Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a383030303a3a2f33352d3335203d3e20323637393631.roa
File:                     323830343a353564633a383030303a3a2f33352d3335203d3e20323637393631.roa (raw, json)
Hash identifier:          U83RKljKxsteuUVkubDNX5Lu+NRLGASWibwoeTOdLfk=
Subject key identifier:   59:82:D5:DA:72:C7:E5:33:EF:F2:02:9B:41:60:00:A8:F1:D2:41:9C
Certificate issuer:       /CN=09B7AECB18318973134EAE9276452AE4B68453CF
Certificate serial:       64C374A596F11695F4BC29580BF5B57D54ECCC46
Authority key identifier: 09:B7:AE:CB:18:31:89:73:13:4E:AE:92:76:45:2A:E4:B6:84:53:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B7AECB18318973134EAE9276452AE4B68453CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a383030303a3a2f33352d3335203d3e20323637393631.roa
Signing time:             Mon 26 May 2025 16:07:24 +0000
ROA not before:           Mon 26 May 2025 16:02:24 +0000
ROA not after:            Mon 25 May 2026 16:07:24 +0000
asID:                     267961
IP address blocks:        2804:55dc:8000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/09B7AECB18318973134EAE9276452AE4B68453CF.crl
                          rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/09B7AECB18318973134EAE9276452AE4B68453CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B7AECB18318973134EAE9276452AE4B68453CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 14:28:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c3:74:a5:96:f1:16:95:f4:bc:29:58:0b:f5:b5:7d:54:ec:cc:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B7AECB18318973134EAE9276452AE4B68453CF
        Validity
            Not Before: May 26 16:02:24 2025 GMT
            Not After : May 25 16:07:24 2026 GMT
        Subject: CN=5982D5DA72C7E533EFF2029B416000A8F1D2419C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:23:d0:0d:90:7f:32:11:2b:45:11:a2:fc:99:
                    71:8f:88:1e:77:1c:ad:58:32:56:8d:10:64:49:98:
                    a6:9e:44:b4:19:a5:8d:f5:d5:48:bb:33:9d:a7:d5:
                    2b:1f:c5:31:2f:35:b2:44:95:86:f6:e7:26:78:e7:
                    72:59:9c:f5:34:57:1d:11:ab:15:16:dc:61:c7:c0:
                    92:d2:67:43:ce:c3:84:b6:ca:9b:91:3c:d2:80:7a:
                    55:b5:61:c2:88:28:84:c8:38:dd:34:2f:af:12:5b:
                    b4:0e:79:2b:af:7a:04:e1:8c:12:bc:b2:d5:31:de:
                    65:15:96:b3:10:c0:9b:ce:18:ea:24:f8:4c:b0:ff:
                    ba:b1:ff:e8:ec:e1:37:84:d5:ec:60:be:74:9c:05:
                    21:fa:af:51:47:cc:a0:fe:b2:2f:bb:e9:82:59:84:
                    7b:2b:52:0a:d1:fa:0c:7f:96:cf:f8:0e:2d:3a:6b:
                    53:d4:82:09:07:82:ee:87:2b:b9:9f:f0:71:60:37:
                    af:c2:79:5e:e9:43:fd:13:61:c4:2d:18:d1:63:33:
                    5b:cf:9e:a0:3b:44:bc:e4:e6:3b:9b:a4:03:86:a9:
                    12:3a:0a:55:cc:4c:61:0a:8f:2a:52:08:35:87:a2:
                    43:93:e3:a0:b6:da:a9:64:45:3f:7d:eb:8f:a7:45:
                    a8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:82:D5:DA:72:C7:E5:33:EF:F2:02:9B:41:60:00:A8:F1:D2:41:9C
            X509v3 Authority Key Identifier:
                keyid:09:B7:AE:CB:18:31:89:73:13:4E:AE:92:76:45:2A:E4:B6:84:53:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/09B7AECB18318973134EAE9276452AE4B68453CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B7AECB18318973134EAE9276452AE4B68453CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a383030303a3a2f33352d3335203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55dc:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         4d:78:ba:c9:c8:9d:16:de:42:9e:1e:c9:9c:9d:0f:fd:c6:aa:
         19:cb:2e:d6:a1:bb:36:c1:5d:72:5e:34:87:a0:1c:a2:37:7b:
         af:f1:c0:89:9d:13:05:1a:b3:9d:53:0e:1d:e5:d0:25:69:97:
         4d:cb:7e:0d:68:e8:02:40:66:5d:eb:30:80:71:c4:88:d3:dc:
         92:c4:2d:79:4d:0d:c9:9d:99:32:95:fe:22:37:3c:8b:6e:ef:
         02:3a:98:53:41:ff:9c:c1:57:63:6e:a8:df:a6:d3:ef:0d:f4:
         4e:db:58:9e:0a:15:37:f7:bd:85:20:a9:19:35:76:04:fc:ca:
         2d:58:f6:cf:49:e2:7a:e3:07:bf:98:50:0f:2f:0f:08:2a:66:
         99:e9:91:a9:7a:ff:d0:7c:9f:40:e3:70:c0:ec:50:70:ea:5c:
         0e:78:95:40:fe:86:19:19:90:de:c1:fd:9c:91:fd:1a:6f:95:
         de:cf:f9:a2:34:a0:df:c4:b9:d5:70:8d:0d:95:1e:b8:e4:e0:
         53:45:bd:24:b3:59:79:4e:8d:2f:74:d5:d5:23:c2:12:db:31:
         da:32:40:d4:57:d0:c4:50:5e:5b:9b:83:7b:e1:66:3f:3c:42:
         bc:c9:d4:bc:bf:13:d6:02:11:94:c0:6f:8a:8b:09:d6:a6:9a:
         97:3e:bf:a7
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUZMN0pZbxFpX0vClYC/W1fVTszEYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlCN0FFQ0IxODMxODk3MzEzNEVBRTkyNzY0NTJBRTRC
Njg0NTNDRjAeFw0yNTA1MjYxNjAyMjRaFw0yNjA1MjUxNjA3MjRaMDMxMTAvBgNV
BAMTKDU5ODJENURBNzJDN0U1MzNFRkYyMDI5QjQxNjAwMEE4RjFEMjQxOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8I9ANkH8yEStFEaL8mXGPiB53
HK1YMlaNEGRJmKaeRLQZpY311Ui7M52n1SsfxTEvNbJElYb25yZ453JZnPU0Vx0R
qxUW3GHHwJLSZ0POw4S2ypuRPNKAelW1YcKIKITION00L68SW7QOeSuvegThjBK8
stUx3mUVlrMQwJvOGOok+Eyw/7qx/+js4TeE1exgvnScBSH6r1FHzKD+si+76YJZ
hHsrUgrR+gx/ls/4Di06a1PUggkHgu6HK7mf8HFgN6/CeV7pQ/0TYcQtGNFjM1vP
nqA7RLzk5jubpAOGqRI6ClXMTGEKjypSCDWHokOT46C22qlkRT9964+nRahfAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUWYLV2nLH5TPv8gKbQWAAqPHSQZwwHwYDVR0j
BBgwFoAUCbeuyxgxiXMTTq6SdkUq5LaEU88wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2V1RnRIUUwzUTMxY0Jjbm9iRlZkcEN2WUdpQTZiMTRnQnh6V1hKWGR6
aFYvMC8wOUI3QUVDQjE4MzE4OTczMTM0RUFFOTI3NjQ1MkFFNEI2ODQ1M0NGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5QjdBRUNCMTgzMTg5NzMx
MzRFQUU5Mjc2NDUyQUU0QjY4NDUzQ0YuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dldUZ0SFFMM1EzMWNCY25vYkZWZHBDdllHaUE2YjE0Z0J4eldYSlhkemhWLzAv
MzIzODMwMzQzYTM1MzU2NDYzM2EzODMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzYzNzM5MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEVdyAMA0GCSqGSIb3DQEBCwUA
A4IBAQBNeLrJyJ0W3kKeHsmcnQ/9xqoZyy7Wobs2wV1yXjSHoByiN3uv8cCJnRMF
GrOdUw4d5dAlaZdNy34NaOgCQGZd6zCAccSI09ySxC15TQ3JnZkylf4iNzyLbu8C
OphTQf+cwVdjbqjfptPvDfRO21ieChU3972FIKkZNXYE/MotWPbPSeJ64we/mFAP
Lw8IKmaZ6ZGpev/QfJ9A43DA7FBw6lwOeJVA/oYZGZDewf2ckf0ab5Xez/miNKDf
xLnVcI0NlR645OBTRb0ks1l5To0vdNXVI8IS2zHaMkDUV9DEUF5bm4N74WY/PEK8
ydS8vxPWAhGUwG+KiwnWppqXPr+n
-----END CERTIFICATE-----
Generated at Sun Jun 8 21:09:02 2025 by rpki-client