Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a333030303a3a2f33362d3336203d3e20323637353630.roa
File:                     323830343a343334383a333030303a3a2f33362d3336203d3e20323637353630.roa (raw, json)
Hash identifier:          BSIdkTjm8kG7ELPHhkG/VN3KOEsCEpiOPqQy95JfssU=
Subject key identifier:   5E:FE:49:D8:64:59:23:44:F5:9E:D7:8F:4D:EB:05:FE:3C:B0:A9:9F
Certificate issuer:       /CN=5757B4F80D8B38607E29B24387063FFFF6B2B426
Certificate serial:       40348C52DDD0A3EBD66A0FA871D04C7420ABB655
Authority key identifier: 57:57:B4:F8:0D:8B:38:60:7E:29:B2:43:87:06:3F:FF:F6:B2:B4:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5757B4F80D8B38607E29B24387063FFFF6B2B426.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a333030303a3a2f33362d3336203d3e20323637353630.roa
Signing time:             Thu 05 Jun 2025 19:41:18 +0000
ROA not before:           Thu 05 Jun 2025 19:36:18 +0000
ROA not after:            Thu 04 Jun 2026 19:41:18 +0000
asID:                     267560
IP address blocks:        2804:4348:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/5757B4F80D8B38607E29B24387063FFFF6B2B426.crl
                          rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/5757B4F80D8B38607E29B24387063FFFF6B2B426.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5757B4F80D8B38607E29B24387063FFFF6B2B426.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 02:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:34:8c:52:dd:d0:a3:eb:d6:6a:0f:a8:71:d0:4c:74:20:ab:b6:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5757B4F80D8B38607E29B24387063FFFF6B2B426
        Validity
            Not Before: Jun  5 19:36:18 2025 GMT
            Not After : Jun  4 19:41:18 2026 GMT
        Subject: CN=5EFE49D864592344F59ED78F4DEB05FE3CB0A99F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a5:29:ed:52:72:67:cf:03:0f:b9:d3:fa:04:
                    19:8c:12:52:6e:f5:37:ff:31:71:62:69:ab:8a:2f:
                    11:7e:9f:1f:a1:00:e8:42:ea:dc:7b:e3:5d:00:1a:
                    08:ec:6d:96:bb:25:a8:d3:ca:3d:3b:9b:14:29:e4:
                    76:2e:a7:ab:05:6d:47:5a:01:c2:fa:ba:de:6f:63:
                    88:f0:f5:b7:ec:56:1e:51:81:60:be:68:dd:f2:71:
                    53:28:e6:06:5f:f7:75:54:72:cd:6d:86:d5:e9:9b:
                    89:94:97:a0:77:a8:91:bf:7c:ab:e9:94:2b:bc:58:
                    2b:55:ed:56:99:d0:4f:ec:a3:ad:5a:5c:3a:2b:fb:
                    52:12:9f:e5:f4:fc:3c:b3:ce:a2:a5:9c:10:87:ed:
                    ef:f8:9d:56:70:ca:75:c9:12:ec:15:04:80:b1:80:
                    8d:d3:ba:61:e8:b9:04:8f:2c:02:c3:46:fd:c8:40:
                    87:d0:55:34:da:78:97:54:f1:2f:20:85:8f:57:46:
                    d7:39:2c:e9:28:8b:cf:4a:75:0a:ce:9b:db:77:7a:
                    e4:fa:40:99:a9:58:97:69:d7:16:d3:6a:47:41:2b:
                    03:59:f8:1e:bb:7f:22:08:1a:69:f0:00:ed:07:5e:
                    53:37:6b:93:0e:a8:91:15:52:24:69:17:5c:2f:3d:
                    70:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:FE:49:D8:64:59:23:44:F5:9E:D7:8F:4D:EB:05:FE:3C:B0:A9:9F
            X509v3 Authority Key Identifier:
