Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a323030303a3a2f33362d3336203d3e20323637353630.roa
File:                     323830343a343334383a323030303a3a2f33362d3336203d3e20323637353630.roa (raw, json)
Hash identifier:          22m20yW7KY0yLF6b8fXhmRk4eDlh2op82RfYBaMDufs=
Subject key identifier:   05:8A:55:AF:2D:CB:B8:D8:8B:C8:53:FA:07:B3:9C:11:8C:FB:5E:4B
Certificate issuer:       /CN=5757B4F80D8B38607E29B24387063FFFF6B2B426
Certificate serial:       0D35A5A57B2EC947041E913A14BD6FC9A6C3B728
Authority key identifier: 57:57:B4:F8:0D:8B:38:60:7E:29:B2:43:87:06:3F:FF:F6:B2:B4:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5757B4F80D8B38607E29B24387063FFFF6B2B426.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a323030303a3a2f33362d3336203d3e20323637353630.roa
Signing time:             Thu 05 Jun 2025 19:41:20 +0000
ROA not before:           Thu 05 Jun 2025 19:36:20 +0000
ROA not after:            Thu 04 Jun 2026 19:41:20 +0000
asID:                     267560
IP address blocks:        2804:4348:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/5757B4F80D8B38607E29B24387063FFFF6B2B426.crl
                          rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/5757B4F80D8B38607E29B24387063FFFF6B2B426.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5757B4F80D8B38607E29B24387063FFFF6B2B426.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 05:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:35:a5:a5:7b:2e:c9:47:04:1e:91:3a:14:bd:6f:c9:a6:c3:b7:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5757B4F80D8B38607E29B24387063FFFF6B2B426
        Validity
            Not Before: Jun  5 19:36:20 2025 GMT
            Not After : Jun  4 19:41:20 2026 GMT
        Subject: CN=058A55AF2DCBB8D88BC853FA07B39C118CFB5E4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ac:39:2c:c0:a9:62:ee:33:63:f8:fb:e1:cf:
                    c6:45:11:4e:f1:05:4e:67:e5:79:9a:a0:e7:63:1a:
                    b8:d8:a6:7b:9d:11:86:de:3b:9c:ba:a5:2a:f2:e0:
                    a1:ca:39:05:1e:79:5a:91:00:74:00:37:a7:32:81:
                    8b:31:d1:c2:7f:8e:ac:8a:2c:81:95:c4:cc:6e:46:
                    81:2f:79:30:67:1c:44:1f:43:59:68:32:4a:fd:4b:
                    16:d9:e8:c8:06:87:3b:54:7c:12:72:22:b0:d4:f0:
                    ba:f5:02:2a:73:0c:0e:cd:ac:6c:0d:e1:03:79:8e:
                    59:19:73:6a:86:2e:d6:66:18:f7:f1:5a:7b:7c:71:
                    f1:0d:18:45:a3:f1:c5:35:13:83:e9:16:4d:b6:cb:
                    89:6f:89:88:73:33:9b:e3:a5:fe:75:d4:f3:36:84:
                    34:da:3e:ad:5e:1a:c7:71:51:c5:dc:ee:e3:bf:6e:
                    1b:26:b0:42:a2:69:f0:10:2e:6d:3d:cd:90:93:d1:
                    4d:20:07:32:64:9e:f7:c6:7d:48:8a:02:b5:5c:39:
                    b4:15:fd:5f:02:75:bf:71:5b:57:f0:9c:4c:81:09:
                    41:af:88:69:7b:be:d3:72:3e:bc:10:6c:de:ad:3d:
                    62:3f:f2:93:df:d6:84:e9:52:6c:dd:05:8d:b2:5a:
                    da:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8A:55:AF:2D:CB:B8:D8:8B:C8:53:FA:07:B3:9C:11:8C:FB:5E:4B
            X509v3 Authority Key Identifier:
