Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a653030303a3a2f33352d3335203d3e20323637393631.roa
File:                     323830343a353564633a653030303a3a2f33352d3335203d3e20323637393631.roa (raw, json)
Hash identifier:          QGF7+RrfuQ2BpKqPQ9wYDQYHpwyLI65qm204RPmWcdA=
Subject key identifier:   EF:08:75:D5:B8:54:E4:D7:66:14:E1:A2:87:1F:B5:90:84:FA:76:D7
Certificate issuer:       /CN=D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9
Certificate serial:       72E6BB7632023BABF5070B0E1C9AC4DFC5AA41D0
Authority key identifier: D2:AE:FA:F2:B7:60:F9:72:62:D0:C9:4D:C2:7C:0D:3B:1B:7D:B5:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a653030303a3a2f33352d3335203d3e20323637393631.roa
Signing time:             Wed 23 Apr 2025 23:40:50 +0000
ROA not before:           Wed 23 Apr 2025 23:35:50 +0000
ROA not after:            Wed 22 Apr 2026 23:40:50 +0000
asID:                     267961
IP address blocks:        2804:55dc:e000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.crl
                          rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:37:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e6:bb:76:32:02:3b:ab:f5:07:0b:0e:1c:9a:c4:df:c5:aa:41:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9
        Validity
            Not Before: Apr 23 23:35:50 2025 GMT
            Not After : Apr 22 23:40:50 2026 GMT
        Subject: CN=EF0875D5B854E4D76614E1A2871FB59084FA76D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8f:59:13:33:ed:c8:bd:da:87:c6:50:e2:c9:
                    88:ae:70:95:a1:d6:26:0c:9f:f5:f0:4e:3f:78:0e:
                    5a:c8:37:87:c8:bc:55:97:78:9e:c8:a0:64:39:81:
                    a3:bd:aa:26:d3:94:35:83:9e:ce:7b:18:4d:f0:e8:
                    92:96:af:d1:bb:47:53:a5:5e:44:82:5b:3f:69:6d:
                    eb:b1:d0:c6:b8:d7:7a:a8:95:32:a9:e3:96:02:aa:
                    75:11:5d:ab:91:7a:6c:08:dc:29:7f:3a:4d:c1:b2:
                    e8:38:02:58:c0:bf:23:c8:07:5b:a2:a5:b2:8e:1d:
                    ee:79:39:d8:4b:39:93:8e:f5:71:ac:08:b6:93:5a:
                    0e:92:64:15:c8:01:10:16:69:8c:e3:25:2f:a1:fd:
                    03:85:03:18:9e:82:72:06:71:e2:e8:90:e8:d8:6f:
                    2e:42:40:85:8e:a0:76:cd:dc:26:e7:f6:ef:97:d3:
                    83:84:70:99:aa:a9:28:80:09:97:57:44:5e:71:4f:
                    62:1a:0e:f2:01:ab:ab:97:e3:9a:14:6d:bf:60:ca:
                    4d:d5:6d:26:ef:08:7f:f0:a2:8d:80:25:ae:8e:0b:
                    7b:0e:00:cb:2c:2f:4a:be:6d:f1:a6:e8:61:0f:ba:
                    06:ee:8c:0d:4a:80:83:41:7d:2a:ab:b3:1a:e5:5d:
                    79:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:08:75:D5:B8:54:E4:D7:66:14:E1:A2:87:1F:B5:90:84:FA:76:D7
            X509v3 Authority Key Identifier:
                keyid:D2:AE:FA:F2:B7:60:F9:72:62:D0:C9:4D:C2:7C:0D:3B:1B:7D:B5:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a653030303a3a2f33352d3335203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55dc:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         13:53:e0:bd:8b:71:56:25:d3:c9:09:8c:39:1f:d2:d9:50:1b:
         0b:c3:fc:4c:c7:a1:af:52:f1:f1:09:2a:77:3e:eb:42:85:f8:
         87:d8:95:c1:44:fe:ec:34:98:c2:6d:b1:fe:34:59:96:08:42:
         91:e7:b5:a3:0e:20:2c:ec:6e:96:30:e1:59:42:a1:5c:94:78:
         17:3c:06:1c:31:41:56:a8:2d:70:cf:5f:eb:fd:67:4d:47:2a:
         cc:16:55:05:f2:7e:2f:06:5b:aa:97:76:04:98:0c:00:5d:c5:
         da:16:96:0b:f4:c7:16:ac:f4:3c:55:59:a1:cb:26:09:8a:21:
         e7:e0:93:db:2e:58:e8:6f:f5:33:e8:0b:30:75:9d:95:03:7c:
         66:12:cf:0c:ca:14:73:af:f5:53:70:c3:05:e6:fe:47:46:f3:
         8f:46:b9:bc:11:e0:6a:67:07:53:b6:08:6c:bd:f0:f1:3d:72:
         03:26:fa:ad:b7:b3:8c:26:95:fa:15:69:4e:d1:db:3e:4b:0e:
         1d:c1:1c:95:50:85:f8:9e:b9:a2:7f:f2:9c:da:b7:07:f2:5c:
         f6:c0:0b:f9:7b:bc:32:4a:16:04:7d:e2:0f:67:8e:4b:3e:6e:
         40:f1:87:e4:65:b4:3b:4f:58:1d:ed:a4:bc:e9:30:55:9e:97:
         f8:84:93:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:29 2025 by rpki-client on console.sobornost.net