                keyid:57:57:B4:F8:0D:8B:38:60:7E:29:B2:43:87:06:3F:FF:F6:B2:B4:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/5757B4F80D8B38607E29B24387063FFFF6B2B426.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5757B4F80D8B38607E29B24387063FFFF6B2B426.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a333030303a3a2f33362d3336203d3e20323637353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4348:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6f:9c:fa:67:4f:d0:bc:8c:b6:0a:6d:86:6a:f8:4b:39:4a:05:
         ab:5b:34:38:27:b9:18:ea:5d:0f:09:43:1f:e5:d2:10:e0:18:
         d4:ef:99:84:ee:cd:90:58:4d:f3:91:59:e3:8d:ac:9a:e9:b9:
         3f:de:5c:50:e9:85:83:26:3e:3f:7d:a8:4c:e9:fb:94:c3:08:
         23:91:db:63:2b:48:55:c0:7f:6a:9c:26:d3:35:55:e0:bc:4d:
         11:8f:69:ae:28:fe:04:36:ad:4c:9e:d9:86:ef:07:9d:c3:a3:
         68:9a:41:a1:ca:35:1d:4a:f4:a1:49:3f:f0:ae:49:10:8e:8e:
         c6:5e:bf:20:5e:09:34:ee:5c:fc:b4:b4:fd:11:65:9f:ad:64:
         db:8a:c7:84:ef:f2:be:b1:a0:2b:90:e8:5e:8e:74:fb:97:c8:
         f4:b5:70:26:7f:dc:68:a2:55:2f:7a:94:ef:6f:d5:10:0a:f7:
         34:61:70:d0:0b:67:21:8c:5b:d2:a0:5f:2a:6e:66:87:67:c8:
         fd:a8:8b:9f:37:2a:f8:10:b4:12:7f:c0:58:0f:6f:90:ca:4a:
         e6:01:14:46:9e:90:2e:a7:e7:05:12:f5:52:c8:3b:35:34:b9:
         fc:5a:49:d3:ea:14:df:b7:3d:f5:2d:92:fb:b4:d3:cc:0d:1e:
         a1:ce:0a:9d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUQDSMUt3Qo+vWag+ocdBMdCCrtlUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTc1N0I0RjgwRDhCMzg2MDdFMjlCMjQzODcwNjNGRkZG
NkIyQjQyNjAeFw0yNTA2MDUxOTM2MThaFw0yNjA2MDQxOTQxMThaMDMxMTAvBgNV
BAMTKDVFRkU0OUQ4NjQ1OTIzNDRGNTlFRDc4RjRERUIwNUZFM0NCMEE5OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDupSntUnJnzwMPudP6BBmMElJu
9Tf/MXFiaauKLxF+nx+hAOhC6tx7410AGgjsbZa7JajTyj07mxQp5HYup6sFbUda
AcL6ut5vY4jw9bfsVh5RgWC+aN3ycVMo5gZf93VUcs1thtXpm4mUl6B3qJG/fKvp
lCu8WCtV7VaZ0E/so61aXDor+1ISn+X0/DyzzqKlnBCH7e/4nVZwynXJEuwVBICx
gI3TumHouQSPLALDRv3IQIfQVTTaeJdU8S8ghY9XRtc5LOkoi89KdQrOm9t3euT6
QJmpWJdp1xbTakdBKwNZ+B67fyIIGmnwAO0HXlM3a5MOqJEVUiRpF1wvPXAZAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUXv5J2GRZI0T1ntePTesF/jywqZ8wHwYDVR0j
BBgwFoAUV1e0+A2LOGB+KbJDhwY///aytCYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2VUb0NxR0VWR0R5dHhrbmlGTHJpanJka0pQb2RtTDlnY0JYZlNFbXcy
dTIvMC81NzU3QjRGODBEOEIzODYwN0UyOUIyNDM4NzA2M0ZGRkY2QjJCNDI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3NTdCNEY4MEQ4QjM4NjA3
RTI5QjI0Mzg3MDYzRkZGRjZCMkI0MjYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dlVG9DcUdFVkdEeXR4a25pRkxyaWpyZGtKUG9kbUw5Z2NCWGZTRW13MnUyLzAv
MzIzODMwMzQzYTM0MzMzNDM4M2EzMzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNzM1MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEQ0gwMA0GCSqGSIb3DQEBCwUA
A4IBAQBvnPpnT9C8jLYKbYZq+Es5SgWrWzQ4J7kY6l0PCUMf5dIQ4BjU75mE7s2Q
WE3zkVnjjaya6bk/3lxQ6YWDJj4/fahM6fuUwwgjkdtjK0hVwH9qnCbTNVXgvE0R
j2muKP4ENq1MntmG7wedw6NomkGhyjUdSvShST/wrkkQjo7GXr8gXgk07lz8tLT9
EWWfrWTbiseE7/K+saArkOhejnT7l8j0tXAmf9xoolUvepTvb9UQCvc0YXDQC2ch
jFvSoF8qbmaHZ8j9qIufNyr4ELQSf8BYD2+QykrmARRGnpAup+cFEvVSyDs1NLn8
WknT6hTftz31LZL7tNPMDR6hzgqd
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:42:49 2025 by rpki-client