Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a3230303a3a2f34382d3438203d3e20323637353630.roa
File:                     323830343a343334383a3230303a3a2f34382d3438203d3e20323637353630.roa (raw, json)
Hash identifier:          vA+ntDCxkGR4j97p9kiFJ+W4GDG1e39HLpJxijxOBBI=
Subject key identifier:   D8:F1:E9:83:CA:91:0C:BF:0C:2D:D9:6B:2C:CE:8C:42:D6:44:3C:D8
Certificate issuer:       /CN=5757B4F80D8B38607E29B24387063FFFF6B2B426
Certificate serial:       0BE748E958FF98DEE1FA361AEECB47395D98874A
Authority key identifier: 57:57:B4:F8:0D:8B:38:60:7E:29:B2:43:87:06:3F:FF:F6:B2:B4:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5757B4F80D8B38607E29B24387063FFFF6B2B426.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a3230303a3a2f34382d3438203d3e20323637353630.roa
Signing time:             Thu 05 Jun 2025 19:41:21 +0000
ROA not before:           Thu 05 Jun 2025 19:36:21 +0000
ROA not after:            Thu 04 Jun 2026 19:41:21 +0000
asID:                     267560
IP address blocks:        2804:4348:200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/5757B4F80D8B38607E29B24387063FFFF6B2B426.crl
                          rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/5757B4F80D8B38607E29B24387063FFFF6B2B426.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5757B4F80D8B38607E29B24387063FFFF6B2B426.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 14:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e7:48:e9:58:ff:98:de:e1:fa:36:1a:ee:cb:47:39:5d:98:87:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5757B4F80D8B38607E29B24387063FFFF6B2B426
        Validity
            Not Before: Jun  5 19:36:21 2025 GMT
            Not After : Jun  4 19:41:21 2026 GMT
        Subject: CN=D8F1E983CA910CBF0C2DD96B2CCE8C42D6443CD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:3a:59:d8:79:05:4e:1c:02:33:ee:dc:cf:45:
                    b0:24:d0:93:35:d4:1b:c8:ac:4c:e9:d4:cc:27:12:
                    b3:1d:93:90:e0:4e:6b:52:9b:d0:6d:38:f9:49:a0:
                    e1:3b:62:3d:78:3e:ec:51:ea:73:92:89:97:a8:c5:
                    2d:d3:10:36:30:73:d2:75:58:f2:65:6b:ae:95:34:
                    27:26:13:6f:d8:67:5c:e8:d6:41:67:c7:d7:4d:c5:
                    2e:db:b0:9d:f8:59:33:43:b8:b7:9b:8e:72:4f:74:
                    12:a6:36:d3:3e:a5:71:ce:96:1c:2a:61:64:6c:37:
                    f6:c0:4a:07:52:e7:ba:46:32:14:a5:24:4c:35:cd:
                    0d:46:f6:c7:8c:6d:eb:33:93:3d:ae:1f:b9:0e:53:
                    8e:48:52:ef:84:d8:cd:44:f1:04:56:a6:28:83:b3:
                    a3:6e:e7:c0:4d:99:65:e1:11:32:80:71:75:f9:06:
                    42:c4:c6:fd:04:8b:2d:dd:e6:50:14:27:1a:f5:43:
                    c5:e1:2e:39:99:d8:7b:fa:47:b6:87:22:9a:2f:9c:
                    90:c0:1a:5f:1e:c5:3e:e1:b5:44:35:16:09:71:60:
                    55:dd:6b:b9:ba:72:53:da:73:44:17:0f:54:c8:f9:
                    e4:9b:64:46:c7:ef:64:86:88:ee:26:43:d9:c8:52:
                    d2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F1:E9:83:CA:91:0C:BF:0C:2D:D9:6B:2C:CE:8C:42:D6:44:3C:D8
            X509v3 Authority Key Identifier:
                keyid:57:57:B4:F8:0D:8B:38:60:7E:29:B2:43:87:06:3F:FF:F6:B2:B4:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/5757B4F80D8B38607E29B24387063FFFF6B2B426.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5757B4F80D8B38607E29B24387063FFFF6B2B426.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a3230303a3a2f34382d3438203d3e20323637353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4348:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:af:e4:19:0d:b9:b0:84:da:39:d8:4d:87:51:94:3a:c6:11:
         0f:7b:33:f7:c7:6b:05:8c:23:61:a8:7f:f3:03:48:40:82:0f:
         7c:85:a7:f0:65:03:d5:c0:72:83:2a:46:c9:99:69:7c:76:cd:
         33:2b:66:50:56:16:c0:26:eb:78:17:4a:67:83:e8:45:3b:9e:
         ab:90:a6:37:cc:54:a8:1f:68:5a:46:78:e2:3a:22:7b:5b:bc:
         82:25:6c:f2:8a:66:80:b4:1b:dc:df:8d:b3:fa:8a:20:d6:f7:
         96:a5:6e:e7:f8:92:99:b8:b1:2e:d1:62:d4:2d:11:ca:fe:cf:
         c0:63:97:d2:74:14:0f:55:80:ab:5b:b4:b5:05:14:ff:ff:76:
         72:56:be:7b:b7:17:9d:22:16:25:d6:6d:53:14:68:6a:fe:55:
         bb:4f:0f:01:4f:a3:c1:5f:3a:5a:89:1b:9b:1e:8f:04:88:07:
         ac:d4:b9:fa:93:30:78:08:32:d0:dc:02:f5:47:54:e7:a9:68:
         96:18:1a:f7:11:9b:56:fc:66:bd:10:b5:18:ad:8d:13:0a:f8:
         05:aa:63:e4:e9:c1:bc:d5:f5:93:28:d6:48:d5:3d:5d:a8:ee:
         c5:12:32:b8:92:2a:73:9f:0b:d2:5c:54:e7:21:77:56:9f:89:
         b8:c0:86:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:39:18 2025 by rpki-client