Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a3a2f33352d3335203d3e20323637393631.roa
File:                     323830343a353564633a3a2f33352d3335203d3e20323637393631.roa (raw, json)
Hash identifier:          3crBFa6P90NHMtldS9jNh0lwXB6CMIoHVZTrwsYuPLw=
Subject key identifier:   11:69:07:88:A7:A2:C5:F3:54:CA:60:02:46:12:49:E1:57:B3:72:99
Certificate issuer:       /CN=D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9
Certificate serial:       46FF3156C8D19B003C6533B76DDFC90D86136E65
Authority key identifier: D2:AE:FA:F2:B7:60:F9:72:62:D0:C9:4D:C2:7C:0D:3B:1B:7D:B5:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a3a2f33352d3335203d3e20323637393631.roa
Signing time:             Wed 23 Apr 2025 23:40:50 +0000
ROA not before:           Wed 23 Apr 2025 23:35:50 +0000
ROA not after:            Wed 22 Apr 2026 23:40:50 +0000
asID:                     267961
IP address blocks:        2804:55dc::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.crl
                          rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 17:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ff:31:56:c8:d1:9b:00:3c:65:33:b7:6d:df:c9:0d:86:13:6e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9
        Validity
            Not Before: Apr 23 23:35:50 2025 GMT
            Not After : Apr 22 23:40:50 2026 GMT
        Subject: CN=11690788A7A2C5F354CA6002461249E157B37299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:dd:8f:98:f4:26:c9:c0:f2:1d:08:cf:17:96:
                    de:e5:22:8c:75:bb:02:eb:52:5e:75:9c:5f:60:e5:
                    83:2f:40:1f:49:8a:38:12:69:ef:11:07:8e:2e:4f:
                    0d:34:37:8e:97:75:57:7b:ec:f2:95:8c:4f:bc:2e:
                    41:2c:2c:b8:39:fd:7d:63:83:c9:eb:81:50:5f:83:
                    02:64:c9:9e:54:0e:92:07:f3:86:29:f8:2d:69:52:
                    d4:fa:8a:99:af:a4:b5:9f:87:d6:7b:fc:18:6e:31:
                    f4:98:f2:b3:bb:b9:b4:6a:1a:ca:21:1f:52:27:9a:
                    36:33:c5:a6:40:cd:49:f7:63:f1:fb:4f:2a:36:b2:
                    db:81:4b:67:42:be:af:d0:33:a1:42:fc:f3:47:46:
                    61:a3:fb:16:7c:e5:8b:ff:54:da:2c:2f:1c:1a:61:
                    07:2c:e2:96:3a:63:f9:7f:39:9c:ac:61:23:19:5f:
                    2d:26:e5:26:5c:97:fb:0d:96:49:41:5b:a9:16:b4:
                    f7:16:1b:0c:09:45:ad:8b:ad:da:51:1c:e3:ca:27:
                    b1:24:19:52:94:87:ad:69:f4:ea:70:de:46:60:dd:
                    50:87:40:6b:69:aa:59:b0:bc:27:da:bc:0a:ab:bf:
                    87:7c:58:c3:cc:82:f7:49:77:38:87:12:b2:07:e2:
                    4f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:69:07:88:A7:A2:C5:F3:54:CA:60:02:46:12:49:E1:57:B3:72:99
            X509v3 Authority Key Identifier:
                keyid:D2:AE:FA:F2:B7:60:F9:72:62:D0:C9:4D:C2:7C:0D:3B:1B:7D:B5:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a3a2f33352d3335203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55dc::/35

    Signature Algorithm: sha256WithRSAEncryption
         c5:a2:a9:9d:97:01:ce:a2:37:f8:1a:29:1d:23:a2:95:56:0a:
         2a:01:fd:86:80:27:7a:6e:75:7f:2d:78:58:2f:9a:ed:c7:e2:
         5b:1e:14:76:76:3b:f9:4a:b6:2e:d1:12:da:59:3f:a2:18:8f:
         9b:c1:31:71:49:e3:8a:f8:7f:7c:cf:1a:9b:e9:be:39:0d:1a:
         25:c5:e9:9c:b1:6d:e3:67:c6:0c:b9:16:1e:65:fa:fa:78:d9:
         77:86:2a:2f:15:33:18:d7:ab:5e:a9:5d:ff:cc:ed:a6:bb:4c:
         8c:af:6b:2f:c7:ad:3e:b3:85:2b:01:bf:b5:65:e1:e7:07:62:
         51:1d:53:d8:83:d4:70:fd:5e:5e:7c:b9:7c:5c:bc:16:0b:6f:
         30:7c:96:ef:82:5a:87:bf:a8:8c:e3:77:04:4c:a5:b8:03:a4:
         31:3c:83:f8:96:72:dd:3d:b9:60:09:06:07:8b:b8:6c:04:5f:
         4e:0b:0d:c2:75:8d:2f:fd:ee:87:28:c2:15:56:20:69:f3:0b:
         d5:c8:89:70:67:09:39:10:36:98:38:3f:81:7f:3d:23:c8:82:
         bb:a5:9f:74:a9:c9:35:f8:08:24:a5:cd:f7:ce:bf:8f:c5:d9:
         37:19:b6:c7:44:bd:f5:45:12:cc:11:c9:5c:d9:87:fe:67:c8:
         3e:65:bb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:01:57 2025 by rpki-client on console.sobornost.net