d5:1f:d3:a3:5d:cb:fa:87:97:c6:8f:c4:b0:88:
                    ec:39:75:1d:ec:69:7a:c2:c2:8d:fb:66:90:1d:0f:
                    06:20:98:9e:8f:14:c6:0a:00:11:7c:df:d4:18:92:
                    57:44:3e:7e:b1:9a:04:8f:5b:53:41:81:1d:66:c8:
                    f0:82:f7:66:4c:b7:b2:5e:d5:ab:c7:f6:1a:95:03:
                    04:d7:d1:3b:90:6f:e6:ee:b4:60:2f:c8:05:a7:10:
                    20:ee:21:0b:2c:2f:8c:ff:39:55:b3:5a:dd:8f:9c:
                    f3:c2:eb:71:6c:ce:96:c6:b2:69:a9:a9:e5:3d:ef:
                    9d:5d:35:4a:ac:cf:a8:41:af:c9:a6:65:92:06:d8:
                    9d:35:92:05:bc:2c:54:b4:12:dd:0c:71:a1:35:d2:
                    e5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:80:E2:A2:58:8C:D8:91:7D:88:C3:57:9F:A6:E5:76:1C:C5:70:3F
            X509v3 Authority Key Identifier:
                keyid:D2:AE:FA:F2:B7:60:F9:72:62:D0:C9:4D:C2:7C:0D:3B:1B:7D:B5:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a363030303a3a2f33352d3335203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55dc:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         93:21:b7:7d:92:b0:b4:10:82:38:ec:98:b8:51:08:a8:5e:55:
         3f:2b:fc:60:9e:b8:66:ed:45:c3:08:cd:11:8a:a5:ec:98:8b:
         80:00:35:d5:74:ed:f3:e3:9b:71:d9:52:aa:fb:e9:ec:3c:18:
         08:b8:d6:25:17:74:0f:cb:f8:9f:db:f2:31:7f:95:44:ab:cb:
         59:ec:7a:7f:ac:2d:b3:f9:19:85:9d:ad:8b:f2:20:03:1d:26:
         06:38:ab:88:56:e7:57:bc:98:04:ef:5d:ed:af:de:91:80:c7:
         51:7c:46:16:d7:e4:d8:6b:14:5f:40:39:7a:a9:83:64:73:bf:
         01:d0:c9:fd:ce:ad:23:59:c8:7b:a4:4a:66:6b:05:87:82:55:
         42:d7:f7:6a:34:a1:a6:f3:4d:5a:fb:e5:23:fb:5e:58:39:83:
         5f:3a:72:9c:9d:01:43:47:5b:02:c7:52:ae:fa:40:1b:dd:d1:
         db:f2:5c:3c:23:29:9b:32:90:ea:c1:4d:79:af:b0:94:48:e9:
         dc:a2:ff:78:f6:30:1b:33:55:a4:b4:74:81:de:fb:bd:c3:ea:
         bc:93:c9:68:88:0c:cf:50:5c:7d:19:8f:d6:42:48:ab:5c:87:
         62:f1:f4:ea:42:18:97:ae:9a:b5:c6:5b:36:1b:ac:fd:55:3f:
         3c:92:4a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:01:57 2025 by rpki-client on console.sobornost.net