                keyid:57:57:B4:F8:0D:8B:38:60:7E:29:B2:43:87:06:3F:FF:F6:B2:B4:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/5757B4F80D8B38607E29B24387063FFFF6B2B426.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5757B4F80D8B38607E29B24387063FFFF6B2B426.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a323030303a3a2f33362d3336203d3e20323637353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4348:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         27:26:37:58:36:ee:f8:db:45:ef:3b:ca:4a:b2:26:ab:e7:8f:
         ce:de:6e:d3:d9:68:62:c5:c4:34:75:49:d1:b8:5c:3b:d0:00:
         64:4f:2c:46:e7:94:1b:49:41:dc:88:d7:51:3e:26:7d:33:ed:
         1e:cd:64:db:49:fd:2f:49:ac:07:3b:d3:8a:8f:d4:20:49:ec:
         1f:a9:e0:92:fc:28:ce:c6:d6:d7:9b:a1:5a:e3:b5:f0:e8:9e:
         86:97:9f:fc:e6:e0:a1:87:3f:d8:78:ef:06:ee:1a:54:48:a4:
         9d:ae:f6:5c:b8:62:bb:c3:d7:63:99:7d:70:dd:8f:2c:fd:04:
         0e:23:73:82:8f:92:e1:d1:c7:f8:31:ff:aa:85:5f:e9:ca:46:
         53:2b:63:d8:ce:e0:35:16:19:a6:49:7c:4d:81:cf:21:ca:dd:
         2c:41:41:36:a5:08:62:79:e8:c0:ef:64:0f:54:e8:03:bd:15:
         ce:d0:cf:9f:59:c9:4d:65:bb:9c:bb:2b:4a:5f:7c:d2:50:5a:
         13:39:95:4a:c6:fc:b9:71:5d:53:ad:1a:9a:57:c3:3c:b2:a4:
         64:66:bb:d7:c7:4f:bf:5e:49:3d:de:0d:b0:26:73:17:fa:63:
         f3:42:6e:50:0c:85:6b:8e:a7:be:3f:9f:5a:d3:6a:aa:e1:dc:
         ab:0e:43:16
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUDTWlpXsuyUcEHpE6FL1vyabDtygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTc1N0I0RjgwRDhCMzg2MDdFMjlCMjQzODcwNjNGRkZG
NkIyQjQyNjAeFw0yNTA2MDUxOTM2MjBaFw0yNjA2MDQxOTQxMjBaMDMxMTAvBgNV
BAMTKDA1OEE1NUFGMkRDQkI4RDg4QkM4NTNGQTA3QjM5QzExOENGQjVFNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZrDkswKli7jNj+Pvhz8ZFEU7x
BU5n5XmaoOdjGrjYpnudEYbeO5y6pSry4KHKOQUeeVqRAHQAN6cygYsx0cJ/jqyK
LIGVxMxuRoEveTBnHEQfQ1loMkr9SxbZ6MgGhztUfBJyIrDU8Lr1AipzDA7NrGwN
4QN5jlkZc2qGLtZmGPfxWnt8cfENGEWj8cU1E4PpFk22y4lviYhzM5vjpf511PM2
hDTaPq1eGsdxUcXc7uO/bhsmsEKiafAQLm09zZCT0U0gBzJknvfGfUiKArVcObQV
/V8Cdb9xW1fwnEyBCUGviGl7vtNyPrwQbN6tPWI/8pPf1oTpUmzdBY2yWtrLAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUBYpVry3LuNiLyFP6B7OcEYz7XkswHwYDVR0j
BBgwFoAUV1e0+A2LOGB+KbJDhwY///aytCYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2VUb0NxR0VWR0R5dHhrbmlGTHJpanJka0pQb2RtTDlnY0JYZlNFbXcy
dTIvMC81NzU3QjRGODBEOEIzODYwN0UyOUIyNDM4NzA2M0ZGRkY2QjJCNDI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3NTdCNEY4MEQ4QjM4NjA3
RTI5QjI0Mzg3MDYzRkZGRjZCMkI0MjYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dlVG9DcUdFVkdEeXR4a25pRkxyaWpyZGtKUG9kbUw5Z2NCWGZTRW13MnUyLzAv
MzIzODMwMzQzYTM0MzMzNDM4M2EzMjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNzM1MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEQ0ggMA0GCSqGSIb3DQEBCwUA
A4IBAQAnJjdYNu7420XvO8pKsiar54/O3m7T2WhixcQ0dUnRuFw70ABkTyxG55Qb
SUHciNdRPiZ9M+0ezWTbSf0vSawHO9OKj9QgSewfqeCS/CjOxtbXm6Fa47Xw6J6G
l5/85uChhz/YeO8G7hpUSKSdrvZcuGK7w9djmX1w3Y8s/QQOI3OCj5Lh0cf4Mf+q
hV/pykZTK2PYzuA1FhmmSXxNgc8hyt0sQUE2pQhieejA72QPVOgDvRXO0M+fWclN
ZbucuytKX3zSUFoTOZVKxvy5cV1TrRqaV8M8sqRkZrvXx0+/Xkk93g2wJnMX+mPz
Qm5QDIVrjqe+P59a02qq4dyrDkMW
-----END CERTIFICATE-----
Generated at Sun Jun 8 10:03:03 2025 by rpki-client