Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a3a2f33352d3335203d3e20323637393631.roa
File:                     323830343a353564633a3a2f33352d3335203d3e20323637393631.roa (raw, json)
Hash identifier:          I3DDt0LocaJcYp56bF+MLP6ArBgN/OgZ8SnzWDhC0BU=
Subject key identifier:   81:F9:1F:38:7B:55:FC:51:14:BE:A0:58:CC:91:F4:E4:3F:F2:07:56
Certificate issuer:       /CN=5D6EE216A61DC7F3FE2995D319908D11F231A74F
Certificate serial:       4D0AD3EDDBB2CD04ACAE6E9F7F4A943C02F63A05
Authority key identifier: 5D:6E:E2:16:A6:1D:C7:F3:FE:29:95:D3:19:90:8D:11:F2:31:A7:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6EE216A61DC7F3FE2995D319908D11F231A74F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a3a2f33352d3335203d3e20323637393631.roa
Signing time:             Sat 25 Oct 2025 20:46:34 +0000
ROA not before:           Sat 25 Oct 2025 20:41:34 +0000
ROA not after:            Sat 24 Oct 2026 20:46:34 +0000
asID:                     267961
IP address blocks:        2804:55dc::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/5D6EE216A61DC7F3FE2995D319908D11F231A74F.crl
                          rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/5D6EE216A61DC7F3FE2995D319908D11F231A74F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6EE216A61DC7F3FE2995D319908D11F231A74F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:20:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:0a:d3:ed:db:b2:cd:04:ac:ae:6e:9f:7f:4a:94:3c:02:f6:3a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D6EE216A61DC7F3FE2995D319908D11F231A74F
        Validity
            Not Before: Oct 25 20:41:34 2025 GMT
            Not After : Oct 24 20:46:34 2026 GMT
        Subject: CN=81F91F387B55FC5114BEA058CC91F4E43FF20756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:49:ea:14:d2:a5:a1:57:43:00:aa:24:ab:50:
                    50:d9:cf:fc:c7:e3:9f:dd:1f:16:64:fe:6d:10:ad:
                    93:24:2c:d6:c7:0b:7a:33:92:4f:0d:b9:f6:92:9d:
                    36:71:d2:9b:7b:f4:ce:fe:75:70:e1:eb:8b:78:d0:
                    60:17:44:de:43:1f:79:ef:f2:f3:3c:c5:80:a2:8d:
                    e7:c2:39:b2:92:cb:39:36:03:a9:12:4d:60:7b:e7:
                    95:74:a2:7b:fe:ab:b0:bf:57:b0:eb:e9:e5:02:b2:
                    67:50:d5:e9:af:4b:74:f4:84:f9:25:27:a3:5d:35:
                    0f:a5:20:e4:68:eb:2a:b5:fe:e9:a6:3c:52:f2:a8:
                    79:ee:a7:45:f6:b3:38:b8:ac:11:50:de:8f:a3:21:
                    b9:05:5e:5b:45:28:85:de:95:04:f1:c3:38:e5:1b:
                    e5:ea:e9:11:8a:5c:eb:8a:33:a2:5b:fb:73:0d:74:
                    3d:7b:b8:5a:eb:c0:e6:63:4b:23:34:d4:9c:24:0f:
                    21:6c:29:32:7f:68:3e:7d:d8:54:89:b7:90:a4:46:
                    7b:0f:68:bb:cf:15:af:c7:36:79:27:91:46:62:e9:
                    9f:20:ca:82:26:ca:86:ba:a3:03:a1:99:96:39:e6:
                    52:d5:2c:1c:28:ab:0d:27:92:74:1a:90:4c:b2:f5:
                    06:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F9:1F:38:7B:55:FC:51:14:BE:A0:58:CC:91:F4:E4:3F:F2:07:56
            X509v3 Authority Key Identifier:
                keyid:5D:6E:E2:16:A6:1D:C7:F3:FE:29:95:D3:19:90:8D:11:F2:31:A7:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/5D6EE216A61DC7F3FE2995D319908D11F231A74F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6EE216A61DC7F3FE2995D319908D11F231A74F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a3a2f33352d3335203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55dc::/35

    Signature Algorithm: sha256WithRSAEncryption
         c1:22:ac:3c:71:64:2f:6f:c5:3f:a8:2d:69:84:31:f3:71:d7:
         58:b2:1a:d7:51:43:61:4d:ec:b9:ab:86:3f:72:e5:99:28:fd:
         47:77:c4:37:fa:fc:e8:57:61:65:42:37:51:f5:3a:43:7a:a4:
         c1:de:8e:66:47:6a:46:af:70:26:fa:91:85:6f:80:d4:04:f3:
         03:d7:a8:c5:73:91:42:91:4b:86:a2:79:3c:a7:cd:93:c1:21:
         93:a1:e3:a9:0f:0e:d5:6c:f5:f9:9d:5a:32:5b:42:bb:82:6f:
         6c:a0:d0:3a:cb:58:4e:18:4b:9f:f6:44:a8:69:bd:11:4a:ec:
         a2:60:05:2e:0d:d9:c3:80:10:cc:12:cd:4f:98:c8:c2:d6:b1:
         31:29:92:e6:0f:56:23:78:c3:32:0a:e8:45:78:aa:9a:f1:11:
         8d:7b:41:46:08:e0:4d:44:f3:18:5e:f9:38:03:3b:a0:b3:0b:
         a3:bc:d6:3d:a6:73:b5:d4:5b:8e:b7:2b:0f:38:c8:f4:52:f9:
         bf:4a:bf:19:1b:7d:d7:3f:a2:dd:fe:f4:e8:82:94:76:7c:36:
         e7:e6:8a:d7:fa:50:8b:1a:ab:5c:89:4f:e4:05:af:72:83:a4:
         8c:ac:59:dd:16:3c:d4:30:e3:1c:f2:6b:24:aa:9a:3b:0f:ae:
         41:33:10:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:27:36 2025 by rpki-client