Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a613030303a3a2f33352d3335203d3e20323637393631.roa
File:                     323830343a353564633a613030303a3a2f33352d3335203d3e20323637393631.roa (raw, json)
Hash identifier:          QEPj6a1QjEr/WD4448qSRhSEFy4mRSAVgFLCUmp8mnM=
Subject key identifier:   BB:DD:E4:FE:42:C6:57:6D:11:D9:49:11:DA:2D:EE:62:1F:52:6A:21
Certificate issuer:       /CN=5D6EE216A61DC7F3FE2995D319908D11F231A74F
Certificate serial:       7A11B3CAFCBD9D48AAE605E637E6F991E13B35BA
Authority key identifier: 5D:6E:E2:16:A6:1D:C7:F3:FE:29:95:D3:19:90:8D:11:F2:31:A7:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6EE216A61DC7F3FE2995D319908D11F231A74F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a613030303a3a2f33352d3335203d3e20323637393631.roa
Signing time:             Sat 25 Oct 2025 20:46:36 +0000
ROA not before:           Sat 25 Oct 2025 20:41:36 +0000
ROA not after:            Sat 24 Oct 2026 20:46:36 +0000
asID:                     267961
IP address blocks:        2804:55dc:a000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/5D6EE216A61DC7F3FE2995D319908D11F231A74F.crl
                          rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/5D6EE216A61DC7F3FE2995D319908D11F231A74F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6EE216A61DC7F3FE2995D319908D11F231A74F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:20:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:11:b3:ca:fc:bd:9d:48:aa:e6:05:e6:37:e6:f9:91:e1:3b:35:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D6EE216A61DC7F3FE2995D319908D11F231A74F
        Validity
            Not Before: Oct 25 20:41:36 2025 GMT
            Not After : Oct 24 20:46:36 2026 GMT
        Subject: CN=BBDDE4FE42C6576D11D94911DA2DEE621F526A21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:76:4e:5f:4a:ca:33:a7:88:fa:65:9e:a3:c6:
                    8a:c8:d6:01:e4:ec:c2:12:6a:16:30:86:d8:99:26:
                    33:20:e9:66:ae:c2:89:8b:81:f4:6c:36:05:59:b9:
                    2e:ae:ce:cd:66:15:62:86:0c:54:36:35:1b:56:72:
                    51:5b:fd:d1:2a:eb:95:3b:61:a4:4c:3b:47:97:85:
                    45:7c:e3:42:f2:30:9a:7e:78:43:ca:9a:20:f0:4f:
                    e6:1e:77:50:46:69:1a:68:e2:7b:18:bd:e7:05:e2:
                    2f:1e:61:b1:49:ca:61:12:85:4c:59:cf:52:67:7e:
                    84:bd:3f:20:f4:e3:62:81:33:6a:c7:af:a0:d8:a3:
                    70:92:95:89:0d:40:1c:0a:70:33:fe:69:7a:fe:bd:
                    27:75:39:0a:3e:eb:6a:dc:1f:0a:9b:d5:57:0c:ef:
                    9f:5c:b9:e1:27:ad:a2:8e:b8:59:29:99:1a:98:b2:
                    0e:2b:10:f7:39:da:57:32:67:7b:ed:09:8e:97:0b:
                    33:df:48:2c:9d:08:4d:30:6e:48:9d:7f:24:06:6e:
                    f1:a8:6e:be:3b:6f:ce:a2:55:e7:fa:50:7a:43:6b:
                    01:ed:aa:74:7a:be:32:52:b7:67:86:0d:fb:f6:5e:
                    62:f9:22:de:0f:49:8d:58:f4:90:0e:37:56:7c:c8:
                    3e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DD:E4:FE:42:C6:57:6D:11:D9:49:11:DA:2D:EE:62:1F:52:6A:21
            X509v3 Authority Key Identifier:
                keyid:5D:6E:E2:16:A6:1D:C7:F3:FE:29:95:D3:19:90:8D:11:F2:31:A7:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/5D6EE216A61DC7F3FE2995D319908D11F231A74F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6EE216A61DC7F3FE2995D319908D11F231A74F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a613030303a3a2f33352d3335203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55dc:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         9b:57:f3:eb:7d:d4:3a:e0:af:40:02:a2:f3:4b:7d:94:4b:c7:
         c6:e1:b9:93:97:36:3e:b7:75:d9:0a:fe:80:81:fe:3c:27:c3:
         77:8f:71:a1:1a:b4:43:ac:1c:cd:19:38:55:03:7a:37:f3:98:
         dd:6e:5f:87:13:46:63:1d:86:57:f0:72:3d:fe:38:e4:b7:11:
         2b:f6:84:5d:b1:63:d8:aa:39:0e:7d:e8:0a:c1:d3:e1:54:9f:
         99:4a:f5:c3:27:93:21:bc:05:f4:22:f1:c3:99:fb:11:4b:77:
         77:48:d1:eb:94:65:a5:c4:4b:0f:e7:dd:fa:4c:4c:b8:ba:22:
         5d:03:ef:86:02:bc:e1:20:9d:4a:37:69:82:48:2b:47:39:d8:
         22:6f:a8:d2:cc:3c:f9:32:0d:a7:80:0d:29:65:a8:cd:1b:0c:
         32:9e:3f:fe:04:fc:33:6f:5d:ee:37:0f:22:1d:05:53:8b:1b:
         38:2b:60:d1:f6:84:68:04:19:65:a1:4a:2c:b2:d3:a5:1d:2a:
         59:50:7d:30:1d:14:f1:f6:ad:d4:c1:2e:e5:68:d1:ef:1b:d8:
         ec:99:80:7e:c6:89:2b:94:1b:6f:fb:bc:1f:c1:1e:df:b9:d7:
         ee:ba:f0:62:92:43:c2:d4:a4:cd:10:2c:09:be:ec:f3:24:17:
         ac:0f:0b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:28:33 2025 by rpki